Privacy Policy

How CeylonVibez collects, uses, and protects your personal data, including under GDPR for EU visitors.

Data controller. The data controller responsible for processing personal data collected through this website is CeylonVibez (Pvt) Ltd, REPLACE WITH REGISTERED BUSINESS ADDRESS. For any privacy-related question, contact us at hello@ceylonvibez.com.

What we collect. When you browse the store, place an order, or contact us, we may process data such as your name, delivery and billing address, email address, order history, and technical data (e.g. IP address, browser type) needed to operate the site and fulfil your order.

Why we process it. We process this data to perform purchase contracts with you (Art. 6(1)(b) GDPR), to comply with legal obligations such as tax and commercial record-keeping (Art. 6(1)(c) GDPR), and, where you have given consent, for optional purposes such as non-essential cookies (Art. 6(1)(a) GDPR).

Cookies. We ask for your choice via a consent banner before any non-essential cookie or tracking script runs, and you can withdraw that consent at any time.

Payment processing. Payments are processed by our payment provider, PayPal, which receives the data necessary to process your payment. We do not store your full payment card or account details ourselves.

Your rights. Under the GDPR, you have the right to access, rectify, or erase your personal data, to restrict or object to its processing, to data portability, and to lodge a complaint with a supervisory authority. To exercise any of these rights, contact us at hello@ceylonvibez.com.

Retention. We retain personal data only for as long as necessary for the purposes described above, or as required by applicable statutory retention periods.