Legal
Privacy Policy
Last updated: June 2026
1. Information We Collect
We collect information you provide directly: name, email address, phone number, shipping address, and payment details. We also collect browsing data such as pages visited, time on site, and device information through cookies.
2. How We Use Your Information
We use your information to process orders, send order confirmations and shipping updates, respond to enquiries, and (with your consent) send marketing communications about new arrivals and offers.
3. Sharing of Information
We do not sell your personal data. We share information only with trusted third parties necessary to operate our business: payment processors (PayHere), shipping carriers (DHL, FedEx), and email service providers.
4. Data Security
All data is transmitted over SSL-encrypted connections. Payment information is processed by PCI-DSS compliant payment processors and is never stored on our servers.
5. Cookies
We use cookies to maintain your session, remember your cart, and analyse site traffic. You can disable cookies in your browser settings, though some features may not function correctly. See our Cookie Policy for details.
6. Your Rights
You have the right to access, correct, or delete your personal data at any time. To exercise these rights, contact us at hello@sapphirestory.com. We will respond within 30 days.
7. Data Retention
We retain customer data for as long as necessary to provide our services and comply with legal obligations. Order records are retained for 7 years in accordance with accounting regulations.
8. Contact
For privacy-related enquiries, contact our Data Protection Officer at privacy@sapphirestory.com or by post at our registered address in Colombo, Sri Lanka.