Privacy Policy
Your privacy and trust are paramount to Omaliya Cosmetics. This policy explains how we collect, use, safeguard, and disclose your information when you interact with our website and services.
Bank-Grade Encryption
All transactions and checkout sessions are protected with industry-standard 256-bit SSL encryption.
Zero Data Selling
We never sell, rent, or trade your personal data to third-party brokers or advertisers.
Secure Payment Gateways
Payments are processed directly via PCI-DSS compliant providers (OnePay, PayHere) without storing raw card numbers.
Your Rights & Control
You can request access, corrections, or total deletion of your account data anytime via our support team.
Introduction & Scope
Omaliya Cosmetics (“Omaliya”, “we”, “us”, or “our”) operates the website omaliya.lk. This Privacy Policy describes how your personal data is collected, processed, and maintained when you browse our platform, create an account, make a purchase, or communicate with our support personnel.
By accessing or using our website, you acknowledge that you have read, understood, and agreed to the practices outlined in this Privacy Policy.
Information We Collect
We collect information that you directly provide to us, as well as data gathered automatically when you navigate our website:
- Account Details: Full name, email address, contact telephone numbers, and secure passwords.
- Shipping & Billing: Delivery address, city, postal code, and recipient instructions.
- Customer Inquiries: Messages, feedback, reviews, and support ticket attachments.
- Order History: Products viewed, cart additions, and order transaction logs.
- Device & Browser Data: IP address, operating system, browser type, and language preference.
- Browsing Patterns: Pages viewed, time spent on site, referring URLs, and bounce rates.
- Cookies & Session Storage: Session authentication tokens, active cart contents, and regional settings.
How We Use Your Information
We process your personal information strictly for legitimate commercial and operational purposes, including:
Payment Processing & Security
Omaliya prioritizes your financial security. We partner exclusively with accredited, PCI-DSS compliant payment gateways, including OnePay, PayHere, and KOKO.
We do NOT store your sensitive card details: When you complete an online payment, your debit/credit card numbers and CVV codes are directly transmitted over encrypted protocols to authorized banking servers. Omaliya only receives cryptographic transaction tokens and confirmation statuses.
Information Sharing & Third Parties
We never sell or commercialize your personal information. We disclose limited customer data only to trusted partners required to operate our business:
- Courier & Courier Services: Sharing your name, delivery address, and contact number so delivery riders can reach you safely.
- Payment Processors: Relaying payment requests securely via OnePay, PayHere, and KOKO.
- Cloud & IT Infrastructure: Secure cloud servers, databases, and transactional email providers adhering to rigorous data security.
- Legal Compliance: When mandated by Sri Lankan law, court subpoenas, or to defend our legal rights against fraudulent misconduct.
Cookies & Tracking Technologies
Our website uses cookies and similar storage technologies to remember items in your shopping cart, authenticate your logged-in session, and understand how visitors interact with our pages. You may disable cookies through your browser settings, though certain dynamic features (such as persistent shopping carts) may not function properly without them.
Your Data Rights & Control
You maintain full control over your personal data. You have the right to:
- Access copies of your stored personal data.
- Update or rectify inaccurate profile details.
- Request complete erasure of your account.
- Opt out of promotional emails at any time.
Contact our Data Privacy Officer
For any questions regarding your personal information, or to request data modification or deletion, please email us directly.