Last Updated: March 13, 2026

 

01. INTRODUCTION & SCOPE

Zuse Technologies provides advanced educational SaaS solutions, including Learning Management Systems (LMS) and Student Information Systems (SIS). We are committed to safeguarding the privacy of students, parents, and staff within the institutions we serve.

 

This policy details our data practices in strict accordance with the Personal Data Protection Act (PDPA), No. 9 of 2022. By using our services, you acknowledge the collection and use of information as described herein.

 

02. OUR ROLE: DATA PROCESSOR VS. DATA CONTROLLER

Under the PDPA, the educational institution acts as the Data Controller, as they determine the purpose and means of processing student and staff records. Zuse Technologies acts as the Data Processor, handling information solely according to the instructions provided by the institution to facilitate learning and administration.

 

03. DATA WE COLLECT

To provide a functional educational environment, we process the following categories of data:

 

    I. Institutional Data: School names, branch locations, and administrative contact details.

 

    II. User Profile Data: Full names, National ID/Passport numbers (where required for registration), email addresses, and contact numbers for students, parents, and educators.

 

    III. Academic & Operational Data: Attendance records, grades, course enrollments, and medical/allergy information necessary for student safety.

 

     IV. Technical Usage Data: IP addresses, browser types, and device identifiers collected through cookies to ensure system security and performance.

 

04. PURPOSE OF DATA PROCESSING

Zuse Technologies processes personal data only for specific, legitimate educational purposes as instructed by relevant Data Controllers. These purposes may include:

 

     I. Platform Operations: Providing and maintaining the LMS and SIS services, managing user accounts, and ensuring system security.

 

     II. Academic Management: Facilitating student enrollment, attendance tracking, grade management, and vital communication between the school, teachers, and parents.

 

     III. AI Enhanced Learning: Powering AI driven features to offer students personalized learning paths and automated academic support.

 

    IV. Safety & Compliance: Maintaining critical records like medical and emergency contact data for student safety and meeting our legal obligations under Sri Lankan law.

 

    V. Service Improvement: Analyzing anonymized technical usage data to optimize platform performance and the overall user experience.

 

05. SPECIAL PROTECTIONS FOR MINORS

Unlike generic SaaS providers, Zuse Technologies specifically serves educational environments involving children.

 

•  Consent: We process student data based on the consent provided by parents or legal guardians to the School, or as required by the educational contract between the parent and the institution.

• Safety First: We do not use student data for behavioural advertising or any purpose outside of the school’s academic and administrative needs.

 

06. THE A.T.T.R. COMMITMENT

We maintain the integrity of your data through our A.T.T.R. Standard:

• Accurate: We provide tools for users and admins to ensure data is error free.

• Timely: Systems are designed for real time updates (e.g., emergency contact changes).

• Traceable: All modifications to sensitive records are logged for audit purposes.

• Relevant: We only process data that is strictly necessary for educational operations.

07. DATA RETENTION & DISPOSAL

We retain personal data only for as long as instructed by the Data Controller (the School) or as required by Sri Lankan law for academic record keeping. When data is no longer required, it is subjected to Secure Disposal, including “Hard Deletion” from digital servers.

 

08. YOUR RIGHTS UNDER PDPA

Every data subject (or their legal guardian) has the following rights:

 

•  Right of Access: To request a copy of the personal data we hold.

• Right to Rectification: To correct inaccurate or incomplete information.

• Right to Withdraw Consent: To stop the processing of data where consent was the primary legal basis.

• Right to Erasure: To request the deletion of data when it is no longer necessary for the original purpose.

09. SECURITY & TRANSFERS

We employ industry standard encryption and access controls. While we strive for absolute security, users are responsible for maintaining the confidentiality of their own login credentials.

 

10. CONTACT US

For inquiries regarding data protection or to exercise your rights, please contact our Data Protection Officer (DPO):

Address:
Zuse Technologies (Pvt) Ltd
No. 10, Raymond Road, Nugegoda, Sri Lanka

 

Email:
[email protected]