SLIIT is committed to protecting the privacy and personal data of all individuals who interact with us, including our students, staff, alumni, partners, and visitors to our websites and online services. We handle your personal information in a transparent, lawful, secure, and responsible manner, in line with applicable privacy principles and the Personal Data Protection Act, No. 9 of 2022 (PDPA) of Sri Lanka. The PDPA is designed to regulate how personal data is processed, strengthen the rights of data subjects, and establish a regulatory framework for data protection.

This Privacy Statement explains how we collect, use, store, protect, and disclose personal information when you interact with our services.

We may collect personal information when you:

• Visit or interact with our website
• Contact us or submit enquiries
• Apply for programs, register for events, or use our services.

This information may include, but is not limited to:

• Identity details: name, contact information (email, phone), demographic information
• Service related details: information related to your enquiry, application, enrolment, or participation
• Usage information: data about how you interact with our website and online services (e.g. IP address, device information, pages visited)
• Other voluntary information: data you provide through forms, surveys, or cookies preferences.

Some data may be collected automatically through cookies and similar technologies as outlined below.

We use personal information to:

• Provide and manage the services you request
• Process applications, enrolments, and payments
• Communicate important updates, offers, events, and service notices
• Improve our websites, services, and user experience
• Meet our legal and regulatory obligations
• Protect the rights, security, and safety of individuals

We will not sell, rent, or trade your personal information.

We may share your personal information with:

• Relevant internal departments, faculties, and authorized staff within SLIIT
• Third party service providers who help deliver our services (e.g. IT support, marketing, analytics, communications), only under strict confidentiality obligations..
• Government bodies, regulators, or law enforcement agencies when required by law.

We ensure that third parties accessing your data maintain appropriate safeguards and only use personal information for the purposes specified in this statement.

Our website uses cookies and similar technologies to enhance functionality, analyze site usage, and deliver relevant content.

We may also use certain data collected through cookies and website interactions for automated processing and limited profiling, such as:

• Understanding user preferences and behavior
• Improving website performance and user experience
• Delivering relevant content, communications, or marketing (where applicable and permitted by law)

Any such processing is conducted:

• Based on your consent (where required), or
• Where necessary for legitimate interests, provided such interests do not override your fundamental rights and freedoms

We do not carry out automated decision-making that produces legal or similarly significant effects on individuals.

You can manage your cookie preferences through the cookie banner when visiting our site and may withdraw consent at any time.

Types of cookies we use include:

• Necessary cookies: essential for website operation
• Performance and analytics cookies: help us improve site performance.
• Functionality cookies: remember your user preferences.
• Advertising and targeting cookies: may be used for personalized content/ad delivery (if applicable).

The PDPA grants you the following data subject rights, which you can exercise by contacting us:

• Right of Access: You can request access to personal data we hold about you
• Right to Withdraw Consent and Object: You may withdraw consent or object to processing that relies on consent
• Right to Correction or Completion: You can request correction of inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data under certain conditions

In addition:

• Right to Lodge a Complaint: If you believe your personal data has been processed in violation of the PDPA, you have the right to file a complaint with the Data Protection Authority of Sri Lanka.

If you wish to exercise any of these rights, please contact our Data Protection Contact listed below.

We implement appropriate technical and organizational measures to safeguard your personal information against unauthorized access, misuse, alteration, loss, or disclosure. Although we strive to protect your data, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain personal information only as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations, including those under PDPA which requires retention periods to be limited to what is necessary.

We may update this Privacy Statement to reflect changes in our practices, legal obligations under the PDPA, or user feedback. Any changes will be posted here with the effective date.

If you have questions, concerns, or requests regarding this Privacy Statement, or wish to exercise your rights under the PDPA, please contact:

Data Protection Contact

Ms. Chamari Mallikarathne
Senior Manager - Risk Management

Email: chamari.m@sliit.lk
Phone: +94 11 7543380

SLIIT Web Team

Email: webteam@sliit.lk
Phone: +94 11 754 4801

Last Update: 22nd April 2026