Privacy Policy

This Privacy Policy applies to the Elcoan Lanka website (store.elcoanlanka.com), which is a product of Elcoan Lanka (Pvt) Ltd.

By using this site or placing an order, you agree to the collection and use of information as described here.

If you have any questions, please contact us at info@elcoanlanka.lk.

1. Who we are

Elcoan Lanka (Pvt) Ltd is a registered company in Sri Lanka. Our business address is 338/A, Jayanthi Mawatha, Padukka (10500), Sri Lanka.

You can reach us at info@elcoanlanka.lk or +94 78 682 5313. Our website is https://elcoanlanka.com.

2. What information we collect

When you visit our site or place an order, we may collect:

• Your name, email address, phone number, and billing and delivery address.
• Account login details if you create an account on our site.
• Order details, including the products you purchased, payment method used, and order history.
• Payment-related transaction confirmation data (e.g. for bank transfers).
• Technical data such as your IP address, browser type, operating system, and the page that referred you to our site.
• Communications you send us by email, contact form, or phone.

We do not store credit or debit card numbers on our own servers. Online payment transactions are securely handled through registered payment processors where applicable.

3. How we use your information

We use the information we collect to:

• Process and fulfil your orders, including arranging delivery through courier partners.
• Send you order confirmations, dispatch updates, and delivery information.
• Respond to your questions, support requests, or complaints.
• Send you marketing emails about new products, offers, or updates (you can opt out at any time).
• Improve our website, product listings, and customer experience.
• Detect and prevent fraud or misuse of our site.
• Meet our legal, accounting, and tax obligations under Sri Lankan law.

4. Legal basis for processing (PDPA 2022)

We process your personal data under Sri Lanka’s Personal Data Protection Act No. 9 of 2022 on the following grounds:

• Contract: to process and fulfil your order.
• Legal obligation: to maintain business records and comply with tax and accounting laws.
• Consent: for marketing emails, which you can withdraw at any time.
• Legitimate interest: to prevent fraud, improve our services, and manage our business.

5. Who we share your information with

We share your data only with third parties that help us run our business. These include:

We do not sell your personal data to any third party. We do not share your data with anyone outside of what is needed to process your order and run our business.

6. Cookies

Our website uses cookies, which are small text files stored on your device. We use cookies to:

• Keep your shopping cart active during your visit.
• Understand how people use our site through analytics tools.
• Support marketing and advertising activity.

You can control cookie settings through your browser. Disabling certain cookies may affect how some parts of the site work.

7. How long we keep your data

• Order records are kept for at least 7 years to meet accounting and tax obligations.
• Account data is kept for as long as you have an active account with us.
• Marketing consent records are kept until you withdraw your consent.

You can request deletion of your personal data at any time by contacting us. Where we are legally required to keep certain records, we will let you know.

8. Your rights under the PDPA

As a data subject under Sri Lanka’s Personal Data Protection Act No. 9 of 2022, you have the right to:

• Access the personal data we hold about you.
• Correct any inaccurate or incomplete data.
• Request deletion of your data, subject to legal exceptions.
• Object to how we use your data for direct marketing.
• Withdraw consent for marketing at any time.

To exercise any of these rights, please contact us at info@elcoanlanka.lk. We aim to respond within 30 days.

9. Data security

We take reasonable technical and organizational steps to protect your personal data from unauthorized access, loss, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page. If the changes are significant, we will notify you by email or by a notice on the site.

11. Contact us

This policy is governed by the laws of Sri Lanka.