Privacy
Policy
Your data is protected. Your privacy is our commitment.
Introduction
EWOL (Pvt) Ltd ("we", "our", or "us") is deeply committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, store, share, and safeguard your personal information across all our service divisions — IT Solutions, EWOL EDU, Maritime Operations, Marketing & Media, and Commerce.
By using any EWOL service or platform, you agree to the collection and use of information in accordance with this policy. If you disagree with any part of this policy, please discontinue use of our services.
Information We Collect
We collect different categories of personal data depending on the division and service you engage with:
| Data Type | What We Collect | Division |
|---|---|---|
Student Data |
Name, contact details, educational progress, certification history | EWOL EDU |
Client Data |
Business information, project requirements, billing details | IT, Marketing |
Maritime Data |
Operational logs, vessel information, regulatory compliance records | Maritime |
Commerce Data |
Order history, payment information, delivery addresses | Commerce |
Usage Data |
IP addresses, browser type, pages visited, timestamps | All Divisions |
How We Use Your Data
Your personal data is used exclusively for legitimate business purposes, including:
- Providing, maintaining, and improving our multi-disciplinary services across all EWOL divisions.
- Processing certifications, medals, and awards for EWOL EDU students.
- Complying with CEA, MEPA, and SLPA regulatory requirements for Maritime operations.
- Processing e-commerce transactions, managing supply chains, and fulfilling orders.
- Delivering targeted marketing and promotional materials — only with your explicit consent.
- Analyzing usage patterns to optimize platform performance and user experience.
- Ensuring legal compliance and fraud prevention across all services.
Data Sharing & Third Parties
We do not sell your personal data. We never trade, rent, or sell personal information to advertisers or data brokers.
We may share your information only in the following limited circumstances:
- Government Regulatory Bodies: SLPA, MEPA, CEA — only for compliance in maritime and environmental operations.
- Trusted Payment Gateways: Secure, PCI-DSS compliant processors for e-commerce transaction security.
- Service Delivery Partners: Vetted third-party providers who assist in professional training and certification delivery.
- Legal Obligations: When required by court order or applicable Sri Lankan law.
Security Standards
We implement rigorous, industry-standard security measures to protect your data at rest and in transit:
Our systems undergo regular security audits. In the unlikely event of a data breach that affects your rights, we are committed to notifying you in accordance with applicable Sri Lankan data protection legislation.
Cookies & Tracking
Our website uses cookies and similar technologies to improve your browsing experience, analyze traffic, and enable certain platform features. These include:
- Essential Cookies: Required for the website to function properly. Cannot be disabled.
- Analytics Cookies: Help us understand how visitors interact with our site (e.g., Google Analytics).
- Preference Cookies: Remember your settings, such as language selection.
- Marketing Cookies: Used to deliver relevant advertisements. Only enabled with your consent.
You may manage cookie preferences through your browser settings at any time.
Your Rights
You have the following rights regarding your personal data held within EWOL systems:
To exercise any of these rights, please contact our Data Protection Officer using the details in Section 9.
Data Retention
We retain your personal data only for as long as is necessary for the purposes outlined in this policy, or as required by applicable law. Specific retention periods include:
- Academy Records: Retained indefinitely to support certification verification requests.
- Client & Project Data: Retained for 7 years post-project completion for legal and audit compliance.
- Maritime Compliance Data: Retained as required by SLPA, CEA, and MEPA regulations.
- Marketing Data: Retained until consent is withdrawn or for a maximum of 3 years.
Contact Data Protection Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:
Questions about your data?
Our Data Protection Officer is here to help.