Privacy Policy

Privacy PolicyProsper Global Education (Pvt) Ltd  |  Effective Date: 30 April 2026

Prosper Global Education (Pvt) Ltd. Company registration number PV00272784. Registered office: 429/1 Thimbirigasyaya Road, Colombo 05, Sri Lanka. Email: [email protected]. Website: prosper.lk.

IMPORTANT — PLEASE READ THIS PRIVACY POLICY CAREFULLY BEFORE USING OUR WEBSITE OR SERVICES. BY USING OUR WEBSITE, SUBMITTING ANY FORM, OR ENGAGING WITH ANY OF OUR SERVICES OR COMMUNICATIONS, YOU SIGNIFY YOUR AGREEMENT TO THIS POLICY AND THE MANNER IN WHICH WE COLLECT, USE, AND DISCLOSE YOUR INFORMATION. IF YOU DO NOT AGREE, PLEASE DO NOT USE OUR SERVICES.

1. About This Policy

Prosper Global Education (Pvt) Ltd, company registration number PV00272784 (“we”, “us”, “our”, “Prosper”), operates the website prosper.lk and all associated services, programs, consultations, communications, and digital content. We are committed to protecting your personal information in accordance with the Personal Data Protection Act No. 9 of 2022 of Sri Lanka (“PDPA”) and, where applicable, with the data protection laws of any destination country relevant to your application.

This Privacy Policy applies to all personal information we collect through any channel, including but not limited to our website, web forms, registration pages, eligibility surveys, calendar booking forms, email communications, phone calls, SMS, WhatsApp and other messaging platforms, social media platforms, paid advertising campaigns, webinars, virtual sessions, in-person events, and any other direct or indirect interaction with us.

By using our website, engaging with our content, submitting any form, or communicating with us through any channel, you agree to the collection and use of your information as described in this Policy.

2. What Information We Collect

2.1 Information you provide voluntarily

When you interact with us through any channel, you may provide:

• Identifying information — full name, date of birth, email address, phone number, postal address, NIC or passport number, and social media handles or profile information.

• Family and dependent information where relevant to your application — spouse and children’s names, dates of birth, and identifying information.

• Academic information — school and university transcripts, certificates, qualifications, English-language proficiency results, and references.

• Professional information — current and previous job titles, employers, industry, dates of employment, duties, salary range, and references.

• Financial information — sponsorship details, broad financial position relevant to demonstrating funds for tuition and living expenses, and supporting financial documents required by universities or immigration authorities.

• Career goals, study goals, family context, and personal circumstances as described in your own words through forms, messages, or conversations.

• Communications you send us through any channel including email, phone, SMS, WhatsApp, social media messages, comments, and web contact forms.

• Payment information processed through secure third-party payment providers — we do not store full card details.

2.2 Information collected automatically

When you visit our website or interact with our digital content, certain information is collected automatically:

• IP address, browser type, device type, and operating system.

• Pages visited, time on page, links clicked, scroll depth, and referring URLs.

• Geographic location data derived from IP address.

• Cookie identifiers and similar tracking data, including identifiers from the Meta Pixel and equivalent tools on other platforms.

• Interaction data from paid advertising platforms including ad impressions, clicks, lead form submissions, and conversion events received through the Meta Conversions API and equivalent server-side integrations.

2.3 Information from social media and third-party platforms

When you interact with our content on social media platforms — including liking, commenting on, sharing, or tagging our posts, or when we interact with your public content — certain profile information visible on those platforms may be noted and used in accordance with this Policy. We may also receive information about you through lead generation advertising campaigns run on platforms including Meta (Facebook and Instagram), TikTok, LinkedIn, Google, and others, where you have submitted your details through a platform-hosted lead form. We may also receive information from authorised partner aggregator networks, university partners, and other parties involved in supporting your application.

3. How We Collect Your Information

We collect personal information through the following channels and methods:

• Website forms — registration forms, contact forms, eligibility surveys, calendar booking forms, and newsletter sign-up forms on our website and connected funnel pages.

• Email — inbound enquiries and responses to our outbound communications.

• Phone calls — inbound and outbound calls for enquiries, counselling, application coordination, and follow-up.

• SMS — outbound reminders and follow-up messages, and inbound responses.

• WhatsApp and WhatsApp Business — direct messaging for enquiries, document collection, session coordination, and follow-up.

• Other messaging platforms — including Facebook Messenger, Instagram Direct, LinkedIn Messaging, Telegram, and any other platform through which you initiate or receive communications with us.

• Social media — public posts, comments, tags, mentions, and direct messages across all platforms on which we maintain a presence, including Facebook, Instagram, TikTok, LinkedIn, X (formerly Twitter), and YouTube.

• Paid advertising lead forms — lead generation campaigns run on social media platforms where you submit details directly within the platform.

• Webinars and virtual sessions — registration details and information shared during sessions hosted on Microsoft Teams, Zoom, Google Meet, or any equivalent platform.

• In-person events — registration details and information shared at any in-person event, education exhibition, or meeting.

• Partner aggregator networks and university partners — information exchanged with our authorised partners as part of processing your application.

• Third-party referrals — information provided by individuals or organisations who refer you to our services, including past students.

4. How We Use Your Information

We collect and use your personal information only for purposes that are directly related to the reason it was collected, or for purposes you would reasonably expect. These purposes include:

• Processing and confirming registrations for consultations, programs, events, and services.

• Conducting eligibility assessments and profile evaluations to determine your fit for international study and to recommend universities, courses, and destinations.

• Preparing and submitting applications to universities, scholarship bodies, and visa authorities, with your authorisation.

• Contacting you via any of the communication channels listed in Section 3 for session reminders, follow-up, document collection, application updates, service delivery, and support.

• Sharing relevant information with authorised partner aggregator networks (including KC Overseas Education, ApplyBoard, and Adventus), university partners, scholarship bodies, accommodation providers, and immigration authorities, with your authorisation, for the purpose of processing your application.

• Providing pre-departure briefings and post-arrival career guidance for the period during which we engage with you.

• Sending marketing communications — including newsletters, event invitations, and promotional content for any current or future product, program, destination, or service — where you have consented or where we are otherwise permitted under applicable law.

• Managing and responding to comments, mentions, tags, and messages received through social media platforms.

• Proactively and ethically engaging with you on social media — including commenting on your public posts or initiating connection — for legitimate relationship-building and outreach purposes, in compliance with applicable platform terms and Sri Lankan law.

• Running and optimising paid advertising campaigns, including retargeting based on website visits or prior interactions, and measuring conversion events through tools such as the Meta Pixel and Meta Conversions API.

• Conducting research and analysis to improve our services, content, and communications.

• Issuing invoices and managing financial records as required by Sri Lankan law.

• Complying with our legal obligations under Sri Lankan law and any applicable laws of destination countries.

• Protecting the rights, property, and safety of our business, our staff, our students, and the public.

5. Session Recording

We may record any session conducted with us, including but not limited to discovery calls, pre-counselling calls, one-on-one counselling sessions, group counselling sessions, virtual workshops, in-person meetings where recording technology is in use, webinars, and Q&A sessions. Recordings may be made regardless of whether the session was scheduled or ad hoc.

Recordings may be used for any of the following purposes: quality review and improvement of our services; internal training and reference; content creation and repurposing for educational or marketing purposes; client support and session follow-up; compliance and record-keeping; and any other legitimate business purpose at our discretion.

For virtual sessions conducted on Microsoft Teams or any equivalent platform, participants are notified of recording through the platform’s built-in mandatory on-screen notification, which is displayed to all participants at the time recording commences. Continued participation in the session following that notification constitutes consent to being recorded.

For sessions conducted through other means, including in-person meetings, phone calls, or platforms that do not provide automatic recording notifications, we will notify participants verbally or in writing before recording begins and will obtain consent prior to recording.

Recordings are stored securely and are accessible only to authorised personnel. We retain recordings for as long as is necessary for the purposes set out above, after which they are securely deleted or de-identified.

6. Do Not Track

Some browsers include a Do Not Track feature. At this time, our website does not specifically respond to browser Do Not Track signals. We will update this Policy if this changes.

7. Disclosure of Your Information

We do not sell, rent, or trade your personal information to third parties. We may disclose your information to:

• Universities, partner aggregator networks (including KC Overseas Education, ApplyBoard, and Adventus), scholarship bodies, accommodation providers, and immigration authorities, with your authorisation, for the purpose of processing your application and supporting your transition to and arrival in the destination country.

• Service providers who assist us in delivering our services — including our CRM platform, email and SMS marketing tools, webinar and virtual meeting platforms, payment processors, and advertising platforms — all of whom are required to handle your information in accordance with applicable privacy law and their own privacy policies.

• Advertising platforms including Meta (Facebook and Instagram), TikTok, LinkedIn, Google, and others, for the purpose of running and measuring paid advertising campaigns.

• Analytics providers including Google Analytics and equivalent tools, for the purpose of understanding website and content performance.

• Professional advisers including lawyers, accountants, and insurers, where necessary for our business operations.

• Government agencies or law enforcement bodies where required or authorised by Sri Lankan law or by the laws of any relevant destination country.

• A third party in the event of a merger, acquisition, or sale of all or substantially all of our business assets — in which case you will be notified.

• Where we disclose your information to overseas service providers, university partners, or immigration authorities, we take reasonable steps to ensure those recipients handle your information in a manner consistent with the Personal Data Protection Act No. 9 of 2022. By engaging us to support an application to a destination country, you acknowledge that your information will be transferred to and processed in that country and any other country relevant to your application.

8. Direct Marketing and Communications

We may use your contact details to send you direct marketing communications about our current and future programs, destinations, services, intakes, and events, where you have consented or where we are otherwise permitted to do so.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email.

• Replying STOP to any marketing SMS.

• Sending STOP or a similar opt-out message via WhatsApp or any other messaging platform.

• Notifying us verbally during a phone call.

• Contacting us in writing at [email protected].

We will process your opt-out promptly. You may continue to receive transactional or service-related communications necessary for the delivery of services you have registered for or purchased, even after opting out of marketing communications.

All outbound marketing communications will comply with applicable Sri Lankan law, including any requirements to identify us as the sender, include a functional opt-out mechanism, and honour opt-out requests promptly.

9. Cookies and Tracking Technologies

Our website prosper.lk uses cookies and similar technologies including:

• Essential cookies — required for basic website functionality.

• Analytics cookies — to understand how visitors interact with our website, including Google Analytics.

• Advertising and retargeting cookies and pixels — to measure the effectiveness of our advertising and serve relevant content to prior visitors, including the Meta Pixel, Meta Conversions API, and equivalent tools on TikTok, LinkedIn, Google, and other platforms.

By continuing to use our website, you consent to our use of cookies as described in this Policy. You may disable or manage cookies through your browser settings, though this may affect certain website functionality.

10. Data Security

We take reasonable technical and organisational measures to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. These measures include encryption in transit, access controls, role-based permissions in our systems, and secure data storage practices.

No method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of information transmitted over the internet or stored on digital systems, and we disclaim liability for unauthorised access or loss that occurs despite our reasonable security measures.

We retain your personal information for as long as is necessary to provide our services, to support your post-arrival engagement period, and to meet our legal and record-keeping obligations. When information is no longer required, we take reasonable steps to destroy or de-identify it securely.

11. Data Breach Notification

Where we experience a personal data breach that is likely to result in significant harm to any individual whose information is involved, we will notify the affected individual(s) and, where required, the relevant supervisory authority under the Personal Data Protection Act No. 9 of 2022, as soon as practicable after becoming aware of the breach and in accordance with our obligations under applicable law.

12. Social Media

We maintain a presence on social media platforms including Facebook, Instagram, TikTok, LinkedIn, X (formerly Twitter), YouTube, and others. Information you post publicly on those platforms, or share in comments, tags, or mentions directed at us, is subject to the privacy policies of those platforms and is not governed by this Policy. We are not responsible for the privacy practices of any third-party social media platform.

When we engage with your public content — including commenting on your posts, responding to your comments on our content, or initiating connection or conversation — we do so in a lawful and ethical manner. Any personal information noted through such interactions is handled in accordance with this Policy.

13. Your Rights

Under the Personal Data Protection Act No. 9 of 2022 of Sri Lanka, you have the right to:

• Request access to the personal information we hold about you.

• Request correction of any information that is inaccurate, incomplete, or out of date.

• Request deletion of your personal information, subject to our legal obligations to retain certain records.

• Withdraw consent to direct marketing at any time.

• Object to certain types of processing of your personal information.

• Make a complaint if you believe we have mishandled your personal information.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request.

14. Complaints

If you believe we have breached the Personal Data Protection Act No. 9 of 2022 or this Policy, contact us at [email protected]. We will acknowledge your complaint within 5 business days and endeavour to resolve it within 30 days. If you are not satisfied with our response, you may lodge a complaint with the supervisory authority designated under the Personal Data Protection Act No. 9 of 2022 of Sri Lanka.

15. Changes to This Policy

We may update this Policy from time to time. The current version will always be published at prosper.lk. Where changes are material, we will notify you by email or prominent notice on our website. Continued use of our services after any update constitutes acceptance of the revised Policy.

16. Contact

Prosper Global Education (Pvt) Ltd

Company registration number: PV00272784

Registered office: 429/1 Thimbirigasyaya Road, Colombo 05, Sri Lanka

Email: [email protected]

Website: prosper.lk