Privacy Policy

1. Data we collect

We collect only what we need to run the store:

• Account: your name, email address and profile photo from Google sign-in, and an optional username, bio and photo for a public profile.
• Orders and addresses: your name, phone number, delivery address, city, notes, and the products, quantities and totals you order.
• Optional location: exact coordinates are saved only if you tap to add them to an address and consent to it. You can remove them in Settings.
• Dealer applications: full name, NIC number, phone, address, bank name, branch, account number and account name, used for identity checks and payouts.
• Dealer activity: link views, clicks, orders and wallet transactions.
• Site usage: anonymous daily page-view counters, only if you accept analytics (see the Cookie Policy).
• Photos you upload for posts or profiles.

2. Why we use it

• To create your account, confirm and deliver orders, and contact you about them.
• To run the dealer program, verify identity, calculate commission and pay you.
• To prevent fraud and abuse and to keep the site secure.
• To understand which pages are used so we can improve the store (with your consent).
• To meet legal, tax and accounting obligations.

3. Our legal bases

We rely on performing our contract with you (orders, accounts, payouts), legal obligations, our legitimate interests in security and fraud prevention, and your consent for optional location and analytics. You can withdraw consent at any time.

4. Who we share data with

We do not sell your personal data. We share it only as needed:

• Delivery couriers receive your name, phone number and address for your order.
• The dealer whose link you ordered through can see that order and its status, so their commission can be tracked. Dealers must not use this information for anything else.
• Service providers: Google Firebase (sign-in, database and hosting data) and Cloudinary (photo storage). They process data on our behalf.
• Authorities, where the law requires it.

5. International transfers

Our providers may store data on servers outside Sri Lanka. We use providers with appropriate safeguards for personal data.

6. How long we keep it

We keep account and order data while your account is active and for as long as needed for tax, accounting and dispute purposes. When you delete your account we remove your profile, addresses and saved data, keeping only what the law requires us to retain.

7. Your rights

Subject to the law you can ask to access, correct, delete or restrict your data, object to processing, and withdraw consent.

• Settings lets you download a copy of your data, clear saved locations and delete your account yourself.
• For anything else, email [email protected]. We will respond within a reasonable time.
• You may also complain to the Data Protection Authority of Sri Lanka.

8. Security

Access to data is limited by sign-in and database security rules, and traffic is encrypted. No system is perfectly secure, so please protect your account and tell us at once if you suspect misuse.

9. Children

The site is not meant for children under 18 and we do not knowingly collect their data. Contact us and we will delete it.

10. Changes

We may update this policy and will change the date when we do. Last updated 29 October 2026.

11. Contact

Privacy questions or requests: [email protected].