Privacy Policy

Last updated: 29 September 2026

At iqmeteray.com, run by IQ Meteray ("we", "us"), we are committed to protecting the privacy and security of your personal information. This policy explains what we collect when you visit the website or buy from us, how we use it and how we protect it. We process personal data in line with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka. By using the website you agree to the practices described here.

1. Information we collect

• Account details: your name, email address and password when you sign up. Passwords are stored only as a secure one-way hash; we can never see them.
• Order details: your name, phone number, delivery address, any delivery note, the items you buy, discount codes used, and your order history.
• Payment information: card and mobile wallet payments are processed by PayHere. We never receive or store your card number or security code; PayHere only tells us whether a payment succeeded and its reference. If you pay by bank transfer, we keep the payment slip you upload so we can check the payment.
• Program activity: the days and lessons you complete, quiz answers and scores, and certificates issued to you.
• Technical and security information: the date, time, IP address and browser type of sign-ins and important account actions.

2. How we use your information

• To process and fulfil your orders, including payment confirmation, unlocking programs, and delivery.
• To communicate with you about your orders and account (receipts, payment instructions, dispatch updates, password resets) and to answer your questions.
• To show your progress, issue certificates and improve our programs and website using anonymous, combined statistics.
• To detect and prevent fraud, abuse and unauthorised access, and to meet our legal and accounting obligations.

We do not sell, trade or rent your personal information, and we do not send marketing messages unless you have agreed to receive them.

3. Information sharing

We only share your information with:

• PayHere - to process card and mobile wallet payments. PayHere's own privacy policy applies to the details you enter on its payment page.
• Delivery partners - your name, phone number and delivery address, so they can deliver physical products.
• Our hosting and email providers - who store and send data on our behalf under confidentiality obligations.
• Authorities - only where the law requires it or in response to a valid legal request.

If you choose to order through WhatsApp, the messages you send are also handled by WhatsApp under its own privacy policy. Instruction videos are embedded from YouTube in privacy-enhanced mode (youtube-nocookie.com); YouTube's privacy policy applies when you play a video.

4. Data security

We use industry-standard measures to protect your information: HTTPS encryption, hashed passwords, secure session cookies, limits on password guessing, private storage for payment slips, restricted admin access with an audit log, and daily backups. However, no method of transmission over the internet or electronic storage is 100% secure, so we cannot guarantee absolute security. We will notify you and the authorities of any serious breach as required by law.

5. Cookies and similar technologies

• We use one essential cookie, iq_session, to keep you signed in. It cannot be read by scripts and is removed when you sign out.
• Your shopping cart and any discount code you enter are saved only in your own browser (local storage) until you order or clear them.
• We do not use advertising or third-party tracking cookies. You can block cookies in your browser, but you will then not be able to sign in.

6. How long we keep your information

• Account and program data: while your account is active, and deleted within 30 days of a verified deletion request.
• Orders, invoices and payment records: for as long as required by Sri Lankan tax and accounting law (normally 5 years), even if you delete your account.
• Payment slips and security logs: up to 12 months.

7. Your rights

You can ask us to:

• give you a copy of the personal data we hold about you,
• correct data that is wrong or incomplete,
• delete your data (except records we must keep by law),
• stop or restrict certain processing, or withdraw consent you gave earlier.

You can change your password on the Account page. For anything else, email we@iqmeteray.com, call 071 55 66 106, or write to 240/20B Weera Mawatha, Pannipitiya, Sri Lanka. We reply within 14 days.

8. Children

Our programs are made for children and families, but accounts must be created and purchases made by an adult (18 or over). A parent or guardian is responsible for a child's use of the account and can exercise the rights above on the child's behalf.

9. Changes to this policy

We may update this policy at any time. Changes are posted on this page with a new "last updated" date, and we will email you about important changes. Please review it from time to time.

10. Contact us

Questions, requests or complaints about privacy: email we@iqmeteray.com, call 071 55 66 106, or write to 240/20B Weera Mawatha, Pannipitiya, Sri Lanka.