ITsphere Digital Academy Pvt Ltd Website: https://itpanthiya.lk Last updated: 18 October 2026

ITsphere Digital Academy Pvt Ltd, Sri Lanka ("ITsphere", "we", "us"), operates this educational website. This policy explains how we handle information about students, parents or guardians, and website visitors, including information used by our Academic Progress service.

For privacy questions, corrections or deletion requests, contact info.itpanthiya@gmail.com.

Information we collect

Depending on how you use our services, we collect:

• Account and contact details: your name, username, email address, password in protected form, and other contact information you provide when registering or contacting us.
• Education and enrollment information: courses, class enrollment, examination year, institute or online class, and learning activity recorded by our learning platform.
• Academic records: assigned papers, answer-paper PDFs, submitted marks, verified results, grades, review requests, administrator comments, submission times, and progress reports.
• Messages and transactions: information you send in inquiries or support requests and, where applicable, course orders, payment status and transaction references.
• Online-class delivery information: the delivery address and two contact numbers collected through a Google Form to courier tutorials and papers to online-class students, together with the payment receipt you send to our Tute section to confirm payment.
• Technical and usage information: IP address, browser and device information, visited pages, interaction events, cookies and similar identifiers, and security or server logs.

Please submit only information needed for your studies or request. Do not include passwords, payment-card details, identity documents, or unrelated personal information in answer papers.

Why we use information

We use information to create and secure accounts; provide classes and course access; assign papers to the correct institute and examination year; receive, review and verify answers and marks; display progress, reports and rankings; respond to inquiries; send service messages; manage transactions; investigate misuse; and maintain the website.

Where enabled, we also use website activity information for analytics and marketing measurement. Newsletter subscriptions and promotional communications are optional. You can request that promotional emails stop; essential messages about your account or studies may still be necessary.

Where consent or another legal basis is required, we handle information in accordance with the applicable requirements. This policy does not replace any consent that must be obtained separately.

Online-class payments and courier delivery

After an online-class student makes a payment and sends the receipt to our Tute section, we collect the student's delivery address and two contact numbers through a Google Form. We use this information to confirm and coordinate delivery of tutorials and papers, contact the student about delivery, and resolve delivery problems. Payment receipts are used to verify payment and handle related queries.

The Google Form is hosted by Google, and responses are handled through the academy's Google account. Google processes information submitted through the form under its applicable terms and privacy policy. This is a separate collection process from uploading an answer PDF through the Academic Progress page.

We share the recipient and delivery details needed to fulfill the delivery, including the address and relevant contact numbers, with the courier or delivery provider. A second contact number helps us resolve delivery issues if the primary contact is unavailable. If you provide another person's number, make sure that person knows you are providing it for this purpose and that you have permission to do so.

Please check your delivery details before submitting the form and contact our Tute section promptly if they change. Providing an address and contact numbers for delivery does not itself subscribe either number to promotional messages. Information needed for delivery is required if you want materials couriered to you; contact us if you need to discuss an alternative arrangement.

Academic profiles, results and rankings

The examination year and institute selected during profile completion are locked against student changes. This helps keep academic records consistent. You can ask an administrator to correct inaccurate details by contacting us; the lock does not prevent correction requests.

Submitted marks remain subject to administrator review. Only approved results count toward verified academic statistics and rankings. Leaderboards may display a student identifier, marks, grade and rank. A student identifier is pseudonymous, and may still be linked to an account by authorized administrators. Where the public-name feature is enabled for your account, a leaderboard may show your name.

Answer papers and Google Drive

Answer PDFs are received temporarily by our website server and transferred to an academy-connected Google Drive account. The Academic Progress service stores the Drive file identifiers with submission records; it does not intentionally retain answer PDFs as WordPress media attachments.

Files are organized by institute, examination year, paper and answer type, such as MCQ, Part B or Unit Test answers. Authorized academy personnel use them to assess work, handle review requests and maintain academic records. Students do not need to authorize a personal Google Drive account to submit an answer paper.

An authorized academy administrator connects the academy's Google account. The integration requests the limited drive.file permission to create and access files and folders made available to that application. It stores authorization credentials so the website can continue transferring papers without repeated sign-in. It does not request unrestricted access to all files in the administrator's Drive.

The Drive integration uses Google data and file access to provide answer-paper storage, organization and academic review. It does not use Drive authorization credentials or answer-paper contents for advertising. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements where applicable.

The integration creates folders without adding public-sharing permissions. Access depends on the academy's Google account permissions; authorized administrators must maintain those permissions appropriately.

Disconnecting or revoking Google authorization stops future authorized API access. It does not automatically delete previously uploaded files or website academic records. Contact us to request deletion of those records.

Cookies, analytics and marketing technologies

We use cookies and related technologies for functions such as sign-in, session management, security and website performance. Blocking essential cookies can prevent account and course features from working.

The website also includes Meta and TikTok tracking integrations. These services may receive online identifiers, IP or device information, page visits and interaction events for analytics or marketing measurement, depending on the features enabled. Third-party resources, such as Google Fonts, may receive technical request information when your browser loads them.

Use any available website privacy controls, your browser settings, and the relevant provider's privacy controls to manage non-essential tracking. A cookie banner or browser setting may not control every form of data processing. Where applicable law requires consent for non-essential technologies, that consent must be obtained before they are used.

For further information, see Meta's Privacy Policy, TikTok's Privacy Policy, and Google's Privacy Policy.

Who receives information

Information is accessible to academy staff and authorized service providers to the extent needed for their roles. These include Hostinger for website hosting, Google for Drive storage and connected resources, email-delivery providers, and payment providers where used. The tracking services described above receive information through their respective integrations.

Google also hosts our online-class delivery form. Authorized Tute section staff handle payment receipts and delivery responses, and courier or delivery providers receive the information needed to deliver the requested materials.

We may disclose information when necessary to comply with applicable law, respond to a lawful request, or protect accounts and services from misuse. A selected institute helps determine your academic group; selecting an institute does not itself give everyone at that institute access to your account or answer papers.

Service providers may process or store information outside Sri Lanka. Their applicable terms, privacy policies and safeguards also govern their processing.

How long we retain information

Our retention period for answer-paper PDFs and associated academic results is 12 months after the end of the student's examination year, unless a longer period is necessary for an unresolved review, dispute or applicable legal obligation. For a programme recorded without a numerical examination year, we use the year in which the student completes that programme, as confirmed by the academy.

We review records for deletion or appropriate de-identification at the end of this period. This requires administrative action; the present Academic Progress service does not automatically erase records when the period expires.

Account details are retained while needed to provide the account and resolve related requests. Transaction, security and correspondence records are retained only as long as necessary for their purposes or applicable obligations. Backup copies may remain until the relevant backup rotation or removal process completes; retained backups must not be used to resume ordinary processing of deleted records.

Delivery addresses, contact numbers, Google Form responses and courier records are retained while needed to complete and resolve the relevant deliveries or ongoing material-dispatch arrangements. Payment receipts may be retained for payment verification, accounting, disputes and applicable obligations. The 12-month academic-record retention period above does not automatically apply to these separate delivery and transaction records.

Deleting a website submission does not necessarily delete its Drive PDF, backups or related records. A complete deletion request must cover the relevant storage locations and be handled by administration.

Students under 18

Our educational services include students under 18. If you are under 18, please read this policy with a parent or guardian and involve them in account and privacy decisions where appropriate. We seek parental or guardian involvement and any authorization required by applicable law.

A parent or guardian may contact us about a child's information. We may need to verify identity, the relationship and the authority to act before granting access or making changes. Please do not email unnecessary identity documents unless we explain why a particular verification step is needed.

Your choices and requests

You or an appropriately authorized representative can contact us to request access to your information, correction, deletion, or restrictions on its use; raise an objection; or withdraw consent where processing relies on consent. Available rights and exceptions depend on applicable law.

Use info.itpanthiya@gmail.com and identify the account or record concerned. We may verify the request before acting. Deletion can affect course access, progress history and the ability to review an academic result. If we must retain certain information, we will explain the reason where permitted. Withdrawing consent does not undo processing that was lawful before withdrawal.

Requests may also cover delivery information submitted through our Google Form or receipts sent to our Tute section. Deleting a website account does not automatically delete those separate records or information already held by a courier.

If a concern remains unresolved, you may contact the relevant data-protection authority, including the Data Protection Authority of Sri Lanka, as applicable.

Security and changes

We use measures such as authenticated accounts, restricted administrator functions, HTTPS and restricted Drive sharing to protect information. No website or storage service can guarantee absolute security. Keep your login details private and notify us if you suspect unauthorized access.

We may update this policy when our services or practices change. The revised date will appear above, and material changes will be communicated as appropriate. Where a change requires fresh consent, an updated policy alone does not provide that consent.

Privacy contact: ITsphere Digital Academy Pvt Ltd — info.itpanthiya@gmail.com