Privacy Policy

1. Information we collect

We collect information you provide directly when you:

• Place an order — name, phone number, delivery address, and order details
• Contact us via WhatsApp, the contact form, or email
• Create an account — email address, name, and saved delivery details
• Submit a product review — name (or display name) and review content

We also collect usage data automatically, such as pages visited, browser type, device type, and referring URL, through our hosting and analytics provider (Vercel).

2. How we use your information

• Process and fulfil your orders
• Arrange delivery and share tracking information
• Respond to enquiries and provide customer support
• Verify bank transfer payments
• Improve our website and product range
• Communicate order updates via WhatsApp or phone

We do not sell or rent your personal data to third parties.

3. Sharing your information

We share your information only where necessary:

• Domex Courier — your name, phone, and delivery address are shared with our logistics partner to fulfil delivery.
• Vercel — our hosting provider processes web traffic and usage analytics on our behalf.

4. Cookies & analytics

Our website uses cookies and similar technologies for essential functionality (e.g. keeping items in your cart) and performance monitoring via Vercel Speed Insights. No advertising or tracking cookies are set by us.

You can control or delete cookies through your browser settings. Disabling cookies may affect cart and login functionality.

5. Data retention

Order records are retained for as long as required to fulfil legal and accounting obligations under Sri Lanka law. Account data is retained until you request deletion. Inactive accounts may be removed after an extended period of inactivity.

6. Your rights

You have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us using the details on our contact page.

7. Security

We use industry-standard practices to protect your data, including encrypted connections (HTTPS) and access-controlled systems. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but take reasonable precautions.

8. Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of our website after changes constitutes acceptance of the revised policy.

9. Contact

For privacy-related questions or requests, reach us at: