Privacy Policy

Last updated: October 2026

BuySmart.lk ("BuySmart", "we", "us" or "our") respects your privacy. This Privacy Policy explains what information we may collect when you visit our website, create an account, place an order, contact us or use our services, and how that information is used and protected.

1. Information We Collect

• Account and contact details: information such as your name, email address, telephone number and login details that you provide when registering or contacting us.
• Order and delivery details: products ordered, order history, delivery address and information needed to process and deliver your purchase.
• Payment-related information: payment method, payment status and transaction references. If you submit a bank-transfer receipt or payment slip, we may process the image and details shown on it to verify your payment. Please avoid sending information that is not needed for verification.
• Technical information: information such as IP address, browser/device details, pages visited and basic usage data, where collected by our website, security tools or analytics services.
• Messages and reviews: information you provide when contacting support, submitting a review or otherwise communicating with us.

2. How We Use Your Information

• To create and manage accounts and provide website features.
• To process orders, verify payments, arrange delivery and provide order updates.
• To respond to questions, complaints, return/refund requests and other support enquiries.
• To prevent fraud, abuse, unauthorised activity and security incidents.
• To maintain, troubleshoot and improve our website, services and customer experience.
• To comply with applicable legal obligations and resolve disputes.

3. When We Share Information

We do not sell your personal information. We may share the minimum information reasonably needed with service providers that help us operate BuySmart.lk, such as courier and delivery companies, payment providers, website hosting/security providers and technical support providers. We may also disclose information where required by law, to protect our rights or users, or in connection with a business transfer. These recipients may process information under their own terms and privacy practices.

4. Payments and Payment Slips

Payments may be handled by third-party payment services or verified using payment information you submit. We do not intend to collect or store full payment-card security details through ordinary website forms. Payment slips may contain personal or financial information; they are used for payment verification and related order support and should only be submitted through the website's designated process.

5. Cookies and Similar Technologies

Our website may use cookies or similar technologies to support essential features such as sessions, login, cart functionality, security and preferences. If analytics tools are enabled, they may also help us understand website usage. You can manage cookies through your browser settings, but disabling essential cookies may affect some site features.

6. Data Security and Retention

We use reasonable technical and organisational measures designed to protect information from unauthorised access, loss, misuse or disclosure. No online system can be guaranteed completely secure. We retain information for as long as reasonably necessary for orders, customer support, security, record-keeping and legal obligations, after which it may be deleted or securely disposed of where appropriate.

7. Your Choices and Requests

You may contact us to request access to, correction of or deletion of personal information, subject to applicable law and records we need to retain for legitimate business or legal purposes. We may need to verify your identity before acting on a request.

8. Children's Privacy

BuySmart.lk is not intended for children to use independently to make purchases. If you are under 18, use the service with the involvement and supervision of a parent or legal guardian.

9. Third-Party Websites

Our website may link to third-party services or websites. We are not responsible for their content, security or privacy practices. Please review the relevant third party's policies before providing information to them.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The revised version will be published on this page with an updated date. Your continued use of the website after a change means you have had the opportunity to review the updated policy.

11. Contact Us

If you have questions or privacy-related requests, please contact us through our Contact Us page.