Suhurusara.lk (“Suhurusara”, “we”, “our”, or “us”) is an e-learning platform operated under Foundation.lk. We are committed to protecting the privacy, security, and responsible use of personal data collected through our website and learning management systems.
1. Scope of This Policy
This policy applies to all users of:
• www.suhurusara.lk website
• Suhurusara Learning Management System (LMS)
• Online courses, workshops, webinars, and assessments
• Forms, surveys, and communication channels managed by Suhurusara
2. Data We Collect
2.1 Personal Information
• Full name
• Email address
• Contact number
• Organization, school, or institute (if applicable)
2.2 Account & Learning Data
• Username and encrypted passwords
• Course enrollments and progress
• Assessment results and certificates
• Attendance records
2.3 Technical & Usage Data
• IP address
• Browser and device information
• Login timestamps
• LMS activity logs
2.4 Evaluation & Feedback Data
Suhurusara may collect data through post-course evaluations, surveys, feedback forms, and impact assessments, including learner feedback, self‑reported outcomes, satisfaction ratings, and qualitative responses.
3. Legal Basis for Processing
Suhurusara processes personal data based on user consent, contractual necessity for course delivery, legitimate educational interests, and compliance with legal obligations.
4. Purpose of Data Usage
4.1 Data is collected and used for:
• User registration and authentication
• Course delivery and learning progress tracking
• Certificate generation and verification
• Course-related communication
• Evaluation, reporting, and quality improvement
• Aggregated and anonymized statistical analysis
• Compliance with organizational and funding requirements
4.2 Automated Analytics & Platform Improvement
Automated tools and learning analytics may be used to improve course design, learner experience, and platform functionality. No automated decisions producing legal or significant personal effects are made.
5. User Consent & Acceptance
By creating an account or enrolling in a course, users confirm that they have read and agreed to this Data Usage Policy. Courses are intended primarily for users aged 16 and above. Where minors participate, parental or guardian consent is required.
6. Data Storage & Security
6.1 Security Measures
• Data is stored on secure servers
• Passwords are encrypted
• Access is limited to authorized personnel
• Measures are taken to prevent unauthorized access, loss, or misuse
6.2 Data Breach Management
In the event of a data breach, Suhurusara will take prompt remedial action and notify affected users where required using available contact details.
7. Data Sharing & Disclosure
Suhurusara does not sell, rent, or trade personal data. Data may be shared internally for academic or administrative purposes, in anonymized form with partners or donors, or when required by law.
8. Cross-Border Data Transfers
Data may be processed or stored using cloud services located outside Sri Lanka, subject to appropriate security and data protection safeguards.
9. Data Retention
• Data is retained only as long as necessary
• Certificates and academic records may be retained for verification
• Users may request data deletion subject to legal or operational limitations
10. User Rights
Users may:
• Access their personal data
• Request corrections or deletion where applicable
• Withdraw consent for non-essential communications.
Requests related to personal data may be submitted using the contact details below.
11. Cookies & Tracking
Cookies may be used to
• Maintain login sessions
• Improve system performance
• Analyze usage for improvements.
12. Third-Party Services
Trusted third-party services may be used for video hosting, email delivery, or analytics, and are required to follow appropriate data protection standards.
13. Policy Updates
This policy may be updated periodically. The latest version will be published on the Suhurusara website.
14. Contact Information
Suhurusara Team
Website: https://www.suhurusara.lk
Email: inquiries@suhurusara.lk