Ceyloné ("we", "us", "our") operates this website ("the Site"). This page explains what information we collect from visitors and customers, how we use it, and the choices you have.
Information We Collect
We collect information you give us directly, and a small amount collected automatically:
- Account information — name, email address, and (optionally) phone number when you register or check out.
- Order & shipping information — delivery address, phone number, and order contents, needed to fulfill and deliver your order.
- Sign-in information — if you choose "Continue with Google," Google shares your name, email address, and profile photo with us so we can create or log you into your account. We never see or store your Google password.
- Payment information — we do not store full card numbers. Card payments are processed by our payment provider directly; we only retain the order total and payment method used (e.g. card, cash on delivery).
- Cookies & session data — used to keep you signed in, remember your shopping cart, and protect your account (see "Cookies" below).
How We Use Your Information
- To process, fulfill, and deliver your orders.
- To create and manage your customer account.
- To send order confirmations and updates about deliveries you've requested.
- To respond to customer support questions.
- To keep the Site secure — for example, detecting fraudulent orders or unauthorized login attempts.
- If you subscribe to our newsletter, to send you updates about new arrivals and sales. You can unsubscribe at any time.
We do not sell your personal information to third parties.
Cookies
We use a small number of essential cookies — to keep you logged in, remember what's in your shopping cart, and protect against cross-site request forgery. These are required for the Site to function and are not used for advertising or cross-site tracking.
Third-Party Services
We share the minimum information necessary with a small number of service providers who help us run the Site:
- Google Sign-In — if you use this option, Google processes your sign-in under its own privacy policy.
- Payment processors — handle your card details directly under their own security and privacy standards; we never see or store full card numbers.
- Delivery couriers — receive your name, address, and phone number solely to deliver your order.
Data Retention & Security
We keep your account and order information for as long as your account is active, or as needed to comply with our legal and accounting obligations (for example, order records). Passwords are stored using industry-standard one-way hashing — we cannot see or recover your actual password. We use reasonable technical safeguards to protect your data, but no method of transmission or storage is 100% secure.
Your Rights
You can review and update your account details, and manage your saved delivery addresses, at any time from your account page. You may request that we delete your account and associated personal data by contacting us at the email below — we'll action this unless we're required to retain certain records (e.g. completed order history) for legal or accounting reasons.
Children's Privacy
The Site is not directed at children under 13, and we do not knowingly collect personal information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent changes. Continued use of the Site after changes take effect means you accept the updated policy.
Contact Us
Questions about this policy or your personal data? Email us at ceylonecollective@gmail.com.