Privacy Policy

Ace Academy | aceacademy.lk

Last Updated: March 14, 2026

1. Introduction

At Ace Academy (aceacademy.lk), accessible from https://aceacademy.lk, one of our main priorities is the privacy of our visitors and users. This Privacy Policy describes how Ace Academy collects, uses, stores, shares, and protects the information you provide when using our website and services.

This policy applies only to our online activities and is valid for visitors to our website with regard to information shared and/or collected on aceacademy.lk. It does not apply to information collected offline or via channels other than this website.

If you have questions about this Privacy Policy, please contact us at: [email protected]

2. Consent

By using our website, you hereby consent to this Privacy Policy and agree to its terms. If you do not agree with this policy, please discontinue use of our website and services.

3. Information We Collect

We collect the following categories of personal information:

3.1 Information You Provide Directly

Name, email address, phone number, and address (when you register for an account or contact us)
Account credentials (username and password)
Messages, attachments, and other content you send us
Payment information (processed securely through our payment processors)

3.2 Google User Data

When you connect your Google account to Ace Academy, we may collect the following Google user data, limited strictly to what is necessary to provide our services:

Your Google account name and email address (for authentication and account identification)
Profile information you have made available through your Google account

We access only the minimum Google account data required to deliver the features you have requested. We do not access Google user data beyond the specific scopes you have authorized.

3.3 Automatically Collected Information

IP address, browser type, and Internet Service Provider (ISP)
Date and time of visits, pages visited, and referring/exit pages
Device information and operating system
Usage data and interaction logs for analytics purposes

4. How We Use Your Information

We use the information we collect for the following purposes:

To provide, operate, and maintain our website and services
To authenticate your identity and manage your account
To improve, personalize, and expand our website and offerings
To understand and analyze how you use our services
To develop new products, services, features, and functionality
To communicate with you, including for customer service, updates, and promotional purposes
To send you transactional and service-related emails
To detect, prevent, and address fraud, security issues, and technical problems

Important: Google user data is used solely to provide and improve the features of Ace Academy that you have requested. We do not use Google user data for advertising, profiling, or any purpose unrelated to delivering our core service.

5. Sharing, Transfer, and Disclosure of Data

We take your privacy seriously. We do not sell, trade, or rent your personal information or Google user data to third parties.

We may share your information in the following limited circumstances:

5.1 Service Providers

We share data with trusted third-party vendors who assist us in operating our website and delivering services (e.g., hosting providers, payment processors, email delivery services). These parties are contractually bound to keep your information confidential and may only use it to perform services on our behalf.

5.2 Legal Requirements

We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Ace Academy, our users, or the public.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

5.4 Google User Data — No Transfer for Unauthorized Purposes

We do not transfer or disclose Google user data to any third party for purposes other than providing or improving our application's functionality. Google user data is never used for targeted advertising, sale to data brokers, information resellers, credit scoring, or any other purpose prohibited by Google's API Services User Data Policy.

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Data Protection and Security

We implement industry-standard technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our data protection practices include:

Encryption of data in transit using TLS (Transport Layer Security) / HTTPS
Encryption of sensitive data at rest
Access controls limiting data access to authorized personnel only
Regular security reviews and vulnerability assessments
Secure authentication protocols for user accounts
Employee training on data privacy and security best practices

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to continuously improving our security practices.

Google user data is protected by the same security measures described above. We do not store Google user data beyond what is necessary to provide the requested service.

7. Data Retention and Deletion

We retain your personal information for as long as your account is active or as needed to provide you with our services. Specifically:

Account information is retained for the duration of your account and for a reasonable period thereafter to comply with legal obligations
Log files and usage data are retained for up to 12 months for analytics and security purposes
Google user data is retained only for as long as necessary to deliver the feature you have requested, after which it is deleted or anonymized

You may request the deletion of your personal data at any time by contacting us at [email protected]. We will process your request within one month and delete or anonymize your data unless retention is required by law.

When the retention period for any category of data expires, we will securely delete or destroy it.

8. Cookies and Web Beacons

Ace Academy uses cookies to store information about your preferences and the pages you have visited. This information is used to optimize your experience by customizing our web page content based on your browser type and preferences.

You may choose to disable cookies through your browser settings. Please note that disabling cookies may affect the functionality of our website. For more information on managing cookies, refer to your browser's documentation.

Google DoubleClick DART Cookie

Google, as a third-party vendor, uses DART cookies to serve ads based on your visits to our website and other sites. You may opt out of DART cookies by visiting Google's ad and content network Privacy Policy at https://policies.google.com/technologies/ads.

9. Third-Party Services and Advertising Partners

Our website may use third-party services including Google Analytics, Google Ads, and other tools. These services may use cookies, JavaScript, or web beacons and have their own privacy policies. We encourage you to review their policies:

Google: https://policies.google.com/privacy

Ace Academy has no access to or control over cookies or tracking used by third-party advertisers. Third-party ad servers or networks may receive your IP address when serving advertisements.

10. GDPR Data Protection Rights

If you are located in the European Economic Area (EEA), you have the following data protection rights:

Right to Access: Request copies of your personal data (a small fee may apply)
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data under certain conditions
Right to Restrict Processing: Request restriction of processing under certain conditions
Right to Object to Processing: Object to our processing of your personal data under certain conditions
Right to Data Portability: Request transfer of your data to another organization or directly to you

To exercise any of these rights, contact us at [email protected]. We will respond within one month.

11. CCPA Privacy Rights (California Residents)

Under the California Consumer Privacy Act (CCPA), California consumers have the right to:

Request disclosure of the categories and specific pieces of personal data we have collected about them
Request deletion of any personal data we have collected about them
Opt out of the sale of their personal data (Note: Ace Academy does not sell personal data)

To exercise any of these rights, contact us at [email protected]. We will respond within one month.

12. Children's Privacy

Ace Academy does not knowingly collect personal identifiable information from children under the age of 13. We encourage parents and guardians to monitor their children's online activity. If you believe your child has provided personal information on our website, please contact us immediately at [email protected] and we will promptly remove such information from our records.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify users of any material changes by updating the "Last Updated" date at the top of this page and, where appropriate, by sending an email notification. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Ace Academy

Website: https://aceacademy.lk

Email: [email protected]