We may collect the following types of personal information:

• Name, email address, phone number, and delivery address.
• Billing information (credit/debit card details, bank transfer references).
• Order history and transaction details.
• IP address, browser type, and browsing behaviour on our website.
• Communications you send us (enquiries, complaints, feedback).

We use your personal information to:

• Process and fulfil your orders and send order confirmations.
• Handle payments securely through our payment partners.
• Communicate with you regarding your orders, returns, or enquiries.
• Send promotional emails and offers (only if you opt in).
• Improve our website, products, and customer service.
• Comply with legal obligations under Sri Lankan law.

We process your data on the basis of: (a) contractual necessity to fulfil your order, (b) your consent where explicitly given, and (c) our legitimate interest in operating and improving our business.

We do not sell or rent your personal information to third parties. We may share data with:

• Delivery and logistics partners to fulfil your orders.
• Payment processors (banks, card networks) to handle transactions.
• IT and website service providers who support our operations.
• Law enforcement or regulatory authorities when required by law.

Your data is stored securely within Sri Lanka and/or on secure cloud servers. We implement appropriate technical and organisational measures to protect your data from unauthorised access, loss, or misuse. However, no method of transmission over the internet is 100% secure.

Our website uses cookies to enhance your browsing experience, remember your preferences, and analyse traffic. You may disable cookies through your browser settings; however, some features of the website may not function correctly as a result.

You have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data (subject to legal obligations).
• Opt out of marketing communications at any time.

To exercise any of these rights, please contact us at info@colombopvc.lk.

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by Sri Lankan law. For example, tax and accounting records are retained for a minimum of 5 years.

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies independently.

We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated effective date. Continued use of our website after changes constitutes your acceptance of the revised policy.