This is the overview of our privacy practices. It applies to everything we do, and points you to a dedicated document for each website or product so you only need to read what is relevant to you.
Website & contact form
What we collect when you browse atelieroptimatix.com or send us a message.
Cookies & third parties
The few outside services this website loads, and what each one can see.
Schools & payments platform
Accounts, student records and fee payments for schools using our platform.
EduConnect Companion app
The mobile app for parents, teachers and administrators.
KinderCare app
The mobile app for kindergartens and nurseries.
Who we are
The data controller for the personal information described in these documents is Atelier Optimatix (PVT) LTD, 320, Irabadagama, Sandalankawa 60176, Sri Lanka ("Atelier Optimatix", "we", "us").
For the school platform and the mobile apps, the school or institution that uses our software decides why and how its students' and parents' data is used, and we process that data on its behalf. Each product document explains who is responsible for what.
What we promise
- We do not sell personal information.
- We do not show advertising, and this website has no advertising or analytics trackers.
- We collect only what we need for the purpose described, and tell you what that purpose is.
- We never see or store full payment card numbers. Card payments are handled by the bank's payment gateway.
- You can ask what we hold about you, and ask us to correct or delete it.
Why we may use your information
Depending on the situation, we rely on one of these legal bases:
- Your request or a contract. To answer your message, create your account or provide the service you or your school signed up for.
- Legitimate interests. To keep our systems secure and free of spam, and to improve our services, where this does not override your rights.
- Legal obligation. For example, keeping financial records for the period the law requires.
- Consent. Where we ask for it, such as an optional profile photo or location permission in an app. You can withdraw consent at any time.
How long we keep information
Retention depends on the document that applies to you. In short: contact-form messages are kept for up to 24 months after our last contact with you; server logs are kept for no longer than the hosting provider retains them; account and student data is kept while the account is active and for a limited period afterwards; payment records are kept for seven years as banking regulations require. See each document for the exact periods.
Who we share information with
We share personal information only with:
- Schools and institutions that you or your child are connected to, for the purposes of that relationship.
- Service providers acting on our instructions, such as hosting, email delivery and the bank's payment gateway.
- Authorities, where required by law or to protect rights, safety and security.
- A successor organisation, if we are reorganised or sold. We would tell you first.
International transfers
Our own systems are operated from Sri Lanka. Some providers we use, such as GitHub (website hosting) and Cloudflare, operate globally, so your information may be processed in other countries, including outside the European Economic Area and the United Kingdom. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses.
Your rights
Under the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka and, for visitors in the European Economic Area or the United Kingdom, the GDPR and UK GDPR, you can:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information, or to restrict how we use it;
- object to processing based on our legitimate interests;
- withdraw consent you have given;
- receive your information in a portable format, where it applies.
To use any of these rights, email privacy@atelieroptimatix.com. We may need to confirm your identity first, and we aim to reply within 30 days.
If you are not satisfied with our answer, you can complain to the Data Protection Authority of Sri Lanka or, if you live in the EEA or UK, to your local data protection authority.
Children
This website is not directed at children and we do not knowingly collect their information through it. Our school products process children's information on behalf of schools and with the involvement of their parents or guardians. If you believe a child has sent us personal information through the website, contact us and we will delete it.
Security
We protect information with encryption in transit (HTTPS/TLS), access controls limited to staff who need them, and confidentiality obligations for everyone who works with personal data. No system is perfectly secure; if a breach affects your information we will notify you and the relevant authority as the law requires.
Changes to this policy
When we change these documents we update the "Last updated" date at the top of the page, and for significant changes we will notify affected users by email or a notice on our website or apps.
Contact us
- Privacy questions and requests: privacy@atelieroptimatix.com
- General enquiries: info@atelieroptimatix.com
- Post: Atelier Optimatix (PVT) LTD, 320, Irabadagama, Sandalankawa 60176, Sri Lanka
- Hours: Monday to Friday, 9:00 AM to 5:00 PM (Sri Lanka time)
See also our Terms and Conditions and the full list of legal documents.