Privacy & Personal Data Protection Policy

1. Introduction & Scope

Welcome to WellassaMart ("we", "our", or "us"). We respect your privacy and are committed to safeguarding personal information collected when you access our storefront at wellassamart.com, create an account, purchase products, or interact with our customer care representatives in Sri Lanka.

2. Information We Collect

We only collect information necessary to fulfill your online shopping requests:

• Customer Identity & Contact: Full name, email address, mobile phone number (07XXXXXXXX).
• Delivery Logistics: Physical street address, district (within Sri Lanka's 25 administrative districts), postal city, and landmark delivery notes.
• Order Records: Items ordered, order quantities, selected variants, subtotal, and payment methods chosen.
• Payment Verification Documents: Customer-uploaded bank deposit receipts or transfer slips when opting for direct bank transfer.

3. Payment Security & Zero Card Storage Guarantee

We never store, log, or process credit/debit card numbers, CVVs, or bank account login credentials on our servers.

When making online payments via PayHere.lk, your transaction is securely conducted directly within PayHere’s PCI-DSS compliant vault using SHA-256 / MD5 signature verification. We receive only a cryptographic transaction confirmation status from the payment processor.

4. How We Utilize Your Data

• Processing, packaging, and dispatching your orders with registered local courier partners (e.g., Domex, Pronto).
• Sending order confirmations, tracking numbers, and delivery status notifications via email or SMS.
• Assisting you with product inquiries, warranty claims, returns, or technical support.
• Preventing fraudulent orders and maintaining platform security.

5. Third-Party Data Sharing

We never sell, rent, or trade your personal data. Personal data is shared strictly on a need-to-know basis with:

• Domestic Couriers: Delivery name, shipping address, and phone number for parcel hand-over.
• Payment Gateways: PayHere and associated financial institutions to clear authorized transactions.

6. Cookies & Local Storage

WellassaMart employs secure HTTP-only cookies solely for core shopping functionality (retaining items in your cart, preserving customer login state across sessions, and CSRF security validation). We do not deploy intrusive third-party cross-site tracking cookies.

7. Customer Rights & Inquiries

Under applicable Sri Lankan consumer regulations, you possess the right to review, update, or request the deletion of your account information. For inquiries regarding this privacy statement, please contact us at: