At BabyStore.lk, we respect your privacy and are committed to protecting the personal information you provide when you browse our website, create an account, place an order, contact us or use our services.
This Privacy Policy explains what information we collect, how we use it, when we may share it and how you can contact us about your personal information.
By using BabyStore.lk, you agree to the practices described in this Privacy Policy.
1. Who We Are
BabyStore.lk is an online store providing baby, mother and family-care products to customers in Sri Lanka.
For applicable data protection purposes, we are responsible for determining how your personal information is collected and used through our website.
2. Information We Collect
We may collect information that you provide when you use our website, including:
Full name
Email address
Telephone number
Billing address
Delivery address
Account information
Order and purchase history
Payment and transaction information
Customer service communications
Product reviews and feedback
We may also automatically collect certain technical information when you visit our website, such as:
IP address
Browser and device information
Operating system
Pages visited
Products viewed
Website usage information
Date and time of visits
We only seek to collect information that is reasonably necessary for the relevant purpose.
3. How We Use Your Information
We may use your personal information to:
Process and fulfil your orders
Process payments
Arrange product delivery
Send order and delivery updates
Manage customer accounts
Respond to enquiries
Process returns and refunds
Provide customer support
Improve our website and services
Prevent fraud and protect website security
Understand website usage and performance
Send promotional communications where permitted and, where required, with your consent
We process personal information only for lawful and appropriate purposes under applicable data protection requirements.
Sri Lanka’s Personal Data Protection Act No. 9 of 2022 establishes a framework governing the processing of personal data and provides rights and protections for individuals.
4. Information Used for Orders
When you place an order, we use the information you provide to process and deliver your purchase.
This may include sharing necessary information with:
Payment providers
Courier and delivery companies
Website and hosting providers
Technology service providers
Customer support providers
For example, a courier may receive your name, delivery address and telephone number so that your order can be delivered.
We only share information that is reasonably necessary for the relevant service.
5. Payment Information
Online payments may be processed through third-party payment providers.
Payment Provider: PayHere
Depending on the payment method, the payment provider may process information such as card or transaction details.
Where payments are handled by a third-party payment provider, that provider’s own privacy policy and security practices may also apply.
BabyStore.lk does not intentionally store complete payment card details on its own website systems where such information is processed directly by the payment provider.
6. Cookies
BabyStore.lk uses cookies and similar technologies to help the website function and provide a better shopping experience.
Cookies may be used to:
Keep products in your shopping cart
Maintain your login session
Remember website preferences
Support checkout functionality
Improve website performance
Understand website traffic and usage
Measure marketing performance where applicable
Some cookies are necessary for the website to operate correctly.
You can manage or disable cookies through your browser settings. However, disabling certain cookies may affect website functionality.
7. Analytics and Marketing
We may use analytics services to understand how customers use BabyStore.lk and improve our website.
These services may collect information such as:
Pages visited
Products viewed
Device information
General location information
Traffic sources
Website interactions
Analytics Services: Google Analytics
Where applicable, we may also use advertising or marketing technologies to measure campaigns and show relevant advertisements.
Marketing Services: Meta Pixel, Google Ads
8. Marketing Communications
If you subscribe to our newsletter or promotional communications, we may send information about:
New products
Discounts
Special offers
Promotions
Baby-care guides
Blog articles
Store announcements
You can unsubscribe from marketing communications at any time by using the unsubscribe option provided in the communication or by contacting us.
Order confirmations, delivery updates and other essential service communications may still be sent when necessary.
9. Sharing Your Information
We do not sell your personal information as a business practice.
We may share relevant information with trusted third parties when necessary to operate BabyStore.lk, including:
Payment providers
Courier and delivery partners
Website hosting providers
IT and security providers
Email and communication providers
Analytics providers
Marketing providers where applicable
Professional advisers
Government or regulatory authorities where legally required
Third-party service providers are expected to handle information appropriately and only for legitimate purposes.
10. International Data Processing
Some of our service providers may store or process information outside Sri Lanka.
Where personal information is transferred or processed outside Sri Lanka, we will take reasonable steps to ensure that the processing is handled in accordance with applicable data protection requirements.
Sri Lanka’s PDPA includes requirements relating to the processing and transfer of personal data, including processing outside Sri Lanka.
11. How We Protect Your Information
We take reasonable technical and organizational measures to protect personal information against:
Unauthorized access
Loss
Misuse
Alteration
Unauthorized disclosure
Destruction
These measures may include secure website connections, access controls, system security, restricted administrative access, backups and security monitoring.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
12. How Long We Keep Your Information
We retain personal information only for as long as reasonably necessary for purposes such as:
Processing orders
Managing customer accounts
Providing customer support
Handling returns and refunds
Maintaining business records
Meeting legal requirements
Resolving disputes
Preventing fraud and protecting our services
When information is no longer required, we may securely delete or anonymize it, subject to applicable legal requirements.
13. Your Privacy Rights
Subject to applicable law, you may have rights regarding your personal information, including the right to:
Request access to personal information we hold about you
Request correction of inaccurate information
Request deletion where legally applicable
Withdraw consent where processing is based on consent
Object to certain processing
Request restriction of certain processing
Exercise other rights available under applicable data protection law
These rights may be subject to legal conditions and limitations.
Sri Lanka’s PDPA establishes rights for data subjects and provides a regulatory framework for exercising those rights.
14. How to Make a Privacy Request
If you want to access, correct, delete or otherwise exercise an applicable privacy right, please contact us:
Please provide enough information for us to identify your account or transaction.
For security purposes, we may need to verify your identity before completing certain requests.
15. Children’s Privacy
BabyStore.lk sells products intended for babies and children, but our online purchasing services are intended for adults and individuals legally capable of entering into transactions.
We do not knowingly create customer accounts or process purchases directly from children.
If you believe that a child has provided personal information to us inappropriately, please contact us so that we can review the matter and take appropriate action.
16. Third-Party Websites
Our website may contain links to third-party websites and services, including payment providers, social media platforms, brands and other external websites.
Once you leave BabyStore.lk, the third party’s own privacy policy and terms may apply.
We are not responsible for the privacy practices or security of third-party websites.
17. Reviews and Customer Content
If you submit a product review, photograph, comment or other content to BabyStore.lk, information you choose to make publicly visible may be displayed on our website.
Please do not include sensitive or private information in public reviews or comments.
We may remove content that is unlawful, misleading, abusive, irrelevant or otherwise violates our website policies.
18. Data Security Incidents
If we become aware of a personal data security incident that requires action under applicable law, we will take reasonable steps to investigate, contain and address the incident and make any notifications required by law.
19. Changes to This Privacy Policy
We may update this Privacy Policy when our services, technology, business practices or legal requirements change.
Any updated version will be published on this page with a revised Last Updated date.
We encourage you to review this page periodically.
20. Contact Us
If you have questions or concerns about this Privacy Policy or how we handle your personal information, please contact us.
