Legal Document

Privacy Policy

How we collect, use, and protect your personal information when you shop with us.

Last updated · May 2026

1. Who We Are

We are a small, Sri Lanka-based online shop specialising in the buying and selling of electrical parts and components. We operate as an ecommerce business serving customers across Sri Lanka.
This Privacy Policy explains how we collect, use, store, and protect the personal information you provide when you visit our website, create an account, or make a purchase.

By using our website or placing an order, you agree to the collection and use of your information as described in this policy.

1. Information We Collect

We only collect the information that is necessary to run our shop and serve you properly.

Personal Details

Full name, email address, phone number, and billing/shipping address.

Technical Data

IP address, browser type, device, and pages visited on our site (via cookies).

Account Information

Username, password (encrypted), and purchase history if you register an account.

Order Information

Products ordered, quantities, payment method, and transaction records.

We do not collect sensitive information such as national ID numbers, bank account details (payments are processed by secure third-party gateways), or health data.

3. How We Use Your Information

We use your personal data only for legitimate business purposes:

  • To process and fulfil your orders, including delivery and invoicing
  • To communicate with you about your orders, queries, or complaints
  • To send you order confirmations and shipping updates via email or SMS
  • To manage your customer account and order history
  • To improve our website and product listings based on browsing behaviour
  • To send you promotional offers or newsletters (only with your consent)
  • To comply with our legal and tax obligations under Sri Lankan law

We will never sell your personal information to third parties for their marketing purposes.

4. Sharing Your Information

We may share your information with trusted parties only when necessary:

  • Delivery / Courier Services: Your name and address are shared with our delivery partners to fulfil your order.
  • Payment Gateways: We use secure third-party payment processors (e.g., PayHere, Genie, or bank transfers). We do not store your card details on our servers.
  • IT / Website Service Providers: Our hosting and platform providers may have limited access to your data solely to maintain our website.
  • Legal Authorities: We will disclose your information if required by Sri Lankan law, court order, or government authority.

All service providers we work with are required to protect your information and use it only for the purpose we specify.

5. Cookies & Tracking

Our website uses cookies — small text files stored on your device — to improve your shopping experience.

  • Essential Cookies: Required for the website and shopping cart to function correctly.
  • Analytics Cookies: Help us understand how visitors use our site (e.g., Google Analytics). Data is anonymised.
  • Preference Cookies: Remember your settings, such as language or login status.

You can control or disable cookies through your browser settings. Disabling essential cookies may affect your ability to shop on our site.

6. Data Security

We take the security of your personal information seriously and have put in place appropriate measures to protect it:

  • Our website uses SSL encryption (HTTPS) to protect data transmitted between your browser and our server
  • Passwords are stored using secure hashing — never in plain text
  • Access to customer data is restricted to authorised staff only
  • We regularly review our security practices

While we take all reasonable precautions, no online system is 100% secure. If you believe your account has been compromised, please contact us immediately.

Data Retention: We keep your personal data for as long as your account is active or as needed to provide services, comply with legal obligations, and resolve disputes. You may request deletion at any time.

7. Your Rights

As our customer, you have the following rights regarding your personal data:

Access

Request a copy of the data we hold about you

Opt-Out

Unsubscribe from marketing emails at any time

Correction

Ask us to correct inaccurate or outdated information

Portability

Receive your data in a usable format

Deletion

Request that we delete your personal data

Objection

Object to certain types of data processing

To exercise any of these rights, please contact us using the details in Section 10. We will respond within 14 business days.

8. Children's Privacy

Our website and services are intended for adults and businesses. We do not knowingly collect personal information from anyone under the age of 18.
If you believe a minor has provided us with personal data, please contact us and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices or legal requirements. When we make significant changes, we will:

  • Update the "Last Updated" date at the top of this page
  • Notify registered customers via email where appropriate

We encourage you to review this policy periodically. Continued use of our website after changes are posted means you accept the updated policy.

Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, please get in touch with us:

We're here to help

Reach out with any privacy-related questions or requests.
We aim to respond within 14 business days.

support@evshop.lk

This Privacy Policy was last updated in May 2026