Last updated: 23 August 2026
master.lk (“we”, “us”, “our”) operates the website https://master.lk, an online learning platform offering Sinhala-medium courses in Adobe Photoshop, Adobe Premiere Pro and related creative software.
This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have over it. It applies to everyone who visits this website, creates an account, purchases or enrols in a course, or registers as an instructor or affiliate.
We process personal data in accordance with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka.
1. Who we are
master.lk is the controller responsible for your personal data.
- Website: https://master.lk
- Email: [email protected]
- Postal address: No.7/1, Registrar Avenue, Ratmalawinna, Balangoda.
- Telephone: 0707053535
2. What personal data we collect
2.1 When you create an account
Your name, username, email address and password. Passwords are stored in encrypted (hashed) form and are never visible to us.
2.2 When you purchase or enrol in a course
Our checkout form collects the following. An account is required to purchase, so we do not offer guest checkout.
- Title (Mr. / Ms. / Rev.)
- Full name, name with initials, first name and last name
- Address, town or city, and district
- Email address (entered twice for confirmation)
- Date of birth
- Occupation
- Two contact telephone numbers
2.3 Payment information
We accept payment through PayHere (Pvt) Ltd, a licensed payment gateway that processes debit/credit card payments, mobile wallets and online banking on our behalf, and by direct bank transfer.
When you pay through PayHere, your card and payment details are entered directly on PayHere’s own secure payment page we do not collect, see, process or store your full card number, CVV or card PIN. PayHere shares with us confirmation that your payment was successful, the amount and date of the transaction, and a payment reference number.
If you pay by bank transfer, we may receive your deposit slip or reference number, the depositing account holder’s name, and the date and amount of the transfer.
2.4 Your learning activity
- Courses you enrol in and your progress through them
- Lessons completed and time or date of completion
- Quiz attempts, answers and marks
- Assignments you submit, including any files you upload
- Certificates issued to you
- Reviews, ratings, questions and comments you post
2.5 If you register as an instructor
Your biography, profile photograph, qualifications, the course material you upload, and the payment details we need in order to pay you.
2.6 If you join our affiliate programme
Your referral link and the visits made through it, orders attributed to you, commission earned, and the payment details we need in order to pay you.
2.7 Information collected automatically
- Your IP address
- Browser type, device type and operating system
- Pages viewed, the site you arrived from, and the date and time of your visit
- Login attempts and other security logs, including failed logins
- Cookies, as described in section 6
2.8 Messages you send us
Emails, contact form submissions, support requests and any correspondence about your account or your courses.
3. Why we collect date of birth and occupation
We collect your date of birth to help verify your identity and to arrange special offers, such as birthday discounts. We collect your occupation to understand who our students are and to plan and improve the courses we offer. If you would prefer not to provide these, please contact us before purchasing.
4. How we use your personal data
- To create and manage your account and give you access to the courses you have purchased
- To process your order, confirm your payment and issue receipts
- To record your progress, mark your quizzes and assignments, and issue certificates
- To send you service messages by email and SMS about your order, your enrolment and your account
- To answer your questions and provide support
- To operate our affiliate programme and calculate commissions
- To keep the website secure, prevent fraud and investigate misuse
- To meet our legal, tax and accounting obligations in Sri Lanka
- To improve our courses, our website and our service
We send service messages relating to your orders and courses because they are necessary to provide the service you have paid for. We will only send you promotional messages if you have agreed to receive them, and you may withdraw that agreement at any time.
5. Our lawful basis for processing
Under the Personal Data Protection Act we rely on the following grounds:
- Performance of a contract — to deliver the courses you have bought and to run your account
- Your consent — for promotional messages and for any optional information you choose to give us
- Legal obligation — to keep financial records and to respond to lawful requests from authorities
- Legitimate interest — to keep our website and your account secure, and to improve what we offer
6. Cookies
Cookies are small files stored by your browser. We use them for the following purposes:
- Login and session cookies — to keep you signed in and to remember your display preferences
- Cart and checkout cookies — to remember the courses in your cart while you complete your purchase
- Course cookies — to keep track of your position within a course
- Referral cookies — where you arrive through an affiliate link, to record which affiliate referred you for a limited period
- Security cookies — used by the login protection on our site
- Payment gateway cookies — set by PayHere while you complete a card or online payment
We do not currently use advertising cookies, analytics cookies or tracking pixels on this website. If this changes we will update this Policy before those tools are activated.
You can block or delete cookies through your browser settings. Please note that if you block the cookies listed above you will not be able to log in, purchase a course, or track your progress.
7. Who we share your data with
We do not sell or rent your personal data to anyone. We share it only as set out below, and only to the extent necessary:
- PayHere (Pvt) Ltd, our payment gateway, which processes card and online payments on our behalf and is licensed and regulated for that purpose
- Our hosting provider, which stores the website and its database on servers located in Germany
- Our email delivery provider, which sends the emails we address to you
- Our SMS provider (TextIt.biz, Sri Lanka), which receives your telephone number in order to send you order notifications
- Banks and financial institutions, in connection with bank transfer payments
- Course instructors, who can see the names and progress of students enrolled in their own courses and any assignments submitted to them
- Affiliates, who are told that a referral resulted in a sale but are not given your personal details
- Our professional advisers, such as accountants and auditors, where required
- Public authorities and courts, where we are required to disclose information by law
8. Where your data is stored
Our website and database are hosted on servers located in Germany. This means your personal data is transferred outside Sri Lanka and stored in the European Union, a jurisdiction with comprehensive data protection legislation. We take reasonable steps to ensure your data continues to be protected to the standard described in this Policy wherever it is held.
9. How long we keep your data
- Account and learning records — for as long as your account is open, and for three years after your last sign-in
- Certificates — retained indefinitely so that a certificate you have earned can be verified in future
- Order and payment records — for at least five years, as required by Sri Lankan tax and accounting law
- Security and server logs — up to twelve months
- Marketing consent records — until you withdraw your consent, and for a short period afterwards to record that you did
When data is no longer needed we delete it or remove the details that identify you.
10. How we protect your data
We use an encrypted (HTTPS) connection across the whole website, store passwords only in hashed form, protect the login page against automated attacks, limit administrative access to staff who need it, and keep the site and its software updated.
No website can be completely secure. You are responsible for keeping your own password confidential and for not sharing your account. Please tell us immediately if you believe your account has been accessed by someone else.
11. Your rights
Under the Personal Data Protection Act, No. 9 of 2022 you have the right to:
- Ask what personal data we hold about you and receive a copy of it
- Ask us to correct data that is wrong or incomplete
- Ask us to delete your data, where we are not required to keep it
- Withdraw your consent at any time, where we relied on your consent
- Object to us using your data in a particular way
- Complain to the Data Protection Authority of Sri Lanka
To exercise any of these rights, email us at [email protected]. We will respond within 21 days. We may need to verify your identity first, so that we do not disclose your data to someone else.
Please note that if you ask us to delete your account we will no longer be able to give you access to courses you have purchased, or to verify certificates you have earned.
12. Children
If you are under 18, you may use this website and enrol in our courses only with the knowledge and consent of a parent or guardian, who must make the purchase on your behalf. A parent or guardian may contact us at any time to see, correct or delete their child’s data.
13. Links to other websites
Our website and our courses may link to other sites, such as YouTube or Facebook, and may embed video hosted elsewhere. Those services have their own privacy policies and we are not responsible for how they handle your data. Please read their policies before providing them with information.
14. Changes to this Policy
We may update this Policy from time to time. The date at the top of the page shows when it was last changed. If we make a significant change we will tell you by email or by a notice on the website.
15. Contact us
If you have any question about this Policy or about how we handle your personal data, please contact us:
- master.lk
- No.7/1, Registrar Avenue, Ratmalawinna, Balangoda.
- [email protected]
- 0707053535