Privacy Policy

This Privacy Policy explains how eshop.lk collects, uses, stores, and protects your personal information when you use our website, mobile application, products, services, checkout, account features, delivery services, and customer support.

Last Updated: 24 June 2026

Data Protection

We collect and use customer information only for order processing, delivery, account management, customer support, security, and service improvement.

Order & Delivery

We may share necessary delivery details with postal services, courier partners, and COD-supported delivery providers to complete your order.

Website & App

This policy applies to our website and Android mobile app, including login, checkout, order tracking, notifications, and customer support features.

Who We Are

Our website address is: https://eshop.lk.

eshop.lk is an ecommerce platform that sells physical and digital products. We may also provide order tracking, customer account features, delivery updates, and customer support through our website and mobile application.

Information We Collect

We may collect personal information that you provide when you create an account, place an order, contact customer support, submit a form, leave a comment, or use our website or mobile application.

  • Name, email address, phone number, billing address, and delivery address.
  • Order details, payment method, order notes, account username, and login details.
  • Messages, support inquiries, comments, and any information you send to us.
  • IP address, browser type, device information, operating system, app version, pages visited, cookies, and security logs.

Orders and Checkout

When you place an order on eshop.lk, we collect the information required to process your purchase, confirm your payment, arrange delivery, provide order updates, prevent fraud, and offer customer support.

This may include your billing details, delivery details, contact number, order items, payment method, order notes, and order status.

Payment Information

We currently support payment methods such as PayHere, Koko, and Cash on Delivery where available.

Online payments are processed through third-party payment providers. We do not store your full card number or full payment card details on our website. Payment providers may collect and process your payment information according to their own privacy policies and security practices.

Delivery and Courier Partners

To deliver your order, we may share necessary information with delivery partners, courier companies, postal services, and related service providers.

  • Your name, delivery address, phone number, order reference, delivery instructions, and COD amount if applicable may be shared for delivery purposes.
  • We may use the Sri Lankan Postal Service, Speed Post, COD-supported delivery services, courier services, or other suitable delivery partners.
  • The delivery partner may vary depending on the order type, payment method, location, and availability.

Android Mobile App

If you use our Android mobile application, we may collect information needed to provide app features such as login, order browsing, checkout, order tracking, notifications, and customer support.

Depending on the app features enabled, the app may process device information, app usage data, notification tokens, crash logs, and account/order information.

We do not intentionally collect precise GPS location unless a specific app feature requires it and you allow permission.

Comments

When visitors leave comments on the website, we collect the data shown in the comments form, along with the visitor’s IP address and browser user agent string to help detect spam and prevent misuse.

Media Uploads

If you upload images to the website, you should avoid uploading images with embedded location data, such as EXIF GPS data. Visitors may be able to download and extract location data from images uploaded to the website.

Cookies

Our website uses cookies to improve your browsing experience, remember your preferences, support account login, manage cart and checkout functions, improve website performance, and help protect the website from spam or misuse.

  • If you leave a comment, you may choose to save your name, email address, and website in cookies for convenience.
  • If you visit our login page, we may set a temporary cookie to check whether your browser accepts cookies.
  • When you log in, we set cookies to save your login information and display preferences.
  • If you select “Remember Me”, your login may remain active for up to two weeks.

Analytics and Website Improvement

We may use analytics tools, security tools, performance tools, or similar services to understand how visitors use our website and app, improve user experience, fix errors, prevent fraud, and maintain security.

Customer Support and Communication

When you contact us for support, we may collect your name, email address, phone number, order number, messages, attachments, and other information needed to respond to your inquiry.

We may contact you about your order, payment, delivery, account, support request, promotions, service updates, or important policy changes.

AI or Chat Support Tools

If we use AI tools, chatbot services, or automated support tools to help respond to customer questions, the information you submit may be processed to provide support, improve responses, and manage customer inquiries.

Please do not submit sensitive personal information, payment card details, passwords, or unnecessary private information through chat or support messages.

Who We Share Your Data With

  • Payment processors.
  • Delivery partners, courier services, and postal services.
  • Hosting providers, website security services, and analytics providers.
  • Email, SMS, app notification, and customer support service providers.
  • If you request a password reset, your IP address may be included in the reset email.

How Long We Keep Your Data

We keep personal information only for as long as necessary for order processing, delivery, customer support, accounting, legal compliance, fraud prevention, and security.

Your Rights

Depending on applicable law, you may request access to the personal data we hold about you. You may also request correction, deletion, restriction, or an exported copy of your personal data.

This does not include information we are required to keep for administrative, accounting, legal, tax, fraud prevention, security, or order-related purposes.

Security

We take reasonable steps to protect your personal information from unauthorized access, loss, misuse, alteration, or disclosure. However, no website, app, payment system, or internet-based service can guarantee complete security.

Children’s Privacy

Our services are not intended for children who are not legally able to place orders or use ecommerce services without permission from a parent or guardian.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, website, mobile application, payment methods, delivery process, legal requirements, or business operations.

Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact our customer service team through the contact details provided on our website.