Privacy Policy

Effective Date: 01/09/2025 [DD/MM/YYYY]
Last Updated: 01/09/2025 [DD/MM/YYYY]


DTK Cyber Academy (“we,” “our,” “us”) operates the platform academy.dtk.lk, delivering online training in networking and cybersecurity. This Privacy Policy explains how we collect, use, store, and disclose your information when you use our services. By registering on our platform, you agree to the terms of this Privacy Policy.



1. Information We Collect


We may collect the following types of information:


  1. Personal Information

    • Full name, email address, phone number, billing information, and profile picture.

  2. Account & Course Data

    • Usernames, login credentials, enrolled courses, progress, quiz results, and certificates.

  3. Payment Information

    • Payment details (processed securely via third-party payment gateways). We do not store full credit/debit card details.

  4. Technical Data

    • IP addresses, browser type, device information, operating system, cookies, and usage logs.

  5. Communications

    • Emails, support requests, feedback, and any other correspondence with us.



2. How We Use Information


Your information may be used for:


  • Delivering courses, digital content, and certificates.

  • Verifying student identity and certificate authenticity.

  • Processing payments and billing.

  • Communicating course updates, promotions, and administrative notices.

  • Improving platform functionality, security, and user experience.

  • Compliance with Sri Lankan laws and legal obligations.



3. Public Visibility of Data


  • Certificates issued by DTK Cyber Academy may be publicly accessible via a direct verification link.

  • Profile names, uploaded images, and certificates can be viewed by anyone who possesses the link.

  • By using our platform, you consent to this method of verification.



4. Data Sharing & Disclosure


We do not sell or rent your personal data. However, we may share information with:


  • Service Providers: Payment gateways, hosting providers, email delivery systems.

  • Legal Authorities: If required by law, court order, or government regulation.

  • Partners: For course delivery, accreditation, or verification purposes (where applicable).



5. Data Storage & Retention


  • Data is stored securely on servers with reasonable safeguards.

  • Course records and certificates may be retained indefinitely for verification purposes.

  • Personal information will be retained as long as your account is active or as required by law.



6. Data Security


  • We implement technical and organizational measures to protect data (encryption, firewalls, secure servers).

  • However, no system is 100% secure. DTK Cyber Academy cannot guarantee the absolute security of transmitted data.

  • Users are responsible for safeguarding their login credentials.



7. User Rights


Under the Personal Data Protection Act, No. 9 of 2022 (Sri Lanka), users may:


  • Request access to the personal data we hold about you.

  • Request corrections to inaccurate data.

  • Request deletion of data (where legally permissible).

  • Withdraw consent to marketing communications.


To exercise these rights, contact [email protected]. Requests will be processed within 30 days, subject to legal and contractual obligations.



8. Cookies & Tracking


  • We use cookies and tracking technologies for analytics, personalization, and platform improvements.

  • Users may disable cookies in their browser, but this may affect functionality.



9. Third-Party Links


  • Our platform may contain links to third-party websites.

  • We are not responsible for the privacy practices or content of third-party sites.



10. Children’s Privacy


  • Our services are intended for users aged 16 and above.

  • We do not knowingly collect information from children under 16. If discovered, such data will be deleted immediately.



11. International Data Transfers


  • While we primarily operate in Sri Lanka, data may be transferred and stored outside Sri Lanka by third-party service providers.

  • By using our platform, you consent to such transfers.



12. Updates to this Policy


  • We may update this Privacy Policy periodically.

  • Updates will be posted on academy.dtk.lk with a revised “Last Updated” date.

  • Continued use of the platform constitutes acceptance of the revised policy.



13. Governing Law & Jurisdiction


  • This Privacy Policy is governed by the laws of the DEMOCRATIC SOCIALIST REPUBLIC OF SRI LANKA, including the Personal Data Protection Act, No. 9 of 2022.

  • Any disputes shall fall under the jurisdiction of the courts of Sri Lanka.

DTK Cyber Academy

From Sri Lanka to the cloud – build IT skills without boundaries.