Privacy Policy

This policy explains how Lansakara Gem and Jewelry (Pvt) Ltd (Company Registration No. PV 00370036) of 154/1B, Kandy Road, Kadawatha, Sri Lanka(“we”) handles your personal data when you use this website or buy from us. We are the data controller responsible for your data.

1. What we collect

• Contact detailsyou give us — your name, phone or WhatsApp number, email, and delivery address — when you inquire, reserve an item, or place an order.
• Order information— the items you buy or ask about, and correspondence between us.
• Payment information— processed by our payment gateway. We receive confirmation that a payment succeeded, but we do not see or store your full card number.
• Technical data— basic information your browser sends (such as device and general location) and cookies needed for the site and cart to work.

2. Why we use it (lawful basis)

• To respond to your inquiries and reserve items you ask about.
• To process and deliver your orders and provide after-sales support — this is necessary to perform our contract with you.
• To meet legal and tax obligations and to prevent fraud — our legitimate and legal interests.
• To send you updates or offers — only where you have consented, and you can opt out at any time.

3. Who we share it with

We share your data only where needed, with:

• Our payment gateway, to process your payment securely.
• Delivery and courier partners, to get your item to you.
• Authorities, where the law requires it.

We do not sell your personal data to anyone. Some of these partners may process data outside Sri Lanka; where they do, we take reasonable steps to ensure your data stays protected.

4. How long we keep it

We keep your data only as long as needed for the purpose it was collected — typically for the life of our relationship and for as long afterwards as tax and accounting law requires. After that we delete or anonymise it.

5. How we protect it

We use reasonable technical and organisational measures to keep your data safe. Payment data is handled by our gateway on PCI-DSS-compliant systems, so sensitive card details never reach our servers.

6. Your rights

Under the PDPA, you can ask us to:

• access the personal data we hold about you;
• correct data that is wrong or incomplete;
• delete your data where there is no legal reason to keep it;
• withdraw consent for marketing at any time; and
• object to certain uses of your data.

To exercise any of these, contact us using the details below. We will respond within the timeframe the law allows.

7. Cookies

We use only the cookies needed to run the site, keep you signed in where relevant, and remember your cart. You can block cookies in your browser, but parts of the site may then not work properly.

8. Contact us

For any privacy question or request, reach us at lansakaragems@gmail.com or through our contact page. If you believe we have not handled your data properly, you may also complain to the Data Protection Authority of Sri Lanka.