Privacy Policy
Last updated 1 October 2026
This page explains what we collect when you use ceylontrends.lk, why we collect it, and who else it reaches. We have tried to write it plainly rather than legally.
What we collect
When you place an order
- Your name
- Your email address
- Your phone number
- Your delivery address
- What you ordered, what you paid, and how you chose to pay
We need every one of these to deliver your order to you and to contact you if something is wrong with the order. We cannot process an order without them.
When you create an account
An account stores the details above plus a password, which is held by our store software as a cryptographic hash — we cannot read it and neither can anyone who obtains the database. You may optionally add a date of birth and gender; these are not required, are used only to make recommendations more relevant, and can be left blank or cleared at any time from your account page.
When you make a warranty claim or leave a review
A warranty claim sends us your name, email, phone number, order number, a description of the fault and any photo you attach, by email to our team. We use it only to handle the claim.
A review is published on the site with the name you gave, your rating and what you wrote, beside a generated pattern in place of a photo. We never publish your email or phone number.
Automatically, as you browse
- Pages you visit and products you view, through Google Analytics and the TikTok pixel
- Visit statistics through Umami, which we run on our own server. It sets no cookies and does not identify you
- What you type into the search box, so we can return results; searches run on our own server
- Products you view, add to your cart and order during a visit, recorded on our own server so we can recommend products that suit what shoppers are looking at. This is tied to a random visit id, never to your name, account, email or IP address
- Your approximate location, derived from your IP address by those same services
- Your device and browser type
- If you arrived from a TikTok ad, an identifier from that click, so we can tell which ads actually lead to orders
Cookies
| Cookie | What it does |
|---|---|
| Cart session | Remembers what is in your cart. Without it the cart empties on every page. |
| Login session | Keeps you signed in. Set only if you have an account and sign in. |
| Advertising click id | Records that you arrived from a TikTok ad, so that ad can be credited with the sale. |
| Google Analytics | Counts visits and tells us which pages and products people actually look at. |
| Visit id | A random id that groups the products viewed in one visit, for our product recommendations. Expires after 30 minutes of inactivity. |
The cart and login cookies are what make the site work; blocking them will break checkout. The analytics and advertising cookies can be blocked in your browser without affecting your ability to shop.
Who else sees your information
We use a small number of outside services, and only these:
| Service | What it receives |
|---|---|
| Resend | Your name and email address, to deliver order and account emails |
| Google Analytics | Anonymous browsing activity. Not your name, address or phone number. |
| TikTok | Browsing and purchase events for ad measurement, including a scrambled (hashed) form of your email or phone number that TikTok cannot read back |
| Our delivery courier | Your name, address and phone number — they cannot deliver without them |
We do not sell your information to anybody, ever, and we do not share it for anyone else's marketing.
Payment details
We accept cash on delivery and direct bank transfer. We never see or store card numbers, because we do not take card payments on this site. If you pay by bank transfer, we see only what appears on the deposit — we hold no access to your bank account.
How long we keep it
Order records are kept for as long as we need them for accounts, tax and warranty claims — a warranty claim years from now needs the order behind it. Account details are kept until you ask us to delete the account. Analytics data expires on the schedule those services set. The visit records behind our recommendations are deleted after 180 days.
Your choices
- See or correct what we hold about you, from your account page or by asking us
- Ask us to delete your account and personal details
- Ask us to stop emailing you anything other than emails about an order you have placed
- Block analytics and advertising cookies in your browser
To ask for any of these, call or WhatsApp 0767087504 or reply to any email we have sent you. We may need to confirm who you are before making changes to an account.
One limit worth being straight about: we cannot delete the record of an order you have already placed, because we are required to keep sales records. We can delete the account around it.
Children
This shop is not intended for children under 16, and we do not knowingly collect their details. If you believe a child has given us information, contact us and we will remove it.
Changes to this page
If we change how we handle your information, we will update this page and the date at the top of it.