Privacy Policy for Consumers

1. Introduction & Scope

Myherbals.lk (Pvt) Ltd ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our multi-vendor e-commerce platform (myherbals.lk), register an account, browse herbal, cosmetic, and wellness products, or complete purchases from independent vendors hosted on our marketplace.

This policy is designed to comply with the laws of the Democratic Socialist Republic of Sri Lanka, including the Electronic Transactions Act No. 19 of 2006, the Consumer Affairs Authority (CAA) E-Commerce Directives (Gazette Extraordinary No. 2332/15), and applicable data protection standards. By accessing or using our platform, you signify your acceptance of this Privacy Policy.

2. The Multi-Vendor Business Model & Your Data

Myherbals.lk operates as a multi-vendor marketplace platform. This means independent third-party vendors, such as herbal manufacturers, Ayurvedic practitioners, and wellness brands, list and fulfill their own products through our digital platform.

• Platform Role: Myherbals.lk acts as an intermediary platform operator.
• Data Sharing with Vendors: When you place an order for a product, we share only the necessary order fulfillment data, such as your name, delivery address, and phone number, with the specific independent vendor fulfilling your order so they can process and dispatch your items via courier.

3. Information We Collect

We collect personal information that you voluntarily provide to us when registering, placing an order, or interacting with our customer support channels.

• Personal Identification Details: Full name, email address, telephone or mobile number, and delivery addresses.
• Account Credentials: Username and encrypted passwords created when you register a customer account.
• Transaction & Financial Data: Order history, items purchased, preferred shipping locations, and payment confirmation details processed via secure third-party payment gateways. We do not store your raw credit or debit card numbers on our servers.
• Technical & Usage Data: IP address, browser type, device information, operating system, and browsing behavior collected via cookies and analytical tools to improve user experience.

4. How We Use Your Information

We use the information collected for clear operational and legal purposes:

• Order Facilitation & Vendor Coordination: To process your transactions, transmit delivery details to independent vendors and courier partners, and manage order statuses.
• Customer Support & Redress: To respond to your inquiries, handle return or refund requests, and mediate dispute resolutions in line with consumer protection guidelines.
• Platform Security & Fraud Prevention: To verify user accounts, detect unauthorized activities, protect against fraudulent transactions, and maintain website stability.
• Legal & Regulatory Compliance: To meet obligations under Sri Lankan commercial law, tax regulations, and lawful requests by public authorities, such as the Consumer Affairs Authority.
• Marketing & Updates, With Consent: To send promotional newsletters, wellness tips, or platform updates, provided you have opted in. You can opt out at any time.

5. Disclosure and Sharing of Information

We value your trust and do not sell, trade, or rent your personally identifiable information to external marketing agencies. However, we may share your data with trusted entities under strict operational terms:

• Independent Vendors: Limited to the shipping and contact details necessary for them to fulfill your purchased items.
• Logistics & Courier Partners: Third-party delivery providers engaged to transport and deliver packages to your address.
• Payment Gateways: Secure financial processors used to authorize and complete online payments.
• Legal Requirements: When required by Sri Lankan law, court orders, or government regulations, including requirements of the Consumer Affairs Authority.

6. Data Security Measures

7. Your Rights and Choices

As a user of myherbals.lk, you retain the following rights regarding your personal information:

• Access & Correction: You may log into your user dashboard at any time to update your profile details, shipping addresses, and account credentials.
• Data Deletion Requests: You can request the closure of your account and the deletion of your personal data by contacting our support team, subject to legal and financial record-retention requirements.
• Marketing Opt-Out: You can unsubscribe from marketing communications by following the "unsubscribe" link embedded in our emails.

8. Cookies Policy

Our website uses cookies to enhance browsing efficiency, remember your cart items, and analyze platform traffic. You can choose to disable cookies through your web browser settings, though doing so may affect certain checkout or login functionalities on the site.

9. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect platform upgrades or legal changes. Any updates will be posted directly on this page with a revised "Effective Date." Continued use of the platform after modifications constitutes your acceptance of the updated terms.

10. Contact Us