At MELEK.LK, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website. By using our services, you consent to the practices described in this policy.

---

1. Information We Collect

We may collect the following types of information:

• Personal Information: name, email address, phone number, shipping/billing address, and payment details provided during registration or checkout.
• Account Credentials: username and password hash for authentication.
• Order History: details of products purchased, order dates, and transaction records.
• Communication Data: messages sent via our contact form or directly to us.
• Technical Data: IP address, browser type, device information, and browsing behaviour collected via cookies and similar technologies.

---

2. How We Use Your Information

We use your information to:

• Process and fulfil your orders, including payment processing via PayHere
• Manage your account and provide customer support
• Send order confirmations, shipping updates, and service-related communications
• Send marketing emails (with your consent — you may opt out at any time)
• Improve our website, products, and services
• Detect and prevent fraudulent or unauthorised activity
• Comply with legal obligations

---

3. Data Protection & Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes SSL encryption, hashed passwords (bcrypt), and secure session handling. However, no method of transmission over the internet is 100% secure.

---

4. Third-Party Sharing

We do not sell your personal information to third parties. We may share your data with trusted service providers who assist in operating our business, including:

• PayHere — payment processing (your payment details are handled directly by PayHere; we do not store card information)
• Shipping couriers — to deliver your orders
• Google — analytics and reCAPTCHA (if enabled)
• Gmail SMTP — transactional email delivery

These third parties are contractually obligated to keep your data secure and use it only for the purposes we specify.

---

5. Cookies

We use essential cookies for session management and cart functionality. Analytics cookies help us understand how visitors use our site. You can control cookie preferences through your browser settings. Disabling cookies may affect certain features of the website.

---

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion or upon request, we will securely delete or anonymise your data within 30 days, subject to legal retention requirements.

---

7. Your Rights

You have the right to:

• Access, update, or correct your personal data via your account settings
• Request deletion of your account and associated data
• Opt out of marketing communications at any time
• Withdraw consent where processing is based on consent
• Lodge a complaint with the relevant data protection authority

To exercise these rights, please contact us.

---

8. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal data, we will take steps to delete it.

---

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

---

10. Contact Us

If you have any questions or concerns about this Privacy Policy or how your data is handled, please contact us.