Privacy Policy

Edexcel College (“the College”) operates edexcel.college and related student, parent, teacher, payment, and WhatsApp services. This policy explains what personal data we collect, why we use it, how it is stored, and how you can ask for access or deletion. It is intended to meet card-network requirements and Sri Lanka’s Personal Data Protection Act.

Information we collect

We collect:

• account details (name, phone number, email);
• class, timetable, attendance, and exam records;
• fee and payment records, including amounts, method, and OnePay transaction references (not full card numbers);
• bank-slip images you upload for verification;
• messages you send to the College WhatsApp number so we can reply and run support;
• technical logs such as IP address and device information needed to keep the site secure.

How we use it

We use this information to provide classes, attendance, exams, recordings, parent updates, and payments; to confirm fees; to contact you about College operations; and to meet legal and audit requirements. We do not sell personal data.

Payments

Card payments are processed by OnePay (Spemai (Pvt) Ltd). When you pay by card, OnePay receives the payer name, email, phone, amount, and payment details needed to complete the transaction. OnePay’s own privacy terms apply to that processing. The College stores the payment result and a transaction reference so we can unlock the class and issue a refund if required.

Sharing

We share data only with service providers who host this website, process payments (OnePay), send WhatsApp or SMS messages (including Meta when Cloud API is used), or as required by law. We do not share student records for marketing by third parties.

Storage and retention

Records are stored on the College’s servers and with those providers. We keep education, fee, and payment records for as long as needed for teaching, accounting, chargebacks, and legal requirements. You can ask us to correct inaccurate account details at any time.

Cookies and similar technologies

We use cookies and similar storage needed for login sessions, security (such as CSRF protection), language preference, and basic site operation. We do not use advertising trackers by default. If a measurement ID is configured by the College for analytics, it is used only to understand site usage and improve services.

Your rights

To access, correct, or delete personal data we hold, email info@edexcel.college or use the data deletion page. We will remove portal access and associated chatbot history that is not required by law or fee records, usually within 30 days.

See also our Terms and Conditions and Refund Policy.

Last updated: 11 September 2026.