Last Updated: October 8, 2026
This Privacy Policy explains how INVATAL (“we,” “us,” “our”) collects, uses, stores, and protects your personal information when you visit our website, create an account, enroll in a course, or make a payment. By using this website, you agree to the practices described in this policy.
- INFORMATION WE COLLECT
Information you give us:
- Your name, email address, and phone number when you create an account, enroll in a course, fill in a form, or contact us
- Your billing details (such as name and contact information) needed to process an order
- Messages you send us by email, forms, or WhatsApp
Information collected automatically:
- Your IP address, browser type, device type, and operating system
- Pages you visit, time spent on pages, and how you reach our website
- Course activity, such as lessons viewed and progress inside your learning account
Payment information:
- We do not collect or store your card number, CVV, or online banking details. All payments are handled by our third-party payment gateway (see Section 4).
- HOW WE USE YOUR INFORMATION
We use your information to:
- Create and manage your account and give you access to your courses
- Process your payments and confirm your orders
- Reply to your questions and provide support
- Send important updates about your account, courses, or this website
- Improve our courses, content, and website performance
- Prevent fraud, misuse, or unauthorized access
- Meet our legal and record-keeping duties
We will only send marketing messages if you have agreed to receive them, and you can opt out at any time.
- LEGAL BASIS
We process your personal information only when we have a valid reason, such as: you have given us your consent, it is needed to provide the service you requested, it is needed to follow the law, or it is needed for our genuine business interests such as keeping our website secure. We aim to follow the data protection laws of Sri Lanka, including the Personal Data Protection Act, No. 9 of 2022.
- PAYMENTS
Payments on this website are processed by OnePay, a third-party payment gateway. When you pay, you are handled on the payment gateway’s secure systems and your payment details are subject to their terms and privacy policy. We receive only the information needed to confirm your payment, such as the order reference, amount, and payment status.
- COOKIES AND ANALYTICS
Our website uses cookies and similar tools to:
- Keep you logged in and remember your session
- Make the website work properly
- Understand how visitors use our website, using analytics services such as Google Analytics
You can control or delete cookies through your browser settings. If you turn off cookies, some parts of the website, such as logging in to your courses, may not work properly.
- SHARING YOUR INFORMATION
We do not sell your personal information. We only share it with:
- Our payment gateway, to process your payment
- Service providers that help us run the website, such as hosting, email, and analytics services
- Government authorities, courts, or regulators, when required by law
- Other parties with your clear permission
These providers may only use your information to perform services for us.
- DATA STORAGE AND TRANSFERS
Your information may be stored on servers located outside Sri Lanka, because our hosting and analytics providers may operate internationally. We take reasonable steps to make sure your information stays protected wherever it is stored.
- DATA RETENTION
We keep your personal information only for as long as needed to provide our services, meet legal, tax, and accounting duties, and resolve disputes. When it is no longer needed, we delete or anonymize it.
- DATA SECURITY
We use reasonable technical and organizational measures to protect your information, such as secure connections (HTTPS) and password protection. However, no website or internet transmission is 100% secure, so we cannot guarantee absolute security. Please keep your account password private and use a strong one.
- YOUR RIGHTS
Subject to applicable law, you may ask us to:
- Show you the personal information we hold about you
- Correct information that is wrong or incomplete
- Delete your personal information
- Stop using your information for marketing
To make a request, email us at the address in Section 14. We may need to confirm your identity first. Some information may need to be kept for legal or accounting reasons, even after a deletion request.
- CHILDREN’S PRIVACY
Our website and courses are not meant for children under 18 years old. We do not knowingly collect personal information from anyone under 18 without the consent of a parent or guardian. If you believe a child has given us their information, please contact us and we will delete it.
- THIRD-PARTY LINKS
Our website may link to other websites and platforms, such as YouTube, WhatsApp, and social media. We are not responsible for the privacy practices or content of those third parties. Please read their policies before sharing your information.
- CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the updated date. By continuing to use our website after changes are posted, you accept the updated policy.
- CONTACT US
If you have any questions about this Privacy Policy or want to make a request about your personal information, please contact us at: Email: info@invatal.com Phone: 076 0732 084 Address: Kurunegala, Sri Lanka