Privacy Policy

Information We Collect

Personal Information

When you interact with our website or make a purchase, we may collect:

• Contact Information: Name, email address, phone number, shipping and billing addresses
• Account Information: Username, password, account preferences
• Payment Information: Credit/debit card details, billing information (processed securely through payment providers)
• Order Information: Purchase history, product preferences, order details

Automatically Collected Information

• Device Information: IP address, browser type, operating system
• Usage Data: Pages visited, time spent on site, navigation patterns
• Cookies: Small files stored on your device to enhance user experience
• Location Data: Approximate location based on IP address (if permitted)

How We Use Your Information

We use the collected information for the following purposes:

Order Processing & Fulfillment

• Processing and delivering your orders
• Sending order confirmations and shipping updates
• Managing returns and exchanges
• Processing payments and preventing fraud

Customer Service

• Responding to inquiries and support requests
• Resolving disputes and troubleshooting issues
• Providing product recommendations

Marketing & Communications

• Sending newsletters and promotional offers (with your consent)
• Announcing new products and special events
• Personalizing your shopping experience

Website Improvement

• Analyzing site traffic and user behavior
• Improving website functionality and design
• Developing new features and services

Information Sharing & Disclosure

We do not sell your personal information. We may share your data with:

Service Providers

• Payment Processors: To securely process transactions
• Shipping Partners: To deliver your orders
• Email Service Providers: To send communications
• Analytics Tools: To understand website usage

Legal Requirements

We may disclose information if required by law or to:

• Comply with legal obligations or court orders
• Protect our rights, property, or safety
• Prevent fraud or illegal activities
• Enforce our terms and conditions

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.

Data Security

We implement industry-standard security measures to protect your information:

• SSL Encryption: All data transmitted is encrypted using Secure Socket Layer (SSL) technology
• Secure Servers: Data is stored on secure, password-protected servers
• Access Controls: Limited employee access to personal information
• Regular Audits: Periodic security assessments and updates
• PCI Compliance: Payment processing meets Payment Card Industry standards

Note: While we strive to protect your information, no method of transmission over the internet is 100% secure.

Cookies & Tracking Technologies

What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us improve your experience.

Types of Cookies We Use

• Essential Cookies: Required for website functionality (shopping cart, login)
• Preference Cookies: Remember your settings (language, theme)
• Analytics Cookies: Help us understand how you use our site
• Marketing Cookies: Used to deliver relevant advertisements

Managing Cookies

You can control cookies through your browser settings. However, disabling cookies may affect website functionality.

Your Rights & Choices

You have the following rights regarding your personal information:

Access & Correction

• View and update your account information at any time
• Request a copy of the data we hold about you
• Correct inaccurate or incomplete information

Data Deletion

• Request deletion of your account and personal data
• Right to be forgotten (subject to legal retention requirements)

Marketing Communications

• Unsubscribe from marketing emails at any time
• Opt-out links included in all promotional communications
• Manage communication preferences in your account settings

Data Portability

• Request a copy of your data in a portable format
• Transfer your data to another service (where technically feasible)

To exercise any of these rights, please contact us at privacy@loomandlane.lk

Data Retention

We retain your personal information for as long as necessary to:

• Fulfill the purposes outlined in this policy
• Comply with legal and regulatory requirements
• Resolve disputes and enforce agreements

Typical retention periods:

• Account Data: Retained while your account is active
• Purchase History: Retained for 7 years (tax and accounting purposes)
• Marketing Data: Retained until you unsubscribe or for 3 years of inactivity
• Website Analytics: Aggregated data retained indefinitely

Children's Privacy

Our website is not intended for children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.

International Data Transfers

Your information may be transferred to and processed in countries other than Sri Lanka. We ensure appropriate safeguards are in place to protect your data, including:

• Standard contractual clauses approved by regulatory authorities
• Ensuring service providers comply with data protection regulations
• Implementing technical and organizational security measures

Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing any personal information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will:

• Post the updated policy on this page with a new "Last Updated" date
• Notify you via email of significant changes (if you've subscribed)
• Obtain your consent if required by law

We encourage you to review this policy periodically.