Privacy Policy

This Privacy Policy explains what personal data Panoralink Business Solutions (pvt) Ltd (PV 00286766) ("we", "us", "our") collects through clazz.lk, how we use and protect it, who we share it with, and your rights. It applies to teachers, students (and, for a student under 18, their parent or guardian — see our Student Terms), and visitors.

1. What We Collect

We collect the information you give us directly — name, email, phone number, password, and, where relevant, identity and bank-account details for payout verification (see our AML / KYC Policy) — along with information generated by using the platform, such as enrolment and purchase records, messages, quiz results, and technical data (device, browser, IP address, and cookies — see our Cookie Policy). We do not knowingly collect more identity information from a student than a guardian has provided.

2. How We Use It

We use this data to operate the platform (create and secure your account, deliver classes/courses/quizzes you buy or teach, process payments and payouts), to communicate with you (transactional emails, SMS alerts you or your guardian have opted into, support), to keep the platform safe (fraud and abuse prevention, moderation under our Acceptable Use Policy), and to meet our legal obligations (tax, AML/KYC, responding to lawful requests from authorities).

3. Who We Share It With

We share personal data only as needed to run the platform: with payment processors to complete a purchase or payout; with cloud hosting, database, and file-storage providers who process data on our behalf under contract; with SMS and email providers to deliver messages you or your institute have triggered; with an educator, limited to what is needed for them to teach and support their own students; and with a regulator, law-enforcement body, or court where required by law. We do not sell personal data to third parties. Some of our service providers process data outside Sri Lanka; where they do, we require them to protect it to a standard consistent with this policy.

4. Retention

How long we keep different categories of data is set out in our Data Retention Policy — in short, only for as long as needed for the purpose collected, except where the law requires a longer minimum (in particular financial and KYC records).

5. Your Rights

You (or, for a minor student, their guardian) can ask to access, correct, or delete your personal data, or object to marketing use of it, by contacting us as below or through your account settings. Deletion requests are handled as described in our Data Retention Policy — we will honour a valid request except where we are legally required to retain specific records.

6. Security

We use reasonable technical and organisational measures — including encryption of sensitive credentials, access controls, and restricted internal access to payment and identity data — to protect personal data against unauthorised access, loss, or misuse. No system is completely secure, and we cannot guarantee absolute security.

7. Children's Privacy

Where a student is under 18, their account is created and controlled by a parent or guardian under our Student Terms, and we rely on that guardian's consent for the collection and use of the student's personal data.

8. Changes to This Policy

We may update this policy from time to time. Where changes are material, we will take reasonable steps to notify you before they take effect.

Governing Law & Regulatory Framework

This document is intended to comply with the laws of the Democratic Socialist Republic of Sri Lanka, including, where relevant, the Personal Data Protection Act No. 9 of 2022 and the Electronic Transactions Act No. 19 of 2006.

These terms are governed by the laws of the Democratic Socialist Republic of Sri Lanka. The parties will first attempt in good faith to resolve any dispute by negotiation; failing that, the courts of Colombo have exclusive jurisdiction, save that any dispute may instead, by agreement of the parties, be referred to arbitration under the Arbitration Act No. 11 of 1995, seated in Colombo and conducted in English. Nothing in this clause limits any right or remedy a consumer has under the Consumer Affairs Authority Act No. 9 of 2003.

Contact

Questions about this document can be sent to support@clazz.lk. This document is issued by Panoralink Business Solutions (pvt) Ltd (PV 00286766) ("we", "us", "our"), the operator of the clazz.lk platform.