We respect your privacy and handle your information in line with the Personal Data Protection Act No. 9 of 2022 of Sri Lanka. This page explains what we collect and why.
What we collect
- Order details: your name, mobile number, an optional second number and email, your delivery address, what you ordered and how you paid.
- Payment proof: if you pay in advance, the reference number and any slip photo you send. We never ask for card numbers, PINs or passwords.
- Returns: photos you send us of an item.
- Back-in-stock requests: your mobile number and the item you're waiting for.
- This device: your bag, wishlist, recently viewed items and saved checkout details are stored in your own browser, not on our servers.
- Analytics (only if you agree): anonymous information about how the site is used, through Google Analytics.
Why we use it
- To confirm, deliver and support your orders, returns and refunds (we share your name, number and address with our courier).
- To send order updates, verification codes and back-in-stock messages by SMS.
- To prevent fake orders and fraud (for example, verifying numbers and recording parcels that were refused).
- To improve the shop (analytics, only with your consent).
We don't sell your information and we don't send marketing messages unless you ask us to.
Who we share it with
- Courier companies, to deliver your parcel
- Our SMS provider, to send you messages
- Amazon Web Services, which securely hosts our website and data
- Google (reCAPTCHA for spam protection, and Analytics if you agree)
- Authorities, if the law requires it
How long we keep it
We keep order records for up to 6 years for accounting and legal reasons. Payment slips and return photos are deleted once they're no longer needed to resolve the order, and back-in-stock requests once the message is sent.
Keeping it safe
The site uses HTTPS encryption. Order data and payment slips are kept in private, encrypted storage that only our staff can access, and admin access is protected by two-step verification.
Your rights
You can ask to see the information we hold about you, correct it, or have it deleted (unless we must keep it by law). Contact us at our number or and we'll reply within 21 days.