Privacy Policy
The Duke of Edinburgh’s International Award – Sri Lanka
Privacy Notice Version: 1.1
Date: June 2025
Introduction
The Duke of Edinburgh’s International Award – Sri Lanka (the “NAO”, “we”, or “us”) operates under the National Youth Services Council and is committed to safeguarding your personal information. We comply with the following Sri Lankan laws:
- Personal Data Protection Act, No. 9 of 2022
- Computer Crimes Act, No. 24 of 2007
- Right to Information Act, No. 12 of 2016
- Electronic Transactions Act, No. 19 of 2006 (as amended)
This Privacy Notice describes how we collect and use personal information of individuals we engage with in Sri Lanka.
1. The type of personal information we collect
- Basic details: name, date of birth, address, email, phone
- Optional: gender, nationality, employment, profile photo
- Parent/guardian details (for minors)
- Award records and achievements
- Special category data (e.g. health or ethnicity, with consent)
- System info (device type, error logs)
2. How We Collect Personal Information
| Source | Example |
|---|---|
| Direct from individuals | Registration for the Award, training sign-ups, Online Record Book |
| From third parties | Schools or Award Centres, with consent |
| Public sources | Websites, media, directories where appropriate |
3. Why We Collect and Use Personal Information and Lawful Bases
| Process | What We Collect | How | Purpose | Lawful Basis |
|---|---|---|---|---|
| Training courses | Name, email, organisation, training history | Online forms | To manage training delivery, track progress, issue certificates | Legitimate interest |
| Award Community | Name, email, optional profile data | Self-registration | Support Award delivery, online training | Legitimate interest |
| Online Record Book (participants) | Name, email, DOB, address, Award records | Self-registration | Track progress, manage participation | Legitimate interest |
| Online Record Book (adults) | Name, email, DOB, address | Self-registration | Support participants and Centres | Legitimate interest |
| Licence application | Name, email, organisation | Application forms | Manage licence agreements and reviews | Contract performance |
| Communications | Contact details | Direct communication | Provide Award updates and essential info | Legitimate interest / legal obligation |
| Alumni network | Name, email, contact info, Award details | Registration or invitation | Build connections, support development | Legitimate interest |
4. How we use and disclose personal information
We may share your data with:
- Award Foundation
- Licensed Operators/Centres
- Contractors and trainers
- Government (if legally required)
- Professional advisers
- Others with your consent
5. International data transfers
If data is sent outside Sri Lanka (e.g., to global platforms), we apply safeguards in line with the Data Protection Act.
6. Data security and retention
- Secure storage, technical & organisational safeguards
- Limited access by trained staff
- Deleted/anonymised when no longer needed
7. Your rights
- Access your data
- Correct inaccuracies
- Request deletion/restriction
- Object or withdraw consent
8. Complaints
Contact us directly or the Sri Lankan Data Protection Authority (once operational) if you believe your data was misused.
9. Contact details
Data Protection Lead / National Director
The Duke of Edinburgh’s International Award – Sri Lanka
C/O National Youth Services Council
National Youth Award Division
No 65, High Level Road, Maharagama, Sri Lanka
Email: [Insert official contact email]
10. Updates to this Privacy Notice
This policy will be reviewed regularly. Latest versions are available on request or via our website.
11. Legal references
- Personal Data Protection Act, No. 9 of 2022
- Computer Crimes Act, No. 24 of 2007
- Right to Information Act, No. 12 of 2016
- Electronic Transactions Act, No. 19 of 2006