Privacy Policy

Effective Date: February 16, 2026 Website: www.craftory.lk

1. Introduction

Welcome to Craftory.lk ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your data when you visit our website or make a purchase.

2. Information We Collect

2.1 Personal Information When you register, purchase a product, or contact us, we may collect:

  • Identity Data: Name, username.
  • Contact Data: Email address, phone number, and shipping address.
  • Account Credentials: Encrypted passwords.
  • Transaction Data: Details of the products you have purchased from our independent artisans.

2.2 Payment Information (Non-Custodial)

  • Online Payments: We do not store your credit or debit card details on our servers. Online payments are processed securely through PayHere (a Central Bank of Sri Lanka approved payment aggregator).
  • Direct Payments: If you pay via Direct Bank Transfer, your payment proof (slip/screenshot) is shared directly with the Vendor to verify the transaction.

2.3 Seller Verification Data (KYC) To maintain platform safety and trust, we require all Vendors to verify their identity.

  • Collection: We collect images of your National Identity Card (NIC) or Driving License and your specific ID Number.
  • Data Minimization & Deletion: Immediately upon verification of your account, all images/copies of your ID documents are permanently deleted from our servers.
  • Retention: We securely retain only your NIC/ID Number and registered contact details. This data is kept strictly for legal compliance and to assist Law Enforcement in the event of fraud or consumer disputes.

2.4 Automatically Collected Data We automatically collect certain information about your device and usage, including your IP address, browser type, and operating system, to help us improve your browsing experience.

3. How We Use Your Information

We use your data for the following purposes:

  • Order Facilitation: To share necessary shipping details with the specific Artisan fulfilling your order.
  • Communication: To send you order updates, invoices, and support responses.
  • Platform Security: To detect and prevent fraud, unauthorized access, or policy violations.
  • Debt Collection: To track and recover unpaid platform fees (Negative Balances) owed by Vendors.

4. Sharing Your Information

We respect your trust and do not sell your personal data. We share information only in these specific scenarios:

  • With Artisans/Vendors: When you place an order, the specific Vendor receives your Name, Shipping Address, and Phone Number strictly to fulfill and deliver that order.
  • With Delivery Partners: Courier services receive your shipping details for delivery purposes.
  • With Legal Authorities: We may disclose your personal information (including Vendor ID Numbers) to Sri Lankan Law Enforcement Authorities if required by law or to protect our rights, users, or safety (e.g., in cases of fraud or non-delivery).

5. Cookies

We use cookies to enhance your experience, such as keeping you logged in and remembering your cart items. We also use third-party services like Google Analytics and Google AdSense, which may place cookies to analyze traffic and serve relevant ads. You can manage your cookie preferences through our site's Cookie Consent banner.

6. Data Security

We implement industry-standard security measures, including SSL encryption, to protect your personal information. However, please be aware that no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security.

7. Your Rights

Under Sri Lankan data protection practices, you have the right to:

  • Access the personal information we hold about you.
  • Request corrections to inaccurate data.
  • Request the deletion of your account (subject to pending orders, outstanding debt, or legal retention requirements).

8. Contact Us

If you have questions about this Privacy Policy, please contact us:

  • Email: [email protected]
  • Hotline: +94 70 519 6446
  • Address: No 189, Bogahawella Road, Karapitiya, Galle, Sri Lanka.