Privacy Policy

HDI CAMPUS

Last Updated: 18 January 2026

HDI CAMPUS (Business Name), legally operated by H D Institute (Pvt) Ltd (“we”, “our”, or “us”), is committed to protecting the privacy, confidentiality, and security of personal information provided by students, applicants, staff, partners, and website visitors.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal data in accordance with applicable data protection laws, ethical standards, and best practices in higher education.

By accessing or using the HDI CAMPUS website, Learning Management Systems (LMS), online applications, or services, you agree to the terms of this Privacy Policy.

1. Information We Collect

We may collect the following categories of personal information:

1.1 Personal Identification Information

  • Full name
  • National Identity Card (NIC) / Passport number
  • Date of birth
  • Gender
  • Nationality

1.2 Contact Information

  • Email address
  • Telephone / mobile number
  • Postal address

1.3 Academic and Professional Information

  • Educational qualifications and transcripts
  • Enrollment and registration records
  • Assignments, examinations, and results
  • Research proposals, dissertations, and publications
  • Academic correspondence

1.4 Technical and Usage Information

  • IP address
  • Browser type and device details
  • Website usage data
  • LMS activity logs

1.5 Payment and Financial Information

  • Payment references and receipts
  • Transaction confirmations

HDI CAMPUS does not store full credit or debit card details.

2. Methods of Data Collection

Personal data is collected through:

  • Online application and registration forms
  • Website inquiry and contact forms
  • Learning Management Systems (LMS)
  • Email, WhatsApp, and official communications
  • Online payment and enrollment processes
  • Cookies and website analytics tools

3. Purpose of Data Processing

We collect and process personal information for legitimate academic and administrative purposes, including:

  • Admissions, registration, and enrollment
  • Academic delivery (online and on-site)
  • Assessments, examinations, and evaluations
  • Certification, transcripts, and verification services
  • Student support and official communication
  • Financial processing and record keeping
  • Research supervision and academic publication
  • Legal, regulatory, and institutional compliance
  • Quality assurance, audits, and reporting

4. Legal Basis for Processing

Personal data is processed based on:

  • Consent provided by the data subject
  • Performance of an educational contract
  • Compliance with legal and regulatory obligations
  • Legitimate academic and institutional interests

5. Data Sharing and Disclosure

HDI CAMPUS does not sell, rent, or trade personal data.

Information may be shared only when necessary with:

  • Partner universities and awarding institutions
  • Accreditation and examination authorities
  • Payment gateways and financial institutions
  • IT service providers (LMS, hosting, email systems)
  • Legal or regulatory authorities when required by law

All third parties are required to maintain strict confidentiality and appropriate data protection measures.

6. International Data Transfers

As HDI CAMPUS collaborates with international academic partners and digital platforms, personal data may be transferred and processed outside Sri Lanka.

Such transfers are conducted using appropriate safeguards to ensure confidentiality, integrity, and security of personal information.

7. Data Security

We implement suitable technical and organizational measures, including:

  • Secure servers and encrypted connections (SSL)
  • Restricted access to authorized personnel
  • Secure LMS and database systems
  • Continuous monitoring and security updates

While no system can guarantee absolute security, HDI CAMPUS takes all reasonable steps to prevent unauthorized access, loss, misuse, or disclosure of data.

8. Data Retention

Personal data is retained only for as long as required to fulfill:

  • Academic and certification obligations
  • Legal and regulatory requirements
  • Verification, alumni, and institutional record purposes

Research theses, dissertations, and approved publications may be retained permanently for academic, archival, and scholarly purposes.

9. Cookies and Analytics

Our website uses cookies and analytics tools to:

  • Improve user experience
  • Analyze website performance and traffic
  • Enhance service quality

Users may manage or disable cookies through browser settings, though some website functions may be limited.

10. Rights of Data Subjects

You have the right to:

  • Access your personal data
  • Request correction of inaccurate or incomplete information
  • Request deletion, subject to legal and academic obligations
  • Withdraw consent where applicable
  • Object to certain data processing activities

Requests can be submitted using the contact details below.

11. Children’s Privacy

HDI CAMPUS services are primarily intended for individuals aged 18 and above. Where data of minors is collected, it is done only with appropriate parental or guardian consent in accordance with applicable laws.

12. Changes to This Privacy Policy

HDI CAMPUS reserves the right to update or revise this Privacy Policy at any time. Any changes will be published on this page with an updated revision date.

13. Contact Information

For privacy-related inquiries, data access requests, or concerns, please contact:

Business Name: HDI CAMPUS
Legal Name: H D Institute (Pvt) Ltd
Address: 05, Rajapihilla Mawatha, Kandy, Sri Lanka
Email: [email protected]
Website: www.hdicampus.edu.lk