Legal
Privacy policy
Last updated August 2026
What we collect
Your name, email, phone number and delivery address when you place an order; your email and display name if you create an account. Card numbers are entered directly on our payment gateway's page and never reach Ceylona's servers.
Why we hold it
To fulfil your order, to let the maker prepare and post it, to arrange the courier, and to contact you if something goes wrong. We do not sell personal data to anyone, ever.
Who we share it with
Only the artisan fulfilling your order (name, address and phone), the courier, and our payment gateway. Each receives the minimum needed to do their part.
How long we keep it
Order records for seven years, as Sri Lankan tax law requires. Account data until you ask us to delete it.
Your rights
Email privacy@ceylona.lk to see, correct or delete what we hold about you. We respond within 30 days.
Cookies
We use a small number of cookies to keep your basket and session working. No third-party advertising trackers.
This is a working draft written for a template, not legal advice. Have a Sri Lankan lawyer review both documents before you take real orders.
