Privacy Policy

Last updated 6 August 2026

This Privacy Policy explains how Design Thinking @ SL (“we”, “us”, “our”) collects, uses, shares, and protects information when you use our websites and the ICE platform at designthinking.lk and its subdomains (together, the “Services”). Design Thinking @ SL is operated by the Augmented Human Lab at the NUS School of Computing, in partnership with the SHA Foundation.

Information we collect
Google user data
How we use information
Limited Use disclosure
How we share information
Retention & deletion
Security
Your rights
Children
Changes
Contact us

1. Information we collect

We collect information you provide and information generated as you use the Services:

Account & profile information — your name, email address, profile photo, and the skills, biography, and links you add to your participant, mentor, or member profile.
Registration details — information you submit when you register for an ICE programme or event (such as your institution, role, and responses to registration questions).
Content you create — teams and projects you join, posts and messages you send, tools and resources you add, and files you upload (including project images and intro/pitch videos).
Usage & device data — basic technical information such as your browser type and activity within the platform, used to operate and secure the Services.

2. Google user data

The Services let you sign in with Google and integrate with Google Workspace. When you authorise the application, we access the following Google data through Google APIs:

Data / scope	Why we access it
Email address & basic profile (`userinfo.email`, profile)	To authenticate you, identify your account, and display your name and photo on the platform.
Google Drive (`drive`)	To create and manage the Drive files and folders used by the platform — for example storing the images and intro/pitch videos you upload and the documents associated with your team and project.
Directory (Admin) (`admin.directory.user`)	To provision and manage `@designthinking.lk` Google Workspace accounts for approved participants and members of our organisation.
Calendar (`calendar`)	To create and manage events related to ICE programmes and sessions.
Sending email (`script.send_mail`)	To send you transactional messages such as invitations, account details, and notifications.

We only request the scopes needed to provide the features described above, and we ask for your consent before accessing this data.

3. How we use information

We use the information we collect to:

operate, maintain, and secure the Services and your account;
run ICE programmes — managing registration, teams, projects, mentoring, and events;
provision and administer @designthinking.lk accounts for approved members;
enable collaboration features such as the member directory, projects, messages, and tools;
send you invitations, account information, reminders, and service notifications;
improve the Services and understand how they are used; and
comply with legal obligations and enforce our terms.

We do not sell your personal information or your Google user data, and we do not use it for advertising.

4. Google API Services Limited Use disclosure

Design Thinking @ SL’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we use Google user data only to provide and improve the features described in this policy; we do not transfer it to others except as necessary to provide those features, for security, or to comply with applicable law; we do not use it for serving advertisements; and we do not allow humans to read it unless we have your consent, it is necessary for security or to comply with the law, or the data is aggregated and anonymised.

We share information only in these limited circumstances:

With other members — profile details, team/project content, posts, and messages you create are visible to relevant members of the platform, consistent with how the feature works.
Service providers — Google (Workspace and Google Cloud) hosts and processes data on our behalf. If you complete your profile, we may invite you to the designthinking-lk GitHub organisation, which shares your email or username with GitHub for that purpose.
Legal reasons — where required by law, or to protect the rights, safety, and security of our users, our organisation, or the public.

We do not sell personal information to third parties.

6. Retention & deletion

We keep your information for as long as your account is active or as needed to provide the Services and meet legal requirements. You may ask us to delete your account and associated data by contacting us. When an account is removed, we delete the associated profile, skills, team/project membership, uploads, messages, and posts; a limited record may be retained where required for legitimate administrative or legal purposes.

You can also review or revoke the application’s access to your Google Account at any time at myaccount.google.com/permissions.

7. Security

We take reasonable technical and organisational measures to protect your information, including access controls and reliance on Google’s secure infrastructure. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these rights, contact us using the details below.

9. Children

The Services are intended for university students, professionals, and adults participating in our programmes. They are not directed to children under 13, and we do not knowingly collect personal information from them.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you through the Services.

11. Contact us

If you have questions about this Privacy Policy or your data, contact us at: