Privacy Policy

Introduction

This policy explains what information we collect when you use our website, place an order, or contact us. We keep it in plain language and only describe what we reasonably need to run our gifting and delivery service.

Information we collect

We may collect:

• Identity and contact details: name, phone number, delivery address, and email address.
• Order and transaction details: items purchased, amounts paid, payment method type (for example, card or cash on delivery), order references, delivery instructions, and gift messages you choose to provide.
• Technical data: basic information from your browser or device (such as IP address and cookies) as described below.

How we use your information

• Order processing: to confirm, fulfil, and record your purchases.
• Delivery coordination: to share necessary details with couriers so your gift can reach the right person.
• Customer support: to respond to questions, resolve issues, and follow up on your orders.
• Legal and safety: where required to comply with law or protect our customers and business.

Data sharing

We do not sell your personal information. We share it only when needed to operate our service:

• Courier services: name, phone, address, and delivery notes required for dispatch and proof of delivery.
• Payment providers: payment processors receive the data required to authorise or complete card payments; we do not store full card details on our own servers beyond what the provider returns for reconciliation.
• Professional advisers: where legally necessary, for example accountants or lawyers bound by confidentiality.

Data protection

We use reasonable administrative, technical, and organisational measures appropriate to our size and the nature of the data we hold. No online service can guarantee perfect security; if we become aware of a serious incident affecting your data, we will address it in line with applicable law.

Your rights (Sri Lanka PDPA)

Sri Lanka’s Personal Data Protection Act (PDPA) gives individuals rights over their personal data. Depending on your situation, you may have the right to:

• Access: ask what personal data we hold about you.
• Correction: ask us to correct inaccurate or incomplete information.
• Deletion: ask us to delete certain data where the law allows and it is practical for us to do so (some records must be kept for tax, legal, or dispute reasons).

To exercise these rights, contact us using the details below. We may need to verify your identity before responding.

Cookies

Our website may use cookies and similar technologies to keep the site working (for example, remembering your session or preferences) and to understand how visitors use the site in aggregate. You can control cookies through your browser settings; blocking some cookies may affect how certain features work.

Contact

Questions about this policy or your personal data? Reach us via our Contact page, or write to the studio address shown in the site footer. We aim to respond within a reasonable time.