We may collect the following types of information when you interact with our website:

• Personal Information: When you create an account, place an order, or contact us, we may collect your name, email address, phone number, shipping and billing address, and payment details.
• Order Information: Details about the products you purchase, order history, transaction amounts, and delivery preferences.
• Technical Information: Your IP address, browser type, operating system, device information, and browsing behaviour on our website — collected through cookies and similar technologies.
• Communication Data: Any information you provide when you contact our support team, leave reviews, or subscribe to our newsletter.

We use the information we collect to:

• Process and fulfil your orders, including shipping, delivery, and payment processing.
• Communicate with you about your orders, account updates, and customer support inquiries.
• Personalise your shopping experience and recommend products you may enjoy.
• Send promotional offers, newsletters, and updates about new products — only with your consent. You can opt out at any time.
• Improve our website, products, and services based on usage patterns and feedback.
• Detect and prevent fraud, unauthorised transactions, and other security threats.
• Comply with applicable laws, regulations, and legal obligations.

We do not sell, trade, or rent your personal information to third parties. However, we may share your data with trusted service providers who assist us in operating our business, including:

• Payment Processors — to securely handle your transactions (PayHere).
• Shipping & Logistics Partners — to deliver your orders.
• Website Hosting & Analytics Providers — to maintain and improve our site.
• Marketing Platforms — to send emails and promotions, strictly with your consent.

Our website uses cookies and similar tracking technologies to enhance your browsing experience, remember your preferences, analyse site traffic, and deliver relevant content.

You can control cookie settings through your browser at any time. Please note that disabling essential cookies may affect certain features of our website.

We implement industry-standard security measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. This includes SSL/TLS encryption for all data transmitted on our website and secure processing of payment information through PayHere’s certified infrastructure.

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Right of Access — Request a copy of the personal data we hold about you.
• Right to Rectification — Request correction of inaccurate or incomplete information.
• Right to Erasure — Request deletion of your personal data (“right to be forgotten”).
• Right to Restrict Processing — Ask us to limit how we use your data in certain circumstances.
• Right to Data Portability — Receive your data in a commonly used, machine-readable format.
• Right to Withdraw Consent — Withdraw consent for marketing communications at any time.
• Right to Lodge a Complaint — Contact your local data protection authority if you believe your rights have been violated.

To exercise any of these rights, contact us at support@aerialceylon.store.

Our website may contain links to third-party websites or services, including social media platforms, courier partners, and payment providers. We are not responsible for the privacy practices or content of those external sites. We encourage you to review the privacy policies of any third-party sites you visit before providing any personal information.

Our website and services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without verifiable parental consent, we will take steps to delete that information promptly. If you believe we may have such data, please contact us immediately.

As Aerial Ceylon operates internationally and serves customers worldwide, your personal data may be transferred to and processed on servers located outside of Sri Lanka. We ensure that all international data transfers are handled with appropriate safeguards in compliance with applicable data protection regulations, including the GDPR for customers based in the European Union or European Economic Area.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. Your continued use of our website following any changes constitutes acceptance of the revised policy.