1. Information We Collect

We collect personal information to provide you with a seamless shopping experience. The types of information include:

• Personal details: Name, email address, phone number, billing and shipping addresses
• Account details: Login credentials if you create an account
• Purchase information: Products you buy, payment method, order history
• Payment data: Processed securely via third-party payment providers — we do not store your full credit card details
• Device & usage data: IP address, browser type, operating system, referring URLs, and actions on our website
• Cookies & tracking: Data stored in your browser to remember preferences and analyze behavior

2. How We Use Your Information

We use the information we collect for purposes such as:

• Processing and fulfilling your orders
• Providing customer support and responding to inquiries
• Improving website functionality and personalizing your experience
• Marketing, promotions, and sending newsletters (if you consent)
• Detecting fraud, protecting our systems, and maintaining security
• Complying with applicable laws, including Sri Lanka’s Personal Data Protection Act, No. 9 of 2022

3. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contractual necessity: To deliver your purchases
• Consent: For email marketing and promotional messages
• Legal compliance: To meet tax, accounting, and consumer protection laws
• Legitimate interest: To improve services and ensure website security

4. Sharing & Disclosure

We do not sell your personal data. However, we may share it with:

• Service providers: Payment processors, delivery companies, IT hosting providers
• Legal authorities: When required to comply with law or court orders
• Business transfers: In case of a merger, acquisition, or sale of company assets

5. Cookies & Tracking Technologies

We use cookies, pixels, and similar tools to:

• Keep items in your shopping cart
• Remember your preferences
• Analyze traffic and improve website performance
• Show relevant promotions

You can disable cookies via your browser settings, though this may affect certain features.

6. Data Security

We implement reasonable technical and organizational measures to safeguard your personal data against unauthorized access, alteration, or disclosure. However, no system is 100% secure, and you share data at your own risk.

7. Data Retention

Your personal information is retained only as long as necessary for the purposes outlined in this policy, or as required by law (such as tax or accounting obligations). Once no longer needed, your data will be securely deleted.

8. Your Rights

Under applicable law, you may have the right to:

• Access the personal information we hold about you
• Request corrections to inaccurate data
• Request deletion of your data (subject to legal obligations)
• Withdraw consent for marketing communications
• Request portability of your personal data

To exercise your rights, contact us at privacy@rough.lk.

9. Children’s Privacy

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If we discover that a child has provided us with data, we will delete it immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries outside Sri Lanka. We take steps to ensure that your data receives adequate protection regardless of location.

11. Third-Party Links

Our site may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies before sharing personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with the “Last Updated” date adjusted accordingly. Significant updates may also be notified via email.

13. Contact Us

If you have any questions about this Privacy Policy, please reach out:

ROUGH Clothing
Email: privacy@rough.lk
Address: Rough Clothing, Sri Lanka
Phone: +94761997333