Privacy Policy & Terms - CMwithMN

Privacy Policy

At CMwithMN, the personal details a student trusts us with are treated as carefully as their results. This section sets out exactly what we collect, why we collect it, who else sees it and what you can ask us to do with it.

1. Scope of This Policy

This Privacy Policy explains how CMwithMN handles personal information across everything we run at cmwithmn.lk — this public website, the student dashboard, the lesson store, our online classes and the notices we publish. It applies to students who register with us, to parents or guardians acting on their behalf, and to anyone who simply visits the site without signing in.

It does not apply to services we link out to, such as YouTube, Telegram, WhatsApp, TikTok or Facebook. Those are run by other companies under their own privacy policies, and what you share there is governed by their rules, not ours.

By registering for our classes or using our platform, you agree to the practices described here.

2. Information We Collect

We ask for the smallest amount of information that lets us run the class properly. In practice that falls into four groups.

Registration and identity details

Full name — to identify you on class lists, attendance records and result sheets.
National Identity Card (NIC) number — used to verify that an account belongs to one real student, and to prevent a single paid account being shared between several people.
Telephone number — for class announcements, payment confirmations and support.
Address — for delivering tutorial materials, papers and other printed matter.
A/L examination year — so we place you in the correct batch (for example 2027 Theory or 2028 Theory) and show you only the lessons and notices meant for your group.

Sign-in information

Accounts are created using Google Sign-In. When you sign in this way, Google confirms your identity to us and shares your name, email address and profile picture. We never see or store your Google password. You can review and revoke this access at any time from your Google Account's security settings.

Payment information

Online card and wallet payments are processed by OnePay. Your card number, CVV and PIN are entered on OnePay's own secure page and are never transmitted to or stored on our servers. We receive only the outcome of the transaction — whether it succeeded, the amount, the date and a reference number.
If you pay by bank deposit or transfer, you upload a payment slip. That image, and the details visible on it, are stored so our team can verify the payment and unlock your class.
We keep a record of which classes, papers and materials each account has purchased.

Learning activity

When you are signed in, our platform records which lessons you opened, which videos you watched and how far through them you got, which resources and papers you downloaded, and the marks recorded for papers you submitted. Alongside this we log basic technical details of each session — IP address, browser and device type, and the time of access.

We use that record for two things: to show you your own progress, and to detect account sharing. A single student account being used from many different devices or locations at once is the clearest signal that login details have been passed on, which is not permitted.

Website analytics

On this public website we use Google Analytics and a self-hosted analytics service operated by Single Developers to understand how many people visit, which sections they read and which devices they use. This is aggregate traffic measurement — it tells us that a page was popular, not who you are. See section 4 for details.

3. How We Use Your Information

We use what we collect only for the purposes below.

To create and maintain your account, and to give you access to the classes, lessons, papers and materials you have paid for.
To verify your identity and confirm that each account belongs to a single student.
To process class fees, confirm payments and keep the financial records we are required to keep.
To deliver tutorial materials and printed papers to your address.
To send you class announcements, timetable changes, seminar notices and payment reminders.
To record your paper marks and show you and your teacher an accurate picture of your progress.
To protect our lessons from unauthorised copying, redistribution and account sharing.
To improve the platform — fixing faults, understanding which material students actually use, and planning what to record next.
To comply with Sri Lankan law and respond to lawful requests.

We do not sell your personal data, rent it, or share it with advertisers. We do not use your NIC number, address or phone number for marketing by any third party.

4. Cookies and Analytics

Cookies are small files a website stores in your browser. We use them for two distinct reasons.

Essential cookies keep you signed in as you move between pages and protect forms against cross-site request forgery. The platform cannot work without these, so they cannot be turned off while you are using your account.
Analytics cookies are set by Google Analytics and by our self-hosted analytics service to count visits and page views. If you would rather not be counted, you can block cookies in your browser settings, use private browsing, or install Google's official opt-out browser add-on. The site works normally either way.

Video lessons and embedded YouTube players may also set cookies controlled by the video provider. Those are covered by that provider's privacy policy.

5. Third-Party Services We Rely On

Running the platform means trusting a small number of outside services. Each one receives only what it needs to do its job.

OnePay — processes online payments. It receives your payment details directly; we receive only the result.
Google — provides Sign-In, Analytics and YouTube video hosting.
Single Developers — builds and maintains this website and the platform, and operates our self-hosted analytics. Their technical staff may access systems containing personal data strictly to keep the service running.
Telegram and WhatsApp — carry our class channels, discussion groups and hotline. If you join a channel or message us there, your interaction is subject to that platform's own privacy policy, and other members of a group can see your display name.
Hosting and delivery providers — store our website, video and file content.

Some of these services operate servers outside Sri Lanka, which means your data may be stored or processed abroad. We choose established providers that apply recognised security standards.

7. How We Protect Your Data

All traffic between your device and our servers is encrypted in transit using HTTPS, and stored data is held on secured servers.
Access to registration records, payment slips and NIC numbers is limited to the staff members who need it for their work.
Passwords are handled by Google Sign-In; we never hold them ourselves.
Payment card data never reaches our servers — it is handled entirely by OnePay.
We review our systems and dependencies for known vulnerabilities and apply security updates.

No system connected to the internet can be guaranteed completely secure, and we do not claim otherwise. Please help us by keeping your Google account secure, never sharing your login, and telling us immediately if you suspect someone else has used your account.

8. How Long We Keep Your Data

We keep your account and learning records for as long as you are an active student, and for a reasonable period afterwards so that past students can request results, certificates or transcripts.

Payment and transaction records are kept for the period required by Sri Lankan financial and tax regulations, even after an account is closed. Anonymised statistics — which carry no identifying details — may be kept indefinitely for reporting. Everything else is deleted or anonymised once it is no longer needed for the purpose it was collected for.

9. Your Rights

Under the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka, you have the right to:

ask what personal data we hold about you and get a copy of it;
have inaccurate or incomplete details corrected;
ask us to delete your data, where we are not required to keep it for legal or financial reasons;
object to a particular use of your data, or withdraw a consent you previously gave — for example, consent to publish your results;
complain to the relevant supervisory authority.

To exercise any of these, contact us using the details in section 13. We will verify your identity before acting and respond within 30 days.

Deleting your account removes your access to every lesson, paper and material you have purchased, and class fees already paid are not refunded on deletion.

10. Students Under 18

Our classes are aimed at Advanced Level students, most of whom are aged 16 and above. Where a student is under 18, we expect a parent or guardian to review this policy, to consent to the student registering, and to be responsible for the payment of class fees.

A parent or guardian may ask us at any time to show, correct or delete the personal data we hold about their child. If you believe a child has registered with us without appropriate consent, contact us and we will address it.

11. External Links and Social Channels

This website links to our YouTube channel, Telegram channels and groups, WhatsApp channel, TikTok and Facebook pages, and to partner tuition centres. Once you follow such a link, you are on a service we do not control. We are not responsible for their content or their handling of your data, and we encourage you to read their privacy policies. Anything you post in a public group or channel is visible to the other members of that group.

12. Changes to This Policy

We may update this policy as our classes and platform change, or as the law requires. The revised version is published on this page with a new “last updated” date. When a change materially affects how we use your data, we will also announce it through our class channels. Continuing to use the platform after a change means you accept the updated policy.

13. Contact Us

For any question about this policy, about the data we hold, or to make a request under section 9, reach us at:

Terms and Conditions

These terms govern your use of CMwithMN classes, materials and the cmwithmn.lk platform. They exist mainly to keep our lessons where they belong — with the students who paid for them.

1. Acceptance of These Terms

By registering for a CMwithMN class, buying a lesson or paper, or using any part of cmwithmn.lk, you agree to these Terms and Conditions and to the Privacy Policy above. If you do not agree with them, please do not use the platform.

2. Accounts and Eligibility

An account is personal to one student. It may not be shared, sold, transferred or lent to anyone else — including siblings and classmates.
The details you give at registration — name, NIC number, phone number, address and examination year — must be accurate and kept up to date.
You are responsible for everything done through your account. Keep your Google sign-in secure and tell us at once if you suspect unauthorised use.
Students under 18 must register with the knowledge and consent of a parent or guardian.

3. Class Fees and Payments

Access to a class, lesson or paper is granted once the fee for it has been received and verified.
Online payments are handled by OnePay. Where you pay by bank deposit or transfer, you must upload a clear, legible payment slip; access is unlocked after our team verifies it, which is not instantaneous.
Submitting a slip that is altered, reused or does not correspond to a real payment will result in the account being suspended.
Fees are for the specific class or material purchased and for the period stated at the time of purchase. Once access has been granted, fees are generally not refundable.
If a payment is deducted but access is not granted, or you are charged twice, contact the hotline and we will investigate and put it right.
We may revise our fees from time to time. A change never affects a class you have already paid for.

4. Our Content and Your Licence to Use It

Every video lesson, tutorial, paper, marking scheme, note, animation and design on this platform is the intellectual property of CMwithMN and its creators, protected under the Intellectual Property Act, No. 36 of 2003 of Sri Lanka.

On payment, you receive a personal, non-transferable, non-exclusive licence to view and study that material for your own preparation, for as long as your access lasts. Ownership stays with us, and that licence ends if your account is terminated.

5. Prohibited Conduct

While using the platform, you must not:

record, screen-capture, download (other than where a download button is provided), re-upload or redistribute any lesson or material;
share, publish or sell your login details, or let another person use your account;
share class materials, papers or marking schemes with people who have not paid for them, including in group chats;
attempt to bypass payment, access lessons you have not bought, or interfere with our access controls or digital rights protections;
hack, probe, overload, reverse-engineer or otherwise tamper with the website, the platform or its infrastructure;
upload malicious files, or post abusive, obscene, defamatory or unlawful content in our discussion groups or channels;
impersonate a teacher, an administrator or another student, or use CMwithMN branding without written permission.

6. Enforcement

Where we find a breach of these terms — in particular account sharing or redistribution of our lessons — we may restrict access, suspend or permanently terminate the account, and withhold any refund of fees already paid.

Unauthorised copying or distribution of our material is also a criminal offence and a civil wrong under Sri Lankan law, and we reserve the right to pursue legal action and to report the matter to the authorities.

7. Availability of the Service

We work to keep the platform available at all times, but we cannot guarantee uninterrupted access. Maintenance, network faults, power failures, provider outages or events outside our control may interrupt the service. Class timetables, centre schedules, seminar dates and online session times may change; we announce changes through our class channels, and it is your responsibility to keep an eye on them.

8. Limitation of Liability

We provide our classes and materials with care and to a high standard, but we do not guarantee any particular examination result — outcomes depend on each student's own effort. To the extent permitted by Sri Lankan law, our liability arising from your use of the platform is limited to the fees you paid for the class or material in question, and we are not liable for indirect or consequential loss.

9. Governing Law

These Terms and Conditions and the Privacy Policy are governed by the laws of the Democratic Socialist Republic of Sri Lanka, and the courts of Sri Lanka have exclusive jurisdiction over any dispute arising from them.

10. Changes to These Terms

We may amend these terms from time to time. The current version is always the one published on this page, with the “last updated” date at the top. Continuing to use the platform after an amendment means you accept it.