Back

Privacy Policy for Trisol | eLearning

Last Updated: March 18, 2026

At Trisol | eLearning (operated under Enroll Private Limited), we are dedicated to fostering a secure and transparent digital learning environment. This Privacy Policy outlines how we, as a “Data Controller,” handle your information in strict accordance with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka (PDPA) and global data protection standards.

  1. Identity and Contact Details of the Controller
  • Controller Name: Enroll (Private) Limited / Trisol | eLearning
  • Founder & Academic Manager: Roshan Solomons.
  • Official Contact: privacy@trisol.lk 
  • Data Protection Officer (DPO): We have appointed a DPO to oversee our data protection strategy. You may reach them at roshan@trisol.lk for any inquiries regarding your personal data.
  1. Lawful Basis for Processing

We process your personal data only under the following lawful conditions defined by the PDPA:

  • Consent: When you explicitly agree to receive our newsletter or marketing materials.
  • Performance of a Contract: When processing is necessary to provide the courses you have registered for or to fulfill pre-contractual requests.
  • Legal Obligation: To comply with statutory requirements under Sri Lankan law.
  • Legitimate Interests: To maintain the security of trisol.lk, prevent fraud, and improve our services, provided these interests do not override your fundamental rights.
  1. Categories of Personal Data Collected

We collect only data that is adequate, relevant, and proportionate to our stated purposes:

  • Directly Provided Data: Name, email address, professional background, and login credentials.
  • Course Progress Data: Enrollment history, lesson completion status, quiz results, and certification records maintained via our LMS.
  • Technical Data: IP address, browser type, and usage patterns gathered to optimize your user experience.
  • Third-Party Data: Information obtained from social media logins or public sources, if used for registration.
  1. Purpose of Data Processing

Your data is used strictly for specified, explicit, and legitimate purposes:

  • To manage your account and provide secure access to course content.
  • To issue certificates of completion and track academic progress.
  • To distribute “Solicited Messages” (newsletters) only to those who have opted-in.
  • To analyze site performance and ensure technical integrity.
  1. Your Rights as a Data Subject

Under Part II of the PDPA, you possess the following enforceable rights:

  • Right of Access: You may request confirmation of processing and a copy of the personal data we hold about you.
  • Right to Withdraw Consent: You may withdraw your consent for any processing (such as newsletters) at any time.
  • Right to Rectification: You have the right to request the immediate correction of inaccurate or incomplete data.
  • Right to Erasure: You may request the deletion of your data if it is no longer necessary for its original purpose or if it was processed unlawfully.
  • Right to Object to Automated Decisions: You may request a human review of significant decisions made by automated systems (e.g., automated grading).
  1. Data Retention and Accuracy
  • Accuracy: We take reasonable steps to ensure your data remains accurate and up-to-date.
  • Retention: Your data is kept only for as long as necessary to fulfill the purposes outlined above or as required for evidentiary purposes under Sri Lankan law.
  1. Integrity and Confidentiality (Security)

We implement robust technical and organizational measures, including encryption, access controls, and pseudonymisation, to protect your data from unauthorized access, loss, or destruction.

  1. Disclosures and Cross-Border Transfers
  • Recipients: We do not sell your data. It is only shared with trusted service providers (e.g., hosting partners) who are contractually bound to maintain your privacy.
  • International Transfers: If your data is transferred outside of Sri Lanka (e.g., to international cloud servers), we ensure appropriate safeguards are in place to meet the adequacy standards of the PDPA.
  1. Direct Marketing and Solicited Messages
  • Identity Disclosure: All marketing messages will clearly identify Trisol | eLearning as the sender.
  • Opt-Out: Every communication will include a clear, free-of-charge mechanism to opt-out of future messages.
  1. Right to Lodge a Complaint

If you believe your data has been handled in a way that contravenes the PDPA, you have the right to lodge a complaint with the Data Protection Authority of Sri Lanka.