Privacy Policy

Last Updated: March 31, 2026

1. Introduction

Master Commerce (“we,” “our,” or “us”), founded by Oshan Mudunpitiya, is committed to protecting the privacy and security of our students’ personal data. This Privacy Policy outlines our practices regarding the collection, use, and disclosure of information through mastercommerce.online in compliance with the Personal Data Protection Act of Sri Lanka.

2. Information We Collect

We collect information that identifies, relates to, or could reasonably be linked to an individual student (“Personal Data”).

  • Identity Data: Full name, National Identity Card (NIC) number (for professional verification), and University/Professional body (AAT/CA) registration details.
  • Contact Data: Mobile phone number (required for SMS Gateway services) and email address.
  • Financial Data: Transaction IDs and payment confirmation slips. (Note: We do not store full credit card or bank account numbers on our servers; these are managed by PCI-DSS compliant third-party payment processors).
  • Technical Data: IP address, login frequency, and course progress data (used to monitor “100% Theory Coverage” and prevent account sharing).

3. How We Use Your Data

Your data is processed based on the necessity of fulfilling our educational contract with you:

  • Service Delivery: To provide access to the digital portal, live sessions, and proprietary PDF notes.
  • Communication: To send critical administrative alerts, class links, and OTPs via our SMS Gateway.
  • Intellectual Property Protection: To verify the identity of users and prevent the unauthorized distribution of CA-level materials.
  • Academic Analytics: To monitor student progress and provide “Exam-Focus” feedback.

4. Data Retention and Security

As a brand managed with the rigors of Chartered Accountancy standards, we apply strict internal controls:

  • Encryption: All data transmitted to and from the website is secured using SSL (Secure Sockets Layer) technology.
  • Storage: Sensitive documents (such as NIC copies) are stored in encrypted environments and are deleted once student verification is finalized.
  • Access Control: Access to your personal data is strictly limited to the founder and authorized administrative personnel.

5. Third-Party Disclosures

We do not sell or trade your personal data. We only share data with trusted service providers essential for our operations:

  • SMS Gateway Providers: Strictly for the delivery of transactional messages.
  • Cloud Hosting Providers: For secure database and video hosting.
  • Payment Gateways: To process initial payment sources for enrollments and authorized refunds.

6. Use of Cookies

mastercommerce.online uses cookies to enhance the user experience, remember login sessions, and analyze website traffic. Users can manage cookie preferences through their browser settings.

7. Your Legal Rights

Under the prevailing data protection laws, you have the following rights:

  • Access: The right to request a summary of the personal data we hold.
  • Correction: The right to update inaccurate or incomplete information.
  • Erasure: The right to request the deletion of your account (subject to the termination of all active course licenses without refund).

8. Intellectual Property Monitoring

To protect the “Master Commerce” brand, we monitor account activity for signs of “Account Sharing” or “Content Scraping.” We reserve the right to utilize Dynamic Watermarking (displaying your mobile number/IP on video content) to deter intellectual property theft.

9. Contact Information

For any queries regarding this Privacy Policy or your data, please contact the Management:

Oshan Mudunpitiya Founder & Principal Educator, Master Commerce Email: admin@mastercommerce.online Web: mastercommerce.online