About this policy
This policy explains how Afterwards Sri Lanka ("Afterwards", "we", "us") collects, uses and protects personal information when you use myafterwards.com. We follow the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka.
What we collect
- Results you enter in the course finder: your O/L and A/L grades, A/L stream, and the places and subjects you choose. We use these to show your matches. They are not stored on our servers unless you send an enquiry. Your browser remembers your answers on your own device so you don't have to enter them again.
- Enquiries: when you ask a course provider to contact you, we collect your name, email address, phone number, the courses you chose, your results and a record of the consent you gave.
- Parent or guardian details: if a student is under 18, we collect a parent or guardian's name and email address so they can approve the enquiry, and a record of their approval.
- Our mailing list: your name, email address, WhatsApp number if you give it, whether you are a student, parent or teacher, and which results you are waiting for.
- Technical information: our hosting provider keeps standard server logs, such as IP address and browser type, to keep the website secure and working.
How we use it
- To show you courses that match your results.
- To pass your enquiry to an education partner for the routes you selected.
- To ask a parent or guardian to approve enquiries from students under 18.
- To send people on our mailing list the guide and updates they asked for.
- To keep the website secure and improve it.
Why we're allowed to use it
We rely on your consent. You give it when you tick the consent box on a form, and a parent or guardian gives it for students under 18. You can withdraw your consent at any time (see "Your rights"). Withdrawing does not affect anything already done with your consent before then.
Students under 18
If a student is under 18, we will not send their details to any education partner until a parent or guardian approves. We email the parent or guardian a link showing exactly what will be shared and with whom. They can approve or decline.
Where your information is stored
Our service providers may store information outside Sri Lanka, including in India, the United States and the European Union. If you ask about a route overseas, your enquiry may be sent to a partner in that country. We only use providers that protect personal information to a standard comparable to Sri Lankan law.
How long we keep it
- Enquiries: up to 24 months after we send them, then deleted.
- Enquiries that are withdrawn or declined by a parent or guardian: deleted within 30 days.
- Mailing list details: until you unsubscribe.
How we protect it
Your information is sent over an encrypted connection and stored in a database that only our own systems can access. Access to enquiries is limited to people at Afterwards who need it to send them on.
Your rights
You can ask us to:
- show you the personal information we hold about you;
- correct or complete it;
- delete it;
- withdraw an enquiry before it is sent, or withdraw your consent;
- stop sending you messages. Every email has an unsubscribe link.
Email hello@myafterwards.com and we will reply within 21 working days. If you are not satisfied with our response, you can complain to the Data Protection Authority of Sri Lanka.
Changes to this policy
If we change this policy, we will update it on this page and change the date at the top. If a change affects how we use details you have already given us, we will tell you by email.
Contact us
Afterwards Sri Lanka
hello@myafterwards.com