Privacy Policy

CampusNest collects personal information that you provide directly to us when you register, use our platform, or communicate with us. For students, this includes your full name, email address, university and faculty details. For boarding owners, this includes your name, contact number, email address, and business details. All users may provide profile photos and uploaded media. We also collect payment and financial data necessary to process transactions on our platform, including transaction IDs and payment amounts. Additionally, we collect user-generated content such as boarding reviews, ratings, and reports you submit about listings.

When you access CampusNest, we automatically collect certain technical information, including your IP address, browser type, device information, operating system, and usage patterns. Our platform uses Google Fonts for typography, which may transmit your IP address to Google servers. This data helps us improve our service, diagnose technical issues, and enhance your experience.

We use your personal data to provide, maintain, and improve our boarding finding platform. This includes facilitating connections between students and boarding owners, processing payments through our payment gateway, verifying student and owner identities, sending administrative communications, publishing reviews and ratings from verified users, processing reports about listings, personalising your experience, and ensuring the security and integrity of our platform. We may also use anonymised data for analytics and service improvement.

CampusNest uses browser local storage to enhance your experience. We store your authentication token (JWT), user role, and login status to keep you signed in and provide role-appropriate features. We also cache certain data locally, such as your browsing preferences and report history, to improve performance and offline resilience. Unlike cookies, local storage data is not automatically transmitted to our servers and remains in your browser. You may clear this data at any time through your browser settings. We do not use third-party tracking cookies.

CampusNest processes your personal data in accordance with the Personal Data Protection Act No. 9 of 2022 of Sri Lanka. Our legal bases for processing include your explicit consent (provided during registration and when submitting reviews or reports), the performance of a contract (providing our boarding platform services), compliance with legal obligations, and our legitimate interests in maintaining a safe and effective marketplace.

We may share your personal data with trusted third-party service providers who assist us in operating our platform. These include PayHere (our payment gateway for processing listing fee transactions), cloud hosting services for data storage, email and communication services for sending notifications and verification emails, and analytics providers for service improvement. Google Fonts may receive your IP address when you load our pages. All third parties are contractually bound to protect your data and use it only for the purposes we specify.

We retain your personal data for as long as your account is active or as needed to provide you with our services. If you delete your account, all your data — including saved listings, verification status, boarding advertisements, account information, and activity history — will be permanently removed. We retain only the data required to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your data at any time by contacting our support team.

We implement appropriate technical and organisational measures to protect your personal data. All communications with our platform use HTTPS encryption. Authentication is managed through secure JWT tokens stored in your browser's local storage. We restrict access to personal data to authorised personnel only and require our third-party service providers to maintain comparable security standards. Despite these measures, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

Under Sri Lanka's Personal Data Protection Act No. 9 of 2022, you have the right to access, correct, or delete your personal data held by us. You may also object to or restrict certain processing activities, request data portability, and withdraw consent at any time where processing is based on your consent. To exercise any of these rights, please contact us at the details below.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. We will notify you of any material changes by posting the updated policy on this page and, where appropriate, through direct communication. Your continued use of CampusNest after such changes constitutes your acceptance of the updated policy.