1. Who We Are
LuxuryNotes ("we", "us", or "our") operates the website luxurynotes.lk, selling authentic designer and niche perfume decants and full bottles within Sri Lanka. For the purposes of the Personal Data Protection Act, No. 9 of 2022 (the "PDPA"), LuxuryNotes is the data controller responsible for your personal data.
2. Information We Collect
We collect only the information needed to process your orders and serve you better:
- Contact details — your name, phone/WhatsApp number, email address, and delivery address.
- Order information — the products you order, quantities, and order history.
- Communications — messages you send us via WhatsApp, Instagram, Facebook, email, or our contact form.
- Account data — if you sign in with Google, we receive your name, email, and profile photo from Google.
- Technical data — basic information such as your IP address, browser type, and pages visited, collected automatically to keep the site secure and working.
3. How We Use Your Information
We process your personal data to:
- Confirm, process, and deliver your orders;
- Communicate with you about your order, including via WhatsApp;
- Respond to your enquiries and provide customer support;
- Improve our products, website, and service;
- Send you updates or offers, where you have agreed to receive them; and
- Comply with our legal and regulatory obligations in Sri Lanka.
We rely on your consent, the performance of our contract with you, and our legitimate business interests as the lawful bases for processing under the PDPA.
4. Sharing Your Information
We do not sell your personal data. We share it only where necessary, with:
- Delivery and courier partners, to fulfil your order;
- Service providers who host our website and store our data (for example, our cloud and database providers);
- Payment or messaging platforms you choose to use to complete an order; and
- Authorities, where required by Sri Lankan law or to protect our legal rights.
Where any service provider stores data outside Sri Lanka, we take reasonable steps to ensure your data continues to be protected in line with the PDPA.
5. Data Retention
We keep your personal data only for as long as needed to fulfil the purposes described in this policy, including to meet accounting, tax, and other legal requirements under Sri Lankan law. When data is no longer needed, we securely delete or anonymise it.
6. Your Rights
Under the Personal Data Protection Act, No. 9 of 2022, you have the right to:
- Access the personal data we hold about you;
- Request correction of inaccurate or incomplete data;
- Request erasure of your data, where there is no lawful reason to keep it;
- Withdraw your consent at any time, where processing is based on consent;
- Object to certain processing of your data; and
- Lodge a complaint with the Data Protection Authority of Sri Lanka.
To exercise any of these rights, contact us using the details in Section 9. We will respond within the timeframes required by law.
7. Cookies and Tracking
Our website uses essential cookies and similar technologies to keep your shopping cart and session working and to keep the site secure. You can control or delete cookies through your browser settings, though some features may not work without them.
8. Data Security
We use reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
9. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
- WhatsApp: +94 77 930 7639
- Email: hello@luxurynotes.lk
- Instagram: @luxurynotes.lk
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last updated" date. We encourage you to review it periodically.