Privacy Policy

1. Introduction

Welcome to CAVARO. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit cavaro.lk, place an order, or contact us.

CAVARO aims to handle personal data in accordance with applicable Sri Lankan data-protection laws, including the Personal Data Protection Act, No. 9 of 2022, as amended from time to time.

2. Information We Collect

Depending on how you use our services, we may collect:

• Identity Data: Name and username, where applicable.
• Contact Data: Email address, phone/WhatsApp number, billing and delivery address.
• Order Data: Products purchased, order details, delivery information and payment confirmations.
• Payment Data: Payment information processed through our payment providers. We do not store full card details on our own servers where payment is handled by a third-party provider.
• Technical Data: IP address, browser, device information and website usage data.

3. How We Use Your Information

We may use your information to:

• Process and deliver your orders
• Confirm payments and communicate with you
• Provide customer support
• Improve our website and services
• Prevent fraud and unauthorized activity
• Comply with legal obligations
• Send marketing communications where permitted and, where required, with your consent.

4. Sharing Your Information

We may share necessary information with trusted service providers such as payment providers, courier companies, website/IT providers and other partners who help us operate our business.

We do not sell your personal data to third parties.

5. Cookies

Our website may use cookies and similar technologies to provide essential functions, remember preferences, understand website usage and improve your experience. You can manage cookies through your browser settings.

6. Data Security & Retention

We take reasonable measures to protect your personal data from unauthorized access, loss or misuse. We retain information only for as long as reasonably necessary for business, legal, accounting and record-keeping purposes.

7. Your Rights

Subject to applicable law, you may have rights to access, correct or request deletion of your personal data, and to withdraw consent where processing is based on consent.

To make a privacy-related request, please contact us.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated “Last Updated” date.