ClassyCotton.lk ("ClassyCotton", "we", "us" or "our") is Sri Lanka's destination for luxury bedding, 100% pure cotton sheets, Egyptian cotton collections and premium bedroom essentials. We respect your privacy. This Privacy Policy explains what personal information we collect when you visit classycotton.lk, create an account or place an order, how we use it, and the choices you have. By using our website you agree to the practices described below.

1. Information We Collect

We collect information you give us directly, including:

• Account details – your name, email address, phone number and password when you register.
• Order details – billing and delivery address, contact number, the products you buy (including bed sizes, colours and thread counts you choose) and your delivery or pickup option.
• Payment details – the payment method you select. Card payments are processed by our payment partners on their own secure pages; we do not store your full card number or security code.
• Communications – messages you send us by phone, email, WhatsApp, social media or through the website, including sizing questions, gift requests and product reviews.

We also collect some information automatically when you browse the site:

• Device and browser type, IP address, pages viewed, and the date and time of your visit.
• Items added to your cart or wishlist and your browsing activity on our store.
• Information stored in cookies and similar technologies (see Section 5).

2. How We Use Your Information

• To process, confirm, deliver and support your orders, including arranging doorstep delivery or pickup.
• To create and manage your account and keep you signed in.
• To contact you about your order, delivery, sizing, exchanges, returns or support requests.
• To recommend bedding and bedroom essentials you may like, based on your purchases and browsing.
• To send new collection launches, offers and newsletters where you have subscribed. You can unsubscribe at any time.
• To understand how our website is used so we can improve our products, content and performance.
• To detect and prevent fraud, misuse and security incidents.
• To meet our legal, tax and accounting obligations.

3. Sharing Your Information

We do not sell or rent your personal information. We share it only where needed to run our service:

• Courier and delivery partners – your name, address and phone number so they can deliver your order to your doorstep.
• Payment providers – to process payments securely.
• Service providers – hosting, analytics, messaging and IT support providers who act on our instructions.
• Legal authorities – where required by law, court order or to protect our rights, customers or the public.

If you send an order as a gift, we share the recipient's name, address and phone number with our courier only to deliver it. Please make sure you have the recipient's permission to share these details.

4. Data Security

We use reasonable technical and organisational measures to protect your information, including encrypted connections (HTTPS) and restricted access to customer data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please keep your account password confidential.

5. Cookies and Analytics

We use cookies to keep you signed in, remember your cart and understand how visitors use our site. We use Google Analytics and Google Tag Manager to collect anonymous usage statistics. You can block or delete cookies in your browser settings, but some parts of the site, such as the cart and checkout, may not work correctly without them.

6. Data Retention

We keep your personal information for as long as your account is active or as needed to provide our services, handle exchanges and returns, resolve disputes and meet legal, tax and accounting requirements. When it is no longer needed we delete or anonymise it.

7. Your Rights

Subject to applicable law, including Sri Lanka's Personal Data Protection Act No. 9 of 2022, you may:

• Request access to the personal information we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Ask us to delete your information or close your account.
• Withdraw consent to marketing messages at any time.

To make a request, contact us using the details in Section 10.

8. Children's Privacy

Our website is intended for use by adults. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page with the "Last updated" date shown above.

10. Contact Us

If you have any questions about this Privacy Policy or your personal information, contact us:

• Email: info@classycotton.lk
• Phone: +94 77 272 1449
• Address: Pannipitiya, Sri Lanka, 10230