Privacy Policy

Ceylon Discovery (“we”, “us”) is a small, family-run business in Sri Lanka, lovingly curating gift boxes and goods we sell online. We’re not a big corporation — your details are handled by real people who care. This policy explains, plainly, how we look after your personal information.

• Account details — your name and email when you create an account or sign in with Google.
• Order & delivery details — shipping name, address, phone, and any gift message you provide.
• Payment information — processed securely by our payment providers: PayPal for international orders and PayHere for Sri Lankan orders. Your full card details are handled entirely by these trusted processors — we never see or store them.
• Reviews — content you choose to submit about products you’ve received.
• Technical data — approximate country (from your IP) to show you the right products, plus basic usage data.

To process and deliver your orders, manage your account, send order and shipping updates, respond to support requests, prevent fraud, and — only if you opt in — send occasional news about new collections.

We share only what’s necessary with the trusted service providers that run our store. These providers are contractually obligated to handle your data securely and confidentially:

• PayPal & PayHere — to take payment securely (PayHere for Sri Lankan customers, PayPal internationally).
• Shippo, Koombiyo, PickMe & carriers — to ship and track your order.
• Resend — to send transactional emails (confirmations, invoices, tracking).
• Supabase & Vercel — to host our database and website.
• Google — only if you choose to sign in with Google.

We never sell, trade, or rent your personal information. We may disclose information only if required to do so by law or in response to a valid legal request. We never sell your personal information.

We use essential cookies to keep you signed in and to remember your selected shipping country. We do not use cookies for advertising.

You can ask us to access, correct, or delete your personal data at any time by emailing atheeshawic@gmail.com. We keep order records for up to 3 years to meet tax and customs obligations.

We protect your data with industry-standard measures and access controls. We may update this policy from time to time; the “last updated” date above reflects the latest version.