Privacy Policy

• Account details: your name, email address and phone number, given when you create an account or check out.
• Delivery details: the address and district an order is being sent to, and any note you add to the order.
• Order history: what you bought, what you paid, and the status of each order.
• Payment references: for a LankaQR transfer, the bank reference you tell us you paid under, so we can match the payment to your order.
• Technical information: your IP address, browser and device, recorded by our servers as part of normal operation and security logging.

We never see your card details. Card payments are handled entirely by PayHere on their own systems. Your card number does not pass through our website and is not stored by us.

• To take payment for, pack and deliver your order
• To confirm a bank transfer against our account
• To let you sign in and see your own orders
• To answer your questions and handle returns, refunds and warranty claims
• To keep records we are required to keep, and to detect fraud and abuse

We do not use your details for marketing unless you ask us to, and we do not sell, rent or trade your personal information to anyone.

• PayHere, our payment gateway, for card payments. They receive your name, email, phone and billing address, and handle your card details under their own privacy policy.
• Our bank, for LankaQR transfers, which is how we verify that a payment arrived.
• Delivery partners, who receive the name, address and phone number needed to deliver your parcel.
• Our hosting providers, who store the site and its database on our behalf.
• The authorities, where the law requires us to disclose information.

We use cookies to keep you signed in and to remember what is in your cart. These are necessary for the site to work; blocking them will stop you signing in or checking out.

Order records are kept for as long as we need them for accounting, warranty and tax purposes. You can ask us to close your account at any time; we will remove your account details and keep only the order records we are required to retain.

The site is served over HTTPS, passwords are stored hashed rather than in readable form, and access to order data is limited to staff who need it. No system is perfectly secure, so we cannot promise absolute security, but we will tell you promptly if a breach affects your data.

You can ask us to show you the personal information we hold about you, correct anything wrong, or delete your account. Email hello@spaceone.lk and we will respond.

If we change this policy we will update the date at the bottom of this page. Questions about privacy: hello@spaceone.lk. See also our Terms & Conditions.