Privacy Policy

Effective Date: 12-07-2025
Last Updated: 12-07-2025

Introduction

Welcome to Sheza Skin, operated by Sheza Cosmetics Holding (Pvt) Ltd. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, share, and protect your information when you visit our website at https://shezaskin.com/ or make purchases from us.

By using our website or services, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our website or services.

1. Information We Collect

Personal Information

We collect the following personal information when you:

Create an account on our website
Make a purchase
Subscribe to our newsletter
Contact our customer service
Leave product reviews

Information collected includes:

Full name
Email address
Phone number
Billing and shipping addresses
Date of birth (for age verification)
Gender (optional, for personalized recommendations)

Payment Information

We collect payment details necessary to process your orders, including:

Credit/debit card information
Bank account details (for bank transfers)
Digital wallet information
Billing address

Important: We use secure, encrypted payment processors and do not store complete payment card details on our servers.

Website Usage Data

We automatically collect information about how you use our website, including:

IP address and device information
Browser type and version
Operating system
Pages visited and time spent on pages
Referral sources
Search terms used
Shopping behavior and preferences

Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to:

Remember your preferences and login information
Analyze website traffic and user behavior
Personalize your shopping experience
Deliver targeted advertisements

Customer Reviews and Feedback

When you submit reviews or feedback, we collect:

Your name (or chosen display name)
Review content
Product ratings
Photos you choose to share

2. How We Use Your Information

We use your personal information for the following purposes:

Order Processing and Fulfillment

Processing and completing your orders
Arranging shipping and delivery
Sending order confirmations and updates
Managing returns and exchanges
Handling customer service inquiries

Customer Service Communications

Responding to your questions and requests
Providing technical support
Resolving disputes and issues
Sending important account notifications

Marketing and Promotional Activities

Sending promotional emails and newsletters (with your consent)
Informing you about new products and special offers
Personalizing product recommendations
Conducting surveys and market research

Website Improvement and Analytics

Analyzing website performance and user behavior
Improving our website functionality and user experience
Developing new features and services
Conducting security monitoring

Legal Compliance

Complying with applicable laws and regulations
Preventing fraud and unauthorized activities
Protecting our rights and interests
Responding to legal requests and court orders

3. How We Share Your Information

We do not sell your personal information to third parties. We may share your information in the following circumstances:

Third-Party Service Providers

We work with trusted service providers who assist us in operating our business, including:

Payment processors (for secure payment processing)
Shipping and logistics companies (for order delivery)
Email service providers (for marketing communications)
Website hosting and maintenance providers
Analytics and advertising services
Customer service platforms

Marketing Partners

With your explicit consent, we may share limited information with marketing partners for:

Joint promotional campaigns
Affiliate marketing programs
Social media advertising

Legal Disclosures

We may disclose your information when required by law or to:

Comply with legal obligations
Respond to government requests or court orders
Protect our rights, property, or safety
Prevent fraud or illegal activities
Enforce our terms of service

Business Transfers

If our company is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or use of your information.

4. Data Protection and Security

Security Measures

We implement appropriate technical and organizational measures to protect your personal information, including:

SSL encryption for all data transmission
Secure servers with firewall protection
Regular security audits and updates
Access controls and authentication systems
Staff training on data protection practices

Payment Security

All payment transactions are processed through encrypted, PCI-DSS compliant payment gateways
We do not store complete credit card information on our servers
Payment data is tokenized and securely handled by certified payment processors

Staff Access Controls

Access to personal information is restricted to authorized personnel only
Staff members sign confidentiality agreements
Regular training on privacy and security best practices
Monitoring of access to sensitive data

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, including:

Account information: Until you request deletion or close your account
Order history: 7 years for tax and legal compliance purposes
Marketing preferences: Until you unsubscribe or request removal
Website analytics: Aggregated data may be retained indefinitely

5. Your Rights and Choices

You have the following rights regarding your personal information:

Access Rights

Request a copy of the personal information we hold about you
Ask for clarification about how we use your information
Receive information in a commonly used electronic format

Correction Rights

Request correction of inaccurate or incomplete information
Update your account information at any time
Notify us of changes to your contact details

Deletion Rights

Request deletion of your personal information
Close your account and remove associated data
Note: Some information may be retained for legal compliance purposes

Marketing Opt-Out

Unsubscribe from marketing emails at any time
Opt out of promotional communications
Manage your communication preferences in your account settings

Data Portability

Request transfer of your data to another service provider
Receive your data in a structured, machine-readable format
Subject to technical feasibility and legal requirements

Withdrawal of Consent

Withdraw consent for data processing where consent is the legal basis
Change your cookie preferences
Opt out of non-essential data collection

To exercise your rights, contact us at sales@shezaskin.com or +94777321528.

6. Cookies and Tracking Technologies

Types of Cookies We Use

Essential Cookies: Required for basic website functionality

Shopping cart management
User authentication
Security features

Performance Cookies: Help us understand website usage

Google Analytics
Page load times
Error tracking

Functionality Cookies: Remember your preferences

Language settings
Display preferences
Login information

Marketing Cookies: Used for advertising and personalization

Social media integration
Targeted advertising
Conversion tracking

Managing Cookie Preferences

You can control cookies through:

Your browser settings
Our cookie preference center
Opt-out tools provided by advertising networks
Third-party privacy tools

Note: Disabling certain cookies may affect website functionality.

Third-Party Analytics and Advertising

We use third-party services including:

Google Analytics (website traffic analysis)
Facebook Pixel (social media advertising)
Google Ads (online advertising)
Email marketing platforms

These services may collect information about your online activities across different websites.

7. Legal Compliance and Jurisdiction

Sri Lankan Data Protection Laws

This policy complies with:

Computer Crimes Act No. 24 of 2007
Electronic Transactions Act No. 19 of 2006
Consumer Affairs Authority regulations
Other applicable Sri Lankan privacy laws

International Data Transfers

When we transfer data internationally for shipping or service provision:

We ensure adequate protection through contractual safeguards
We comply with applicable cross-border data transfer regulations
We work only with partners who maintain appropriate security standards

Age Restrictions

Our services are intended for users aged 18 and above. We do not knowingly collect personal information from minors under 18. If you are under 18, please do not use our website or provide any personal information. If we discover we have collected information from a minor, we will delete it immediately.

Dispute Resolution

Any disputes regarding privacy will be resolved through:

Direct communication with our customer service team
Mediation through recognized dispute resolution services
Sri Lankan courts, if necessary

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will:

Post the updated policy on our website
Send email notifications to registered users
Update the “Last Updated” date at the top of this policy
Provide clear notice of material changes

We encourage you to review this policy periodically to stay informed about how we protect your information.

9. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: sales@shezaskin.com
Phone: +94777321528
Address: Kandy Road, Mallawapitiya, Kurunegala, Sri Lanka

For Privacy-Related Inquiries: Please include “Privacy Policy” in your email subject line for faster response.

10. Related Policies

This Privacy Policy should be read in conjunction with our:

Terms of Service
Return and Refund Policy
Shipping Policy
Cookie Policy

These policies are available on our website at https://shezaskin.com/

Acknowledgment: By using our website and services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

Effective Date: This Privacy Policy is effective as of 12-07-2025 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.