Privacy policy

Privacy Policy

Last updated: 9 October 2026

At Glow & Vault, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and share your information when you visit our website, place an order, or contact us.

By using our website, you acknowledge that your personal information will be handled as described in this Privacy Policy, subject to applicable law.

1. Information We Collect

When you visit our website or place an order, we may collect the following information:

Personal Information

  • Full name
  • Billing and delivery address
  • Contact number
  • Email address
  • Order details and purchase history

Payment Information

Payments are processed through the payment methods made available at checkout. Depending on the payment method, payment information may be processed by Shopify or the relevant payment provider. We do not intend to collect or store full payment card details directly.

Technical Information

When you browse our website, certain information may be collected automatically, such as your IP address, browser type, device information, pages visited, and interactions with our website. Cookies and similar technologies may be used for website functionality, analytics, and other permitted purposes.

2. How We Use Your Information

We may use your personal information to:

  • Process and confirm your orders.
  • Verify payments and manage pre-orders.
  • Arrange deliveries and communicate with couriers.
  • Send order confirmations, updates, and relevant customer-service messages.
  • Respond to inquiries, complaints, and requests.
  • Improve our website, products, and shopping experience.
  • Detect and prevent fraud, unauthorised transactions, and misuse.
  • Meet applicable legal, regulatory, accounting, and record-keeping requirements.
  • Send marketing communications where permitted by law and, where required, with your consent.

3. How We Share Your Information

We do not sell your personal information to third parties.

We may share relevant information with trusted service providers when necessary to operate our business, including:

  • Shopify: To host and operate our online store.
  • Payment providers: To process and verify payments.
  • Courier and delivery services: To deliver your orders.
  • Technology and analytics providers: To maintain, secure, and improve our website.
  • Legal or regulatory authorities: Where disclosure is required by law or necessary to protect our legal rights.

These parties may process information in accordance with their own privacy policies and applicable legal requirements.

4. Cookies and Similar Technologies

Our website may use cookies and similar technologies to keep the store functioning, remember preferences, understand website usage, and improve the customer experience.

You can manage cookies through your browser settings. Disabling certain cookies may affect some website features.

Where required, we will seek consent for cookies or similar technologies in accordance with applicable law.

5. Data Storage and Security

We take reasonable steps to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.

Access to customer information is limited to what is reasonably necessary for business operations. However, no online platform or electronic transmission can be guaranteed to be completely secure.

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including order fulfilment, customer support, legal compliance, and record keeping.

6. International Data Processing

Some of our service providers, including e-commerce and payment technology providers, may process or store information outside Sri Lanka.

Where personal information is transferred internationally, we will take steps required by applicable law to protect that information.

7. Your Privacy Rights

Subject to applicable law, you may have the right to request access to your personal information, ask for corrections, request deletion where appropriate, withdraw consent where processing relies on consent, or raise concerns about how your information is handled.

Certain information may need to be retained to fulfil orders, meet legal obligations, resolve disputes, or maintain required business records.

To make a privacy-related request, please contact us using the details provided below.

8. Marketing Communications

If we send promotional messages or marketing communications, you may opt out where applicable by following the unsubscribe instructions provided or contacting us directly.

Even if you opt out of marketing, we may still send essential messages relating to your orders, payments, deliveries, or customer-service requests.

9. Children’s Privacy

Our website is not intended to knowingly collect personal information directly from children without any required authorisation or legal basis. If you believe a child has provided personal information inappropriately, please contact us so we can review the matter.

10. Third-Party Links

Our website or communications may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies before sharing personal information with them.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website, service providers, or legal obligations. The latest version will be published on this page with its updated date.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact Glow & Vault through our Instagram page:

Instagram: @glownvault.lk

We will review your request and respond as appropriate under applicable law.

Thank you for trusting Glow & Vault.

Glow & Vault — Your beauty, your finds.