We collect your details to take, deliver and support your orders.
We share them only with the services that help us do that, such as couriers, banks and our website host.
We do not store card numbers and we do not sell your personal data.
You can ask to see, correct or delete your data at any time.
01
Who we are
Saifstore.com (“Saifstore”, “we”, “us”) is an online store operating in Sri Lanka. This policy explains how we handle personal data when you visit our website, create an account, place an order or contact us. We follow the Personal Data Protection Act No. 9 of 2022 of Sri Lanka.
Contact and delivery details: name, phone number, email and delivery address with district.
Order details: the products you buy, amounts, and your order and return history.
Payment information: for bank transfers, the reference or receipt you send us. We do not collect or store card numbers. Future card payments will be handled by a licensed payment provider.
Account details: your login email and password. Passwords are stored encrypted and we cannot read them.
Messages: what you send through our forms, email or WhatsApp, including photos for return requests.
Technical data: IP address, device and browser type, pages viewed, and cookies.
03
How we use it
To process, pack and deliver your orders, and to confirm payments.
To send order updates by email, SMS or WhatsApp.
To help you with questions, returns, exchanges and refunds.
To keep the website and our customers safe, and to prevent fraud.
To understand how the site is used so we can improve it.
To meet our legal, tax and accounting duties.
To send offers and news, but only if you have agreed. You can unsubscribe at any time.
04
Why we are allowed to use it
We use your data because it is needed to fulfil your order (our contract with you), because the law requires it, because you gave consent (for example, for marketing), or for our legitimate interests such as keeping the site secure and improving our service. You can withdraw consent at any time.
05
Who we share it with
Courier and delivery partners: your name, phone number and address, so they can deliver.
Banks and payment providers: to receive payments and send refunds.
Technology providers who run parts of our service for us, such as website hosting, email and analytics.
Authorities, when the law requires it.
We do not sell or rent your personal data to anyone.
06
Data stored outside Sri Lanka
Some of our technology providers may store data on servers outside Sri Lanka. We only use reputable providers and only transfer data in the ways the Personal Data Protection Act allows, with reasonable safeguards in place.
07
Cookies
Cookies are small files that help the website work. We use:
Essential cookies for your cart, login and security.
Preference cookies to remember choices such as your delivery district.
Analytics cookies, such as Google Analytics, to see which pages are useful.
You can block or delete cookies in your browser settings. If you block essential cookies, the cart and checkout may not work.
08
How long we keep it
We keep personal data only as long as we need it. Order and payment records are kept for the period required by Sri Lankan tax and accounting rules. Account details are kept until you ask us to delete your account, unless we must keep some records by law.
09
How we protect it
Our website uses an encrypted (HTTPS) connection, access to customer data is limited to people who need it, and we use reputable hosting. No system is completely secure, but if a data breach affects you, we will act quickly and inform you and the authorities where the law requires.
10
Your rights
Under the Personal Data Protection Act, you can:
Ask for a copy of the personal data we hold about you.
Ask us to correct or complete it.
Ask us to delete it, where we are not required to keep it.
Withdraw your consent, for example to marketing messages.
Object to how we use your data.
Email contact@saifstore.com to use any of these rights. We may need to confirm your identity first, and we will reply within the time the law allows. If you are not happy with our reply, you can complain to the Data Protection Authority of Sri Lanka.
11
Children
We sell products for children, but our website is meant for adults. We do not knowingly collect personal data from children. If you believe a child has given us their details, contact us and we will delete them.
12
Changes to this policy
We may update this policy as our business grows. The date at the top shows the latest version. If we make an important change, we will let you know on the website or by email.
Need a hand?
We are a small team and we read every message. Ask us about orders, delivery or returns.