We are committed to protecting your personal data. This policy outlines our practices in compliance with the Sri Lanka Personal Data Protection Act (PDPA) and GDPR.
Data Controller
[Your Business Name] is the controller responsible for your personal data.
DPO Contactdpo@yourdomain.com
Data Collection
We collect the following data to provide our services:
Identity
Name, email address, phone number
Account
Username, password (encrypted), preferences
Transaction
Order history, payment details, delivery addresses
Technical
IP address, browser type, device info
Usage
- 01Fulfilling and managing your orders
- 02Creating and managing your personalized account
- 03Providing customer support and order updates
- 04Sending marketing communications (strictly consensual)
Your Rights
You have the right to access, rectify, or erase your personal data at any time.
Access & Portability
Request copies of your data in a readable format.
Rectification
Correct incomplete or inaccurate information.
Erasure
Request to have your data permanently deleted.
Exercise these rights in Account Settings
Contact
Privacy Team
privacy@yourdomain.com