Student Data Privacy Policy- MG Education Consultancy
1. Introduction
At MG Education Consultancy (Registration No: PV 00297066), accessible via www.matrixgenius.lk, we are dedicated to protecting the personal information of our students, clients, and partners. Your privacy is our priority. This policy explains how we collect, use, disclose, store, and protect personal data in accordance with the Personal Data Protection Act, No. 9 of 2022 (Sri Lanka) and relevant international privacy standards such as the General Data Protection Regulation (GDPR) and Family Educational Rights and Privacy Act (FERPA).
By engaging with MG Education Consultancy for counseling, university applications, or visa processing, you consent to the collection and use of your personal information as described in this policy.
2. Information We Collect
We collect personal data only when it is relevant to the services we provide. This may include your full name, date of birth, nationality, contact details, academic qualifications, passport and visa information, financial statements, and sponsor details.
We may also collect additional information required by partner universities or immigration authorities to process your application. MG Education Consultancy collects only the data necessary for legitimate educational and immigration purposes.
3. Purpose of Data Collection
The information we collect is used exclusively for lawful and service-related purposes. This includes verifying your identity, preparing and submitting university or visa applications, communicating with immigration authorities, and ensuring compliance with educational and legal requirements.
We do not sell, rent, or share your data for marketing or commercial purposes without your explicit consent. All information collected is used solely to fulfill your study abroad, university admission, or visa application needs.
4. Legal Basis for Processing
Our data processing activities are based on one or more of the following legal grounds:
-
Consent: You have given clear consent for us to process your personal data for a specific purpose.
-
Contractual necessity: Processing is required to fulfill a contract or service you have requested (e.g., visa or admission submission).
-
Legal obligation: We are required by law or immigration authorities to process specific data.
-
Legitimate interest: Processing is necessary for the legitimate interests of our company, provided it does not override your fundamental rights.
5. Data Sharing and Disclosure
Your data may be shared with trusted third parties only when necessary for the performance of our services. This includes partner universities, visa processing centers, embassies, and relevant government or regulatory authorities.
All external partners are bound by strict confidentiality agreements and are required to handle your data in compliance with applicable privacy laws. MG Education Consultancy will never disclose your personal information to unauthorized parties.
6. Data Storage and Security
We maintain strict security measures to protect your personal information from unauthorized access, alteration, or disclosure. Your data is stored on encrypted servers with access restricted only to authorized personnel directly involved in your application process.
We regularly update our digital security protocols and conduct internal reviews to ensure compliance with national and international data protection standards.
7. Data Retention and Deletion
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Once your study or visa process is completed, your personal data will be securely deleted or anonymized.
If you wish to request the deletion of your data before that period, you may submit a written request to our Data Protection Officer. We will verify your identity and remove your data from active systems unless retention is legally required for audit, immigration, or compliance purposes.
8. Your Rights
Under the Personal Data Protection Act of Sri Lanka and other international privacy frameworks, you have the right to:
-
Access the personal data we hold about you.
-
Request correction of inaccurate or incomplete information.
-
Request deletion of data once it is no longer required.
-
Withdraw consent for data processing (where applicable).
-
Restrict or object to certain types of processing.
-
Lodge a complaint with the Data Protection Authority of Sri Lanka if you believe your privacy rights have been violated.
MG Education Consultancy is committed to responding to all data-related requests within one month as mandated by law.
9. International Data Transfers
Since we work with universities and immigration authorities around the world, your data may be transferred to other countries such as Malaysia, the United Kingdom, Australia, Canada, and others. These transfers are conducted only when necessary and in accordance with applicable data protection laws.
We ensure that all international partners receiving your information maintain adequate privacy and security measures to protect your personal data.
10. Policy Updates
MG Education Consultancy reserves the right to modify or update this policy as required by new laws, technologies, or operational needs. The most current version of this policy will always be available on our website. Any significant changes that affect your rights or how we handle your data will be clearly communicated to you.
11. Contact Us
If you have any questions, concerns, or wish to exercise your data protection rights, please contact our Data Protection Officer (DPO):
Email: info@matrixgenius.lk
Phone: +94 777 603815
Address: ML28, Reality Plaza, Ja-Ela, Sri Lanka
We take every privacy concern seriously and are committed to resolving inquiries promptly and transparently.
12. References and Legal Resources
For more information on data privacy laws and your rights, please visit the following official resources:
