University of Sri JayewardenepuraUniversity of Sri JayewardenepuraTouch The PeakTouch The Peak

Privacy Policy

Effective Date: January 2025
Last Updated: January 2025

The Career Skills Development Society (CSDS) in collaboration with the Career Guidance Unit (CGU) of the University of Sri Jayewardenepura operates Touch The Peak ("the Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

1. Information We Collect

1.1 Information Provided by Students

When you register as a Student, we collect:

  • Personal Information: Full name, university email address, faculty/department
  • Academic Information: Registration number, year of study, degree program
  • Contact Information: Phone number (optional), alternative email (optional)
  • Profile Information: Skills, bio, career interests
  • Documents: CV/resume, profile photo (optional)
  • Application Data: Jobs applied for, application status, cover letters

1.2 Information Provided by Companies

When you register as a Company, we collect:

  • Company Information: Company name, industry, size, website, description
  • Contact Person Information: Name, job title, department, phone number, email
  • Business Information: Company registration details, office address
  • Branding: Company logo, banner images
  • Job Posting Data: Job descriptions, requirements, compensation details

1.3 Automatically Collected Information

When you use the Platform, we automatically collect:

  • Device Information: Browser type, operating system, device type
  • Usage Data: Pages visited, features used, time spent on Platform
  • Log Data: IP address, access times, referring URLs
  • Cookies: Session cookies for authentication and preferences

2. How We Use Your Information

2.1 For Students

We use your information to:

  • Create and maintain your account
  • Verify your university affiliation
  • Display your profile to approved Companies
  • Process job applications
  • Send notifications about job opportunities, application updates, and Platform news
  • Improve the Platform and user experience
  • Ensure Platform security

2.2 For Companies

We use your information to:

  • Create and maintain your company account
  • Verify your company legitimacy (admin approval process)
  • Display your company profile and job postings to Students
  • Facilitate the recruitment process
  • Send notifications about applications and Platform updates
  • Improve the Platform and user experience
  • Ensure Platform security

2.3 For Analytics and Improvement

We may use anonymized, aggregated data to:

  • Analyze Platform usage patterns
  • Improve Platform features and performance
  • Generate statistical reports (without identifying individuals)

3. How We Share Your Information

3.1 Student Information Shared with Companies

When you apply for a job, Companies may view:

  • Your name and contact information
  • Your profile information (skills, bio, education)
  • Your CV/resume
  • Your application materials (cover letters, responses)

Important: Companies are contractually bound to use this information only for recruitment purposes and are prohibited from sharing it with third parties.

3.2 Company Information Shared with Students

Students can view:

  • Company name, logo, and description
  • Job postings and requirements
  • General contact information

3.3 Third-Party Service Providers

We may share information with trusted third parties who assist us in:

  • Hosting and maintaining the Platform
  • Sending emails and notifications
  • Analyzing Platform usage
  • Providing customer support

These providers are contractually obligated to protect your information and use it only for specified purposes.

3.4 Legal Requirements

We may disclose your information if required by:

  • Law, regulation, or legal process
  • Government authorities with valid requests
  • To protect the rights, property, or safety of CSDS, Users, or others

3.5 University Administration

As a university-affiliated platform, certain information may be shared with:

  • Career Guidance Unit for career support services
  • University administration for verification purposes
  • Academic departments for relevant career initiatives

4. Data Protection and Security

4.1 Security Measures

We implement appropriate security measures including:

  • Encryption of data in transit (SSL/TLS)
  • Secure password hashing
  • Access controls and authentication
  • Regular security assessments
  • Secure database storage

4.2 Data Retention

We retain your information for:

  • Active accounts: As long as your account is active
  • Self-deleted accounts: Removed permanently after the deletion request completes
  • Administratively deactivated accounts: Retained while the account remains eligible for reactivation
  • Application data: Up to 2 years after application submission
  • Analytics data: Indefinitely in anonymized form

4.3 Data Breach Notification

In the event of a data breach that may affect your personal information, we will:

  • Notify affected Users within 72 hours
  • Inform relevant authorities as required by law
  • Take immediate steps to mitigate the breach

5. Your Rights and Choices

5.1 Access and Correction

You have the right to:

  • Access your personal information through your account dashboard
  • Correct inaccurate or incomplete information
  • Request a copy of your data

5.2 Deletion

You may request deletion of your account and associated data by:

  • Using the account deletion feature (if available)
  • Contacting us at the email provided below

Note: Some information may be retained for legal or legitimate business purposes, and administrator deactivation is reversible while the account remains eligible for reactivation.

5.3 Communication Preferences

You can manage your notification preferences:

  • Through your account settings
  • By unsubscribing from non-essential emails
  • By contacting us directly

5.4 Cookie Preferences

You can control cookies through:

  • Your browser settings
  • Our cookie consent mechanism (where applicable)

6. Student CV Protection

6.1 Special Protections for CVs

We understand CVs contain sensitive personal information. Therefore:

  • CVs are only accessible to approved Companies
  • Companies must agree to our CV Usage Agreement before accessing CVs
  • CVs cannot be downloaded in bulk
  • We monitor for suspicious access patterns

6.2 Company Obligations

Companies accessing CVs agree:

  • To use CVs only for recruitment purposes
  • NOT to share CVs with third parties
  • NOT to use CVs for marketing or other purposes
  • To delete CVs after the recruitment process concludes
  • To notify us of any security incidents involving student data

7. Children's Privacy

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect information from children under 18. If we discover such information has been collected, we will delete it immediately.

8. International Data Transfers

Your information may be processed on servers located outside Sri Lanka. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information.

9. Third-Party Links

The Platform may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read their privacy policies before providing any personal information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

  • Posting a notice on the Platform
  • Sending an email to your registered address
  • Updating the "Last Updated" date at the top of this policy

Your continued use of the Platform after changes indicates acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact:

Career Skills Development Society
University of Sri Jayewardenepura
Gangodawila, Nugegoda, Sri Lanka

Email:
Facebook:
LinkedIn:

12. Consent

By using Touch The Peak, you consent to the collection, use, and sharing of your information as described in this Privacy Policy.

For Students

By creating an account, you consent to:

  • Collection and display of your profile information to approved Companies
  • Sharing your CV with Companies when you apply for jobs
  • Receiving communications about job opportunities and Platform updates

For Companies

By creating an account, you consent to:

  • Verification of your company information by Platform administrators
  • Display of your company profile and job postings to Students
  • Compliance with our CV Usage Agreement and data protection requirements

This Privacy Policy was last updated in January 2025 and applies to all users of the Touch The Peak platform.