Privacy Policy —

_Last updated: 2026-07-14_

1. Introduction

This Privacy Policy explains how ("we", "us", "our") collects, uses, and protects information about visitors and customers of .

This policy applies to anyone who interacts with , including customers in the countries we serve.

2. Who we are

operates from . You can reach us at .

3. Information we collect

We collect the following categories of information:

• Your name
• Email address

• Postal / shipping address
• Payment data (handled by our payment processors — see section 7)
• Cookie identifiers and device data
• Analytics data about how you use our site

4. How we collect information

We collect information directly when you place an order, create an account, contact support, or sign up for our newsletter. Some information is collected automatically through cookies and analytics tools while you use the site.

5. How we use information

We use the information we collect to:

• Fulfil your orders and deliver the products or services you purchase
• Provide customer support and respond to your queries
• Detect and prevent fraud, abuse, and unauthorised access
• Comply with our legal and accounting obligations

• Understand how visitors use our site so we can improve it

6. Legal basis for processing (EU / UK customers)

For visitors and customers in the European Economic Area and the United Kingdom, our legal bases for processing your personal data are:

• Contract — to process your order, deliver your purchase, and provide customer support.
• Legitimate interest — to operate, secure, and improve our store and prevent fraud.
• Consent — for marketing communications and non-essential cookies. You may withdraw consent at any time.
• Legal obligation — to keep records required by tax, accounting, and consumer-protection law.

7. Payment processing

• Stripe — We use Stripe to process card and bank payments. We do not store full card numbers on our servers. Stripe is responsible for card data under its PCI-DSS certification. Stripe may collect additional information from you for fraud prevention, identity verification, and regulatory compliance. Stripe's privacy policy is available at https://stripe.com/privacy.

By placing an order, you agree to the terms of the payment processor used.

8. Cookies and analytics

We use cookies to keep your shopping cart working, remember your preferences, and measure how our site is used. Categories of cookies we use:

• Strictly necessary — required for the site to function (e.g. cart, login).
• Analytics — to understand site usage.

You may refuse non-essential cookies via our cookie banner. Refusing cookies will not affect your ability to place orders.

10. Sharing with service providers

We share personal information with the following categories of service providers, only as needed to operate our business:

• Stripe — payment processing

• Hosting / cloud providers — to operate the website and store data securely

We do not sell your personal data.

12. Data retention

We keep your personal data only for as long as we need it:

• Order records — at least the period required by our local accounting and tax law (typically 5–7 years).
• Marketing preferences — until you unsubscribe.
• Analytics data — usually 14–26 months, depending on the analytics provider.
• Support tickets — up to 3 years after the issue is resolved.

13. Your rights

Subject to local law, you may exercise the following rights with respect to your personal data:

• Access a copy of the data we hold
• Correct or update inaccurate data
• Delete your data, where there is no overriding legal reason to keep it
• Restrict or object to certain types of processing
• Receive a portable copy of your data
• Withdraw consent, where processing relies on consent

To exercise any of these rights, email . We may need to verify your identity before responding.

14. Security

We use industry-standard measures to protect personal data, including TLS encryption in transit, access controls, and reliance on payment processors that are PCI-DSS certified for card data. No system is perfectly secure, however, and we encourage you to use strong, unique passwords.

16. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The "Last updated" date at the top of this page shows when the policy was last changed. Material changes will be communicated via a notice on the site or by email.

17. Contact us

For privacy questions or to exercise any of the rights above, contact us at .

GDPR / UK GDPR appendix (EEA and UK customers)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation gives you specific rights regarding your personal data.

• Legal basis — We process personal data on the basis of contract (to fulfil your order), legitimate interest (to operate, secure and improve our services), and consent (for marketing and non-essential cookies).
• Your rights — You may request access, rectification, erasure, restriction of processing, portability, or object to processing. Where processing relies on consent, you may withdraw it at any time.
• Data transfers — Where personal data is transferred outside the EEA / UK, we rely on the European Commission's Standard Contractual Clauses or other appropriate safeguards as published by the relevant data-protection authority.
• Supervisory authority — You have the right to lodge a complaint with the data-protection authority in your country.
• Contact — Send privacy requests to . We will respond within 30 days as required by GDPR.

_This document is a template and does not replace advice from a qualified lawyer. Review with a professional familiar with your jurisdiction before publishing._>

_Generated with br.lk — https://br.lk/tools/legal-policy-generator_