Privacy policy
Last updated: 21 September 2026
At Roseberry Cosmetics, we are committed to protecting the privacy, confidentiality, and security of our customers' personal information. This Privacy Policy outlines how we collect, use, safeguard, and disclose information when you visit our website (www.roseberrycosmetics.lk) or make a purchase from our store.
By accessing or using our website, you consent to the data collection and usage practices described in this policy.
1. Information We Collect
When you interact with our website or place an order, we may collect the following categories of information:
- Personal Identification Information: Your full name, contact phone number, WhatsApp number, email address, and physical delivery address provided during registration, checkout, or customer inquiries.
- Payment & Billing Information: For online payments, transaction details are processed securely through certified third-party payment gateway providers (such as PayHere) and acquiring banks using industry-standard bank-grade encryption (TLS/SSL). Roseberry Cosmetics does not capture, process, or store your full credit/debit card numbers or CVV codes on our servers.
- Browsing & Technical Data: Automatic technical information collected when you browse the site, including IP address, browser type, operating system, referring URL, and pages visited, to ensure optimal performance and security.
- Customer Support Communications: Records of communications when you reach out to us via WhatsApp, phone, email, or social media to assist you with orders, product questions, or returns.
2. How We Use Your Information
We use the collected information for legitimate business purposes, including:
- Processing, validating, confirming, and fulfilling your orders and deliveries.
- Communicating with you regarding order confirmations, dispatch tracking, customer support, and order queries.
- Managing returns, exchanges, and refund transactions.
- Detecting, investigating, and preventing fraudulent transactions, unauthorised activities, and security breaches.
- Improving our website functionality, product catalogue, and overall customer experience.
- Sending marketing newsletters or promotional updates only if you have explicitly opted in (with an immediate one-click unsubscribe option).
3. Information Sharing & Third Parties
We respect your privacy. We do not sell, rent, trade, or distribute your personal information to third parties for marketing purposes.
We disclose personal information strictly to trusted service partners who assist us in operating our business, under strict confidentiality obligations:
- Courier & Delivery Partners: Sharing recipient name, contact number, and shipping address solely to enable parcel delivery.
- Payment Gateways & Financial Institutions: Securely routing payment authorizations through licensed payment processors (PayHere) and acquiring banks.
- Cloud & Infrastructure Providers: Secure database storage and hosting providers (Supabase, Vercel) operating under strict data security protocols.
- Legal Compliance: When required by applicable laws of Sri Lanka, court orders, or law enforcement authorities to protect legal rights and prevent fraud.
4. Data Security
We implement comprehensive technical and organisational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our website uses Secure Sockets Layer (SSL) and Transport Layer Security (TLS) encryption for all data transmissions.
While we take every reasonable measure to safeguard your information, please be aware that no method of electronic transmission over the internet is completely immune to risks.
5. Cookies and Local Storage
We use cookies and browser local storage to enhance your shopping experience:
- Remembering the contents of your shopping cart across sessions on your device.
- Maintaining session security and user preferences.
- Aggregated, privacy-respecting website analytics to evaluate traffic trends and site performance without identifying individuals.
You can configure your web browser to reject cookies; however, some interactive features of the store may not function optimally.
6. Data Retention & Your Rights
We retain your personal order records for the duration required to fulfil tax, accounting, and statutory obligations under Sri Lankan law. You have the right to:
- Request details of the personal data we hold concerning you.
- Request corrections to any inaccurate or incomplete personal information.
- Request deletion of your non-statutory personal data or unsubscribe from marketing lists at any time.
7. Changes to This Privacy Policy
We reserve the right to modify or update this Privacy Policy from time to time to reflect regulatory changes or updates in our business operations. Any updates will be posted on this page with a revised effective date.
8. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us:
- Business Name: Roseberry Cosmetics
- Address: 160A Main Street, Colombo 01100, Sri Lanka
- WhatsApp / Phone: 077 787 8718
- Support: Customer Support Contact Form
