This document applies to parents, guardians, school administrators and staff who use our school platform and its payment features. It sits under our Privacy Policy. For our mobile apps see the EduConnect Companion and KinderCare documents.
Our role and the school's role
Your school decides which students and parents are on the platform and what the platform is used for. We provide the software and process the information on the school's behalf and under its instructions, and we are the controller for the account, security and payment-processing records we create ourselves.
Information we collect
From you or your school
- Account details: name, email address, mobile number, postal address, preferred language and communication preferences. Date of birth may be asked for identity verification.
- Student details: name, school-assigned identification number, grade and class, enrolment information and the parent–student relationship. We use school-assigned IDs only.
- Communications: messages sent through the platform, support requests and feedback.
Payments
For each fee payment we record the amount and currency, date and time, reference numbers, payment status, and invoice and receipt information.
Collected automatically
IP address, device and browser type, pages and features used, and error logs. These are used to keep the platform secure, to diagnose faults and to improve it. The platform uses cookies or similar technology only to keep you signed in and to remember preferences.
From other sources
Your school (enrolment data), Commercial Bank of Ceylon PLC (payment status) and, where the law requires it, identity-verification or fraud-prevention services.
How we use information
- Create and manage accounts and give you access to the platform.
- Process fee payments, reconcile them with your school and settle amounts to it.
- Enable communication between parents and schools, and send receipts and service notices.
- Prevent fraud, secure the platform and fix technical problems.
- Respond to support requests and comply with the law.
Legal bases: performing our contract with the school and with you; legitimate interests in security and improving the service; legal obligations such as financial record-keeping.
Who receives it
| Recipient | What | Why |
|---|---|---|
| Your school | Student and enrolment details, payment records and status, parent contact details | To run school administration |
| Commercial Bank of Ceylon PLC and card networks | Transaction details | To authorise and settle payments |
| Hosting, email and support providers | Only what they need | To operate the service for us |
| Authorities | As legally required | To meet legal obligations or protect rights and safety |
We do not sell personal information, share student data with advertisers or use it for purposes unrelated to the service.
Retention
| Information | How long |
|---|---|
| Account data | While the account is active, plus 2 years |
| Payment records | 7 years, as banking regulations require |
| Communication records | 3 years |
| Technical logs | 1 year |
After these periods we delete or anonymise the data. It can remain in encrypted backups for a limited time before it is overwritten.
Security
Encryption in transit and for sensitive data at rest, role-based access, tokenised payment handling, monitoring for fraud, regular security reviews and confidentiality obligations for staff. See also the Payment Disclaimer.
Your rights
You have the rights described in the Privacy Policy. Because the school controls its students' records, we may refer requests about school data to the school, and we will tell you when we do. To request deletion of an account, email privacy@atelieroptimatix.com; we reply within 30 days. Some payment records must be kept for the legal retention period, and outstanding balances must be settled before closure.
Children
The platform is used by parents, guardians and school staff. Student information is provided by the school, and we do not collect personal information directly from children without the involvement of their school and parent or guardian.
Contact
privacy@atelieroptimatix.com, or by post to Atelier Optimatix (PVT) LTD, 320, Irabadagama, Sandalankawa 60176, Sri Lanka.