Website Terms

Effective date: 18 August 2026
Last updated: 18 August 2026

These Terms of Service ("Terms") form a legally binding agreement between you and Deep Diagnostics (Pvt) Ltd, a company incorporated under the laws of the Democratic Socialist Republic of Sri Lanka, having its registered office at No. 68, Jaya Mawatha, Pannipitiya 10230, Sri Lanka ("Deep Diagnostics", "we", "us" or "our"), governing your access to and use of the CPDfy platform, including the provider portal at provider.cpdfy.com, the form submission service at form.cpdfy.com, and all associated websites, applications, APIs and services (collectively, the "Platform").

BY ACCESSING OR USING THE PLATFORM, CREATING AN ACCOUNT, OR SUBMITTING ANY FORM THROUGH THE PLATFORM, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD AND AGREE TO BE BOUND BY THESE TERMS. IF YOU DO NOT AGREE, YOU MUST NOT ACCESS OR USE THE PLATFORM.

1. Definitions

  • "Account" means a registered user account on the Platform.
  • "Certificate" means any certificate, digital badge, credential or record of attendance or completion generated, issued, rendered or verified through the Platform.
  • "Content" means any data, text, image, template, logo, form, document or other material uploaded to, generated on, or transmitted through the Platform.
  • "Participant" means an individual who submits a Form or receives a Certificate through the Platform.
  • "Provider Organisation" means an organisation registered on the Platform to create Events, Forms and Certificates.
  • "Event" means a continuing professional development activity created and administered on the Platform by a Provider Organisation.
  • "Form" means a data collection instrument created on the Platform.
  • "User" means any person accessing the Platform, including Provider Organisation personnel and Participants.

2. Eligibility and Capacity

2.1. You must be at least eighteen (18) years of age and possess the legal capacity to enter into a binding contract to use the Platform.

2.2. If you access the Platform on behalf of a Provider Organisation or any other legal entity, you represent and warrant that you are duly authorised to bind that entity to these Terms, and references to "you" include that entity.

2.3. The Platform is intended for professional and institutional use. It is not directed at children.

3. Accounts, Activation and Security

3.1. Access to the provider portal requires registration and manual activation by Deep Diagnostics. Registration alone does not confer access. Accounts remain inactive until the required documentation, including the Organisation Registration Agreement or the Organisation User Access Control Agreement as applicable, has been submitted, verified and approved by us.

3.2. We reserve the absolute right to approve, refuse, defer or revoke any registration or activation request at our sole discretion, without obligation to state reasons.

3.3. You must provide accurate, current and complete information during registration and keep it updated. Providing false, misleading or fraudulent information is a material breach of these Terms.

3.4. You are solely responsible for safeguarding your credentials and for all activity occurring under your Account. Credentials must not be shared, transferred, sold or made available to any third party. You must notify us immediately at cpdfy@deepdiagnostics.lk upon becoming aware of any unauthorised access or security breach.

3.5. Certain functions, including CPD provider verification status and global administrative controls, are restricted to authorised Deep Diagnostics personnel and may not be circumvented.

4. Obligations of Provider Organisations

4.1. A Provider Organisation is solely and exclusively responsible for the CPD activities it delivers, the accuracy of the Events and Forms it publishes, the eligibility criteria it applies, the CPD points or credits it assigns, and the Certificates it issues.

4.2. A Provider Organisation warrants that it holds all accreditations, approvals, registrations and professional authorisations it asserts on the Platform, and that such credentials are current and unrevoked. Any change to accreditation status must be notified to us in writing within fourteen (14) days.

4.3. A Provider Organisation acts as the data controller in respect of Participant data it collects through the Platform. Deep Diagnostics acts as a data processor on its behalf in respect of such data, as further described in our Privacy Policy. The Provider Organisation warrants that it has a lawful basis for all collection and processing it directs, and that it has provided all notices and obtained all consents required under applicable law.

4.4. A Provider Organisation must ensure that every person to whom it grants access to its organisation workspace has executed the Organisation User Access Control Agreement and is bound by obligations of confidentiality and data protection no less protective than these Terms. The Provider Organisation is liable for the acts and omissions of its personnel as if they were its own.

4.5. Access rights must be revoked promptly, and in any event within seven (7) days, when a person ceases to be authorised.

5. Acceptable Use

5.1. You must not, and must not permit any person to:

  • use the Platform for any unlawful, fraudulent, deceptive or malicious purpose;
  • issue, procure, alter or facilitate any Certificate that misrepresents attendance, participation, completion, accreditation or CPD credit;
  • forge, tamper with, clone, backdate or reproduce any Certificate, verification record, digital signature or badge;
  • upload Content that infringes intellectual property, privacy or other rights of any person;
  • upload malware, or any code intended to disrupt, damage or gain unauthorised access to any system;
  • access, or attempt to access, data belonging to another organisation or Participant without authorisation;
  • probe, scan, penetration-test, reverse engineer, decompile or disassemble the Platform or circumvent any authentication, rate limit, retry limit or access control;
  • scrape, harvest or bulk-extract data by automated means except through an interface we expressly provide;
  • use the Platform to transmit unsolicited bulk communications in breach of applicable law;
  • resell, sublicense, lease or otherwise commercially exploit the Platform without our prior written consent; or
  • impersonate any person or entity or misrepresent your affiliation.

5.2. We may investigate any suspected breach and may suspend access, remove Content, revoke Certificates and disclose information to law enforcement or regulators where we consider it necessary.

6. Certificates, Verification and Accreditation Disclaimer

6.1. Certificates are generated from data supplied by the issuing Provider Organisation and by Participants. Deep Diagnostics does not accredit, validate, endorse or independently verify the substantive content, educational quality, CPD value, or regulatory recognition of any Event or Certificate.

6.2. The Platform provides technical infrastructure for issuing, cryptographically signing, delivering and verifying Certificates. A successful verification confirms only that a Certificate record exists on the Platform and has not been altered since issuance. It is not a representation by Deep Diagnostics as to the merits, accreditation status or regulatory acceptance of the underlying activity.

6.3. Whether any Certificate is accepted by a professional body, regulator, employer or licensing authority is a matter entirely outside our control, and we accept no liability for non-acceptance.

6.4. We may revoke, suspend or annotate any Certificate where we have reasonable grounds to believe it was issued fraudulently, in error, or in breach of these Terms or the Platform Regulations.

6.5. Validity period and expiry. Certificates carry a validity period determined by the issuing Provider Organisation, calculated from the date of the Event. Where the Provider Organisation has not configured a period, a default validity period of two (2) years from the Event date applies. The expiry date is printed on the Certificate and displayed on its verification page.

6.6. On expiry, a Certificate automatically ceases to return a valid verification result and is marked as expired on its verification page. Expiry occurs automatically by operation of the validity period and requires no action by us or by the Provider Organisation.

6.7. No notification of expiry. Neither Deep Diagnostics nor the Provider Organisation is under any obligation to notify a Participant of impending or actual expiry. The expiry date is disclosed on the face of the Certificate and on its verification page, and it is the Participant's sole responsibility to monitor the validity of their own Certificates and to satisfy any recurrence requirement imposed by their professional body.

6.8. Expiry is not deletion. Expiry does not delete a Certificate or the personal data it contains. An expired Certificate remains stored and, unless deleted on the instruction of the Provider Organisation, remains publicly verifiable with an expired status, so that it continues to evidence past attendance. Retention of expired Certificates is determined by the Provider Organisation as data controller, as described in our Privacy Policy and the Platform Regulations.

7. Intellectual Property

7.1. The Platform, including its software, source code, design, structure, user interface, documentation and the CPDfy name and marks, is and remains the exclusive property of Deep Diagnostics and its licensors, and is protected by the Intellectual Property Act No. 36 of 2003 and applicable international treaties.

7.2. Subject to your continuing compliance with these Terms and payment of applicable fees, we grant you a limited, non-exclusive, non-transferable, non-sublicensable, revocable licence to access and use the Platform for its intended purpose during the term of your subscription.

7.3. You retain all ownership of Content you upload. You grant Deep Diagnostics a worldwide, royalty-free, non-exclusive licence to host, store, reproduce, transmit, adapt and display such Content strictly to the extent necessary to operate, secure, back up and support the Platform and to provide the services you request.

7.4. You warrant that you hold all rights necessary to grant the licence in clause 7.3, including in respect of any logo, seal, signature image or template you upload.

7.5. No right to use our name, logo or marks is granted except as strictly necessary to identify the Platform.

8. Fees, Subscriptions and Feature Limits

8.1. Access to certain features is governed by subscription tier, and is subject to the quotas, entitlements and feature limits applicable to that tier.

8.2. Fees are payable in advance in the currency stated at the time of purchase and are, save where required by law, non-refundable.

8.3. We may revise fees, tiers, quotas and feature entitlements on not less than thirty (30) days' notice. Continued use after the effective date constitutes acceptance.

8.4. We may suspend or downgrade access where fees remain unpaid for more than fourteen (14) days after the due date.

9. Third-Party Services

9.1. The Platform integrates third-party services, which may include authentication providers, email delivery services, spreadsheet and cloud storage services, and document rendering components. Your use of such services may be subject to their own terms and privacy policies.

9.2. We are not responsible for the availability, accuracy, security or acts and omissions of any third-party service.

10. Availability, Support and Changes

10.1. We aim to provide continuous availability but do not warrant uninterrupted or error-free operation. The Platform may be unavailable due to scheduled maintenance, emergency maintenance, or causes beyond our reasonable control.

10.2. We may modify, enhance, restrict or discontinue any feature at any time. Where a discontinuation is material and adverse, we will use reasonable efforts to give thirty (30) days' notice.

10.3. You are responsible for maintaining your own independent records. Whilst we take backups, you must not rely on the Platform as your sole record of Certificates, Participants or CPD data.

11. Suspension and Termination

11.1. You may terminate your Account at any time by written notice to cpdfy@deepdiagnostics.lk.

11.2. We may suspend or terminate your access immediately and without prior notice where: (a) you commit a material breach of these Terms or the Platform Regulations; (b) we reasonably suspect fraudulent, unlawful or abusive activity, including Certificate fraud; (c) fees remain unpaid; (d) required by law, court order or regulatory direction; or (e) continued provision would expose us to legal or reputational risk.

11.3. On termination, your licence ends immediately. We will retain data for the periods set out in our Privacy Policy and thereafter delete or anonymise it. You may request an export of your data within thirty (30) days of termination.

11.4. Clauses 6, 7, 12, 13, 14, 16 and 17 survive termination.

12. Disclaimer of Warranties

12.1. TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE PLATFORM IS PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTY OF ANY KIND, WHETHER EXPRESS, IMPLIED OR STATUTORY, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, ACCURACY, OR NON-INFRINGEMENT.

12.2. We do not warrant that the Platform will meet your requirements, that defects will be corrected, or that data will be free from loss or corruption.

12.3. Nothing in these Terms excludes liability which cannot lawfully be excluded, including liability for death or personal injury caused by negligence, or for fraud or fraudulent misrepresentation.

13. Limitation of Liability

13.1. Basis of the bargain. You acknowledge and agree that the fees (if any) charged for the Platform have been set on the basis of the allocation of risk contained in clauses 12 and 13; that these limitations and exclusions are a fundamental basis of the parties' bargain and were a material inducement to us making the Platform available; that without them we would not make the Platform available on the terms offered or at the price charged; and that you have had a full opportunity to obtain independent legal advice and to insure against the risks allocated to you under these Terms. You accept that these limitations are fair and reasonable in the circumstances.

13.2. Excluded losses. To the maximum extent permitted by law, Deep Diagnostics shall have no liability whatsoever, whether arising in contract, tort (including negligence), breach of statutory duty, misrepresentation, restitution or otherwise, for any of the following, whether direct or indirect, and whether or not foreseeable or within the contemplation of the parties:

  1. loss of profit, revenue, income or anticipated savings;
  2. loss of business, contracts, opportunity or anticipated business;
  3. loss of or damage to goodwill or reputation;
  4. loss, corruption, destruction or unavailability of data, records or Certificates;
  5. loss of use, or the cost of procuring substitute goods or services;
  6. wasted expenditure, or wasted management or staff time;
  7. regulatory fines, penalties or sanctions imposed upon you;
  8. claims made against you by any third party, including any Participant, Provider Organisation, regulator, accrediting body or employer; or
  9. any indirect, incidental, special, consequential, exemplary or punitive loss or damage of any kind,

in each case even if we have been advised of, or ought reasonably to have contemplated, the possibility of such loss.

13.3. Aggregate financial cap. Subject only to clause 12.3, our total aggregate liability arising out of or in connection with these Terms and the Platform shall in no circumstances exceed:

  1. where the Platform is provided to you free of charge, or on a trial, evaluation, pilot, pre-release or beta basis, or at a nominal charge — Sri Lankan Rupees Twenty Five Thousand (LKR 25,000); and
  2. in all other cases — the greater of (i) the total fees actually paid by you to us in respect of the Platform during the twelve (12) months immediately preceding the first event giving rise to the claim, and (ii) Sri Lankan Rupees One Hundred Thousand (LKR 100,000).

13.4. Single aggregate cap. The cap in clause 13.3 is an aggregate cap applying to all claims taken together, and is not a cap per claim, per incident, per Certificate, per Participant or per contract year. A series of connected claims, or claims arising from a common cause, constitutes a single claim. The cap is not reset, multiplied or increased by reason of the number of claims, claimants, Participants, Certificates, organisations or periods concerned.

13.5. No claims against individuals. You agree to bring any claim solely against Deep Diagnostics (Pvt) Ltd, and not against any director, officer, shareholder, employee, contractor or agent of it. Any claim brought against any such person is subject to, and counts towards, the same single aggregate cap in clause 13.3.

13.6. Matters for which we bear no liability. Without limiting the generality of the foregoing, we are not liable for any loss or damage arising from or in connection with:

  1. the content, educational quality, accreditation claims, CPD valuation, decisions or Certificates of any Provider Organisation;
  2. any act or omission of a Provider Organisation, its users, its mentors, or any Participant;
  3. inaccurate, incomplete, misleading or fraudulent data supplied by you or by any Participant;
  4. your failure to maintain independent records, or to secure your credentials, accounts or devices;
  5. any third-party service, integration, authentication provider, email delivery service, network or infrastructure;
  6. unauthorised access to or disclosure of data, otherwise than as a direct result of our proven failure to implement the security measures described in our Privacy Policy;
  7. any period of unavailability, degraded performance, scheduled or emergency maintenance, suspension, feature change or discontinuation permitted under these Terms;
  8. your use of the Platform otherwise than in accordance with these Terms, the Platform Regulations or our documentation;
  9. non-acceptance of any Certificate by any professional body, regulator, employer or licensing authority; or
  10. any free, trial, evaluation, pilot, pre-release or beta feature, which is provided "as is", without warranty of any kind, and entirely at your own risk.

13.7. Time bar. You must notify us in writing of any claim, together with reasonable particulars of its nature and the loss alleged, within ninety (90) days of the date on which you first became aware, or ought reasonably to have become aware, of the circumstances giving rise to it. Any claim not notified within that period is irrevocably waived and absolutely barred. In any event, and to the fullest extent permitted by law, no proceedings may be commenced against us more than twelve (12) months after the date on which the cause of action first accrued, and the parties expressly agree to contract out of any longer limitation period that would otherwise apply.

13.8. Mitigation and backups. You must take all reasonable steps to avoid and mitigate any loss, including maintaining your own independent and current backups of Certificates, Participant records and CPD data. We shall have no liability for any loss to the extent that it could have been avoided or reduced by your compliance with this clause.

13.9. Savings and severability of limitations. Each limitation and exclusion in clauses 12 and 13 operates separately and independently. If any such limitation or exclusion is held by a court of competent jurisdiction to be unenforceable or inapplicable, whether in whole or in part, the remaining limitations and exclusions shall continue in full force and effect, and the provision held unenforceable shall be deemed to be replaced by the most protective limitation or exclusion that is enforceable, such that our liability is in every case limited to the maximum extent permitted by law.

13.10. Nothing in this clause 13 operates to limit or exclude any liability which cannot lawfully be limited or excluded, as provided in clause 12.3.

14. Indemnity

14.1. You agree to indemnify, defend and hold harmless Deep Diagnostics, its directors, officers, employees and agents against all claims, demands, proceedings, losses, damages, fines, penalties, costs and expenses (including reasonable legal fees) arising out of or in connection with: (a) your breach of these Terms or applicable law; (b) your Content; (c) any Certificate you issue or procure; (d) any claim by a Participant or regulator relating to your CPD activities or your processing of personal data; or (e) your infringement of any third-party right.

15. Force Majeure

15.1. Neither party is liable for failure or delay in performance caused by events beyond its reasonable control, including acts of God, flood, fire, epidemic, war, civil unrest, terrorism, strike, governmental action, power failure, telecommunications failure, or failure of internet infrastructure or upstream service providers.

16. Governing Law and Jurisdiction

16.1. These Terms and any dispute or claim arising out of or in connection with them, including non-contractual disputes, are governed by and construed in accordance with the laws of the Democratic Socialist Republic of Sri Lanka.

16.2. The parties submit to the exclusive jurisdiction of the competent courts of Colombo, Sri Lanka.

16.3. Before commencing proceedings, the parties shall attempt in good faith to resolve any dispute by negotiation between senior representatives for a period of thirty (30) days from written notice of the dispute.

17. General

17.1. Entire agreement. These Terms, together with the Privacy Policy, the Platform Regulations and any executed access or registration agreement, constitute the entire agreement between the parties and supersede all prior understandings.

17.2. Order of precedence. In the event of conflict, the order of precedence is: (i) any signed written agreement between you and Deep Diagnostics; (ii) these Terms; (iii) the Platform Regulations; (iv) the Privacy Policy.

17.3. Variation. We may amend these Terms by publishing a revised version with an updated effective date. Material changes will be notified by email or in-platform notice not less than fourteen (14) days before taking effect. Continued use thereafter constitutes acceptance.

17.4. Severability. If any provision is held invalid or unenforceable, it shall be severed and the remainder shall continue in full force.

17.5. No waiver. Failure or delay in enforcing any right does not constitute a waiver of that right.

17.6. Assignment. You may not assign or transfer these Terms without our prior written consent. We may assign to an affiliate or in connection with a merger, acquisition or sale of assets.

17.7. Notices. Notices to us must be sent to cpdfy@deepdiagnostics.lk and to our registered office. Notices to you will be sent to the email address on your Account.

17.8. No partnership. Nothing in these Terms creates a partnership, joint venture, agency or employment relationship.

17.9. Third-party rights. A person who is not a party to these Terms has no right to enforce any of its provisions.

18. Contact

Deep Diagnostics (Pvt) Ltd
No. 68, Jaya Mawatha, Pannipitiya 10230, Sri Lanka
Email: cpdfy@deepdiagnostics.lk
Telephone: +94 77 988 5043