Privacy notice
Updated 28 September 2026. This notice describes website requests, email follow-up and staff processing.
Who handles your information
MLC Lanka Partners (Pvt) Ltd., Level 12, One Galle Face Tower 1A, 02 Centre Road, Colombo 2, Sri Lanka. Contact info@mlc-lp.com or +94 76 559 81 24 for privacy questions, access, correction or deletion requests.
Information you provide
Requests contain your name, email address, phone number, chosen pathway, preferred date and message. Assessment requests also contain education, language level, experience and an optional CV. We use these details to review your request and contact you by email or phone. No customer account is required. Staff accounts use usernames, assigned roles and hashed passwords. Staff case records contain preparation checklists, status, documents and internal notes.
Eligibility requests and detailed reviews
The Eligibility Check collects the answers relevant to your selected pathway. These can include education and grades, exact language results, employment, family circumstances, residence status, accommodation or business funding and, for the Opportunity Card, date of birth. We use these answers to apply MLC’s preliminary screening indicators and save the indication, original questions and guidance with your contact request for staff follow-up. This does not make an admission, employment or visa decision. Contact details are requested only at the end. Answers stay in page memory until you submit or leave; they are not saved in browser storage. Submitted requests are available to authorised administrators and consultants for personal follow-up by your preferred method.
A detailed review starts only after contact and agreement on scope and fee. Staff record the agreement, contact history, required documents and a final PDF report. Earlier report versions may be retained for the service record; staff see the latest report. There is no document upload or payment in the public quick check. German legal services require a separate mandate with Law Firm MLC.
Documents and access
Uploaded files are encrypted before private storage. Administrators can access case records; consultants and document reviewers access assigned cases. Reviewers cannot see case conversations. Administrators and consultants handle the shared request, CV, consultation, email and AI handover queues. Internal notes remain private to staff. Staff may email you a reviewed message separately. Opening a case creates an independent CV copy. Document downloads are recorded in an audit log.
AI conversations
When you consent to use the assistant, your messages and a limited conversation history are sent to OpenAI to generate a response using GPT-5.6 Terra. The assistant can consult official public websites. Chat history is saved for continuity and human follow-up. OpenAI API storage is disabled in our requests; provider security and operational processing may still apply under its policies. Uploaded documents are not sent to the AI. Do not enter passport numbers, financial details or sensitive records into chat.
Service providers and international processing
The application uses MongoDB-compatible Google Cloud database infrastructure, encrypted private file storage, and OpenAI for the AI assistant. File bytes use the configured Google Cloud Storage or encrypted database storage provider. An email provider (Resend or the configured SMTP mailbox provider) processes recipient addresses, service messages and delivery records when sending is enabled. CVs and internal review notes are not included in acknowledgement emails. Processing can involve infrastructure outside Sri Lanka. Where German legal services are needed, the team will coordinate the necessary information with Law Firm MLC as part of the agreed engagement.
Cookies and security records
Essential HTTP-only cookies maintain staff sign-in for up to 12 hours, with a 30-minute inactivity timeout, and public chat continuity for up to seven days. No customer login or assessment-linking cookie is used. We do not use advertising or analytics tools. The optional Google Maps embed is described below. Request identifiers, rate limits, email queue records and audit events support service operation. We do not log passwords or document contents.
Google Maps on our contact page
The embedded map stays disconnected from Google until you select “Load Google map”. Loading it shares technical information, such as your IP address and browser information, with Google, which may use cookies under its own policies. Opening a Google Maps link also takes you to Google’s service. You can use our written address, call the team or submit a request without loading the map. See Google’s privacy policy for details.
Retention and your choices
Staff sessions can be revoked from account settings and end on password changes or account deactivation. Contact the team to request removal of uploaded documents. Deleting a case copy does not delete the original assessment CV; contact the team to remove the original request and its related copies. Cloud Storage retains deleted files for seven days for recovery before permanent removal. Starting a new chat clears your browser’s link to the previous conversation; it does not erase the stored record. Other case, inquiry, chat and audit records are retained until reviewed for deletion by the team, including any applicable engagement or legal retention requirements. Contact us to request access, correction, deletion or withdrawal of consent. Withdrawing consent may limit services that depend on the information.
Young applicants
If you are under 18, involve a parent or guardian before sharing personal information or engaging services. The assistant gives general introductory information and does not make decisions about your application.