PRIVACY POLICY

Last updated: 29 October 2026.

ABOUT THIS POLICY Your privacy matters to KULTJUR. This policy explains what personal information we collect, why we use it, who we share it with, and the choices available to you when you browse, shop or contact us. In this policy, “KULTJUR”, “we”, “us” and “our” refer to the store and the seller identified below.

INFORMATION WE COLLECT We collect the information you provide when ordering, signing in or contacting us. This includes your name, email address, mobile number, delivery address, selected products, order history, payment reference, payment receipt and messages. If you sign in with Google, we receive the account information needed for sign-in, such as your email address, name and account identifier; we do not receive your Google password.

Our service providers may process device, network and security information, including IP addresses and technical logs. Essential cookies or browser storage support sign-in, cart contents, checkout and order access. Optional analytics, where enabled with your permission, helps us understand store visits and shopping activity.

HOW WE USE INFORMATION We use information to process and deliver orders, check bank transfers, maintain accounts, respond to enquiries, arrange replacements or refunds, prevent misuse and keep necessary business records. Processing needed to fulfil your order is separate from optional analytics or marketing. If information needed for an order is missing, we may be unable to fulfil it.

PAYMENT RECEIPTS Payment receipts are used to check transfers and resolve payment queries. Upload only the information needed to identify your payment. Please obscure unrelated balances and transactions where possible. We never ask for banking passwords, PINs or one-time bank codes. A receipt is reviewed before payment is confirmed.

WHO RECEIVES INFORMATION We use Supabase for database, authentication and file storage, Resend for transactional email, and Google for optional Google sign-in and Google Analytics 4. Website infrastructure providers process information needed to operate the store. We share necessary contact and delivery details with the courier or PickMe driver arranging your delivery. We may disclose information where legally required or reasonably necessary to address fraud or protect legal rights. We do not sell customer personal information.

These providers may process information outside Sri Lanka. We limit the information shared to what is needed for their services and use reasonable access and security controls. Information you send directly to another provider is also subject to that provider’s privacy practices.

ANALYTICS AND COOKIES Essential storage keeps the store working. With your analytics permission, Google Analytics measures page visits, product views and shopping events, and Vercel Web Analytics measures visits and page views. Vercel processes information such as page URLs, approximate location, device and browser details to provide this service. You can change your choice using Cookie settings in the website footer. We do not intentionally send your name, email address, mobile number, delivery address or payment receipt in analytics events. You can clear or block browser cookies and storage, although this can affect sign-in and cart functions. Contact contact@kultjur.lk for help changing analytics preferences or raising a privacy concern.

MARKETING Placing an order does not automatically subscribe you to marketing. If you separately opt in to marketing emails, you may unsubscribe through the unsubscribe option in those emails or by contacting us. Unsubscribing does not stop essential messages about your orders or account.

RETENTION AND SECURITY We retain information only for as long as reasonably needed to fulfil orders, provide support, resolve disputes and meet applicable record-keeping requirements. Retention depends on the type of record and any outstanding obligation. We use access restrictions and reasonable safeguards; no online service can guarantee absolute security.

YOUR CHOICES AND REQUESTS You may contact contact@kultjur.lk to ask about your information, request access or correction, ask for deletion, or withdraw optional consent. We may need to verify your identity. We will explain any information we must retain and assess requests under the law applicable at the time. This notice does not represent that every statutory right or enforcement procedure is already in force.

CHANGES We will update this notice when our practices materially change. The date above identifies this version. Changes do not remove rights or obligations that already apply.

PRIVACY CONTACT The seller responsible for the personal information described in this policy is Chenuka Achintha Jayathilake, trading as KULTJUR in Sri Lanka. For privacy enquiries and requests, contact contact@kultjur.lk.