Privacy policy

What we collect

When you place an order:

• Your name and mobile number.
• Your delivery address, city and district (not needed if you collect in person).
• What you ordered, the delivery option, the payment method you chose, and your order number.
• Your email address, only if you choose to give it.

We do not collect card numbers or bank account details on this website. If you pay cash on delivery, you pay the courier in cash when the parcel arrives. If you pay by bank transfer, we send you our bank details on WhatsApp and you pay through your own bank.

When you message us on WhatsApp, we also see your WhatsApp number and what you write.

When you browse, our advertising tool (the Meta Pixel) records which pages you view, and when you add an item to the cart, start checkout or place an order, including the order value. Our hosting and Meta may also receive technical details such as your IP address and browser.

Why we use it

• To take your order, pack it, and deliver it or hand it over.
• To contact you about your order, for example about delivery.
• To make your invoice and to keep our sales and accounting records.
• To answer your questions and handle returns or complaints.
• To stop spam, fake orders and misuse of the website.
• To measure and improve our advertising on Facebook and Instagram.

We do not sell your personal information.

Who we share it with

Only the people and services needed to do the jobs above:

• Fardar, our delivery courier: your name, phone number and delivery address.
• WhatsApp (Meta): messages you send us, and the order message sent when you choose bank transfer.
• Meta (Facebook and Instagram): advertising measurement through the Pixel, described above.
• Vercel, which hosts this website, and Google (Firebase), where we store orders.
• Resend, if you give an email address, to send your order emails.
• Cloudflare, whose Turnstile check helps us tell people from bots at checkout.

These services may process information on servers outside Sri Lanka. We may also have to share information if the law requires it.

Cookies and information stored on your device

• Your cart is saved in your browser so it is still there if you refresh. It holds the items and quantities only.
• What you type at checkout is kept for that browser tab, so a refresh does not wipe it. It is removed when you place the order or close the tab.
• The Meta Pixel may set its own cookies for advertising measurement. You can block them in your browser settings.
• We use one login cookie for our own staff on the admin pages. Shoppers do not get it.

How long we keep it

We keep order records for as long as we need them for delivery, returns, accounting and legal reasons. After that we delete or anonymise them.

How we protect it

The website uses an encrypted connection (HTTPS). Orders are stored in a protected database that only our server and our password-protected admin can reach. Your invoice can only be downloaded with the private link we give you after you order. No system is perfectly secure, but we take care to keep your information safe.

Your choices

You can ask us to show you the information we hold about you, correct it, or delete it, and you can ask us to stop using it for advertising. Under Sri Lankan data protection law you may have further rights. Contact us (below) and we will reply as soon as we can. If you give us your email address and no longer want order emails, tell us and we will stop.

Children

Our website is for adults. We do not knowingly collect information from children.

Contact us

For any privacy question or request, message us on WhatsApp (+94 76 117 8055).