Privacy notice

What we collect and why

We collect your name, examination type (O/L or A/L), year or group, contact and WhatsApp numbers, address, profession, email, and a record of your consent. We use these details to coordinate the alumni community, confirm registration, share alumni news and opportunities, and help you stay connected.

When you submit, we also record your IP address, the browser's user-agent string, and basic device, browser and operating-system details. We use these technical details for service security, abuse prevention and troubleshooting. They are visible only to administrators with full administrative access and are not included in confirmation emails or standard exports.

Who can access your details

Only authorized alumni administrators can view your registration. Hosting and email providers process information needed to run this service and send confirmations. We do not publish your contact details or sell your information. Any new public directory or unrelated use will require a separate privacy assessment and appropriate notice.

Protection and retention

We use encrypted connections, restricted administrator access, password hashing, audit logs, and restricted database access. We retain registrations and their technical submission details for up to 5 years after registration, subject to periodic review and any applicable legal obligations. Backups expire according to our backup retention schedule. The coordination team reviews and deletes expired records; the service does not automatically erase them.

Your choices and requests

You can ask to access or correct your details, withdraw consent, or request deletion. We will verify your identity before acting and explain any legal reason that requires us to retain information. Withdrawal does not affect processing already carried out.

Contact info@bocgc.com, quoting your registration reference where possible.

International processing and changes

Hosting and email delivery may process information outside Sri Lanka, depending on the providers selected by the organization. The coordination team can provide details of the providers used and the safeguards for international processing. Material changes to these purposes will be communicated with an updated privacy notice.