Privacy Policy

Lavalier sells jewelry and women's accessories online at lavalier.lk and from our shop at 67D Pepiliyana Road, Dehiwala, Sri Lanka.

We are responsible for the personal information described in this policy. You can reach us any time on WhatsApp at 071 445 6666.

When you place an order, we collect:

• Your name.
• Your mobile number, and a second number if you give us one.
• Your delivery address, city and postal code.
• Your email address, if you give us one.
• What you ordered, the amount, and how you chose to pay.
• Any delivery instructions you type at checkout — a landmark, a preferred time, a note for the rider.

If you create an account, we also keep your login email and a scrambled version of your password. Nobody at Lavalier can read your password.

If you ask to be told when a sold-out piece comes back, we keep that mobile number so we can send you that one message.

When you browse the site, we also collect your IP address, your browser and device type, and which pages you looked at. This comes from cookies and from our own server logs.

We never see or store your full card number. Card details are typed on your bank's or payment provider's own page, not ours.

We use your information to:

• Take your order, pack it and deliver it.
• Contact you about your order — by SMS, WhatsApp or a phone call.
• Confirm a Cash on Delivery order before we send it out, and check for fraud or repeated failed deliveries.
• Handle returns, exchanges and warranty claims.
• Keep our accounts and meet our legal obligations.
• Understand what sells, so we restock the right pieces.
• Send you offers and show you our ads, where you have agreed to it.

We do not sell your personal information. We share only what each of these partners needs to do its job:

• Payment providers — Koko, Mintpay and OnePay. They receive your name, email, mobile number, the amount and our order reference so they can take the payment; Mintpay also receives your delivery street, your IP address and the items in your order. Each handles your card or credit details under its own privacy policy. We do not receive your card number from them.
• Delivery partners — Fardar Express, and our own Lavalier riders. They receive your name, your mobile number (and your second number if you gave one), your address, your city, and the cash amount to collect for a Cash on Delivery order.
• Notify.lk — our SMS provider in Sri Lanka. It receives your mobile number and the text of the message we send you.
• Meta (Facebook and Instagram) — we use the Meta pixel and Meta's Conversions API to measure our ads. Your email address, phone number, name, city and country are scrambled (hashed) before they are sent, so Meta can match you to an ad account it already holds without us handing over the readable details. Your IP address, your browser type and Meta's own cookie identifiers are sent as they are, because they are identifiers Meta issued or observed itself.
• Cloudflare — serves our product images and protects the site from attacks, and sees your IP address in the process.
• Our hosting provider — runs the servers and the database your order is stored on.

We will also share information where the law requires it, or to protect our rights.

Cookies are small files the site stores in your browser. We use them to:

• Remember what is in your bag.
• Keep you signed in, if you have an account.
• Remember your language choice.
• Keep the homepage in a steady order while you browse, instead of reshuffling on every page.
• Measure our Facebook and Instagram ads (Meta's own cookies).

You can block or delete cookies in your browser settings. The site will still work, but your bag may not be remembered between visits, and you may have to sign in again.

We only send offers and promotions to people who have given us their number or email for that purpose. Messages about an order you have actually placed — a confirmation, a delivery update, a back-in-stock alert you asked for — are not marketing, and they continue either way.

To stop marketing messages, message us on WhatsApp at 071 445 6666 and we will remove your number. If one of our messages tells you a word to reply with, replying with that word will also stop them.

We keep order, payment and delivery records for as long as we need them for your warranty, for returns, for our accounts and for Sri Lankan tax and legal requirements. After that they are deleted or stripped of anything that identifies you.

An account stays until you ask us to close it. A number you gave us for a back-in-stock alert is used for that one message; ask us and we will remove it.

The site runs over an encrypted connection (HTTPS). Passwords are stored scrambled and cannot be read by our staff. Access to orders and customer records is limited to the people whose job needs it, and our shop and warehouse staff see only what they need to pack and dispatch your order.

No system is perfectly secure. If something goes wrong that affects your information, we will tell you.

Under Sri Lanka's Personal Data Protection Act, No. 9 of 2022, you can ask us to:

• Tell you what information we hold about you.
• Correct anything that is wrong — a misspelled name, an old address.
• Delete your information, where we are not required to keep it.
• Stop using it for marketing.
• Withdraw your consent, where we relied on your consent.

Message us on WhatsApp at 071 445 6666, or write to us at 67D Pepiliyana Road, Dehiwala. We will ask a question or two to confirm it is really you, and then answer as quickly as we can.

If you are not happy with our answer, you can complain to Sri Lanka's Data Protection Authority.

This site is not meant for children. You should be 18 or older to order, or be using the site with a parent or guardian. We do not knowingly collect information about children; if we learn that we have, we delete it.

We may update this policy. The new version takes effect as soon as it is published here, and the date at the top of this page tells you when it last changed.

Questions about this policy, or about the information we hold on you:

• WhatsApp: 071 445 6666
• Address: 67D Pepiliyana Road, Dehiwala, Sri Lanka

Your use of this site is also covered by our Terms & Conditions.