At Dominga Clothing (“Dominga”, “we”, “us”, “our”), we are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, and safeguard your information when you visit dominga.lk or our related online services, create an account, or place an order. By using our website, you consent to the practices described here.
1. Information we collect
We may collect the following types of information:
- Identity and contact details: name, email address, phone number, and delivery address you provide when you register, check out, or contact us.
- Account and order data: order history, items purchased, payment status, loyalty activity, and messages you send us (including via email or social media such as Instagram and Facebook).
- Technical and usage data: IP address, browser type, device type, general location (e.g. country), and how you use our site (e.g. pages viewed), including through cookies and similar technologies as described below.
- Payment-related data: card and bank details are not stored on our servers. Payments are processed by our payment partners (such as PayHere). We may receive limited payment metadata (e.g. transaction reference, last four digits where applicable, approval status) needed to fulfil your order.
2. How we use your information
We use personal information to:
- Process, fulfil, and deliver your orders and returns.
- Communicate with you about your orders, account, verification, and customer support requests.
- Send marketing or promotional messages only where you have opted in (you may withdraw consent at any time).
- Improve our website, products, and services, including analytics and fraud prevention.
- Comply with legal obligations and enforce our terms.
We do not sell your personal information to third parties for their own marketing.
3. Legal bases (where applicable)
Depending on the context, we rely on performance of a contract (to process your purchase), legitimate interests (to secure and improve our services, provided these are not overridden by your rights), your consent (e.g. marketing cookies or newsletters), or legal obligation.
4. Service providers and categories of recipients
We share information with trusted service providers who process data on our instructions and only as needed to provide their services, including (as applicable to our live configuration):
- Hosting and database: our application and customer data may be hosted on infrastructure such as Supabase or similar cloud providers.
- Payments: PayHere (and other gateways we may enable) to authorise and settle payments.
- Email and notifications: providers such as Resend for transactional email (e.g. order confirmations, account verification).
- Media delivery: Cloudinary or similar CDNs for product imagery where used.
- Couriers and logistics: delivery partners receive name, phone, and address as required to deliver your parcel.
- Analytics and advertising (if enabled): tools such as Google Analytics or Meta Pixel, subject to your cookie choices where required.
Each provider has its own privacy policy; we encourage you to read them when you interact with their services (especially at checkout).
5. International transfers
Some providers may process data outside Sri Lanka. Where we use such services, we take steps that are appropriate to the risk (e.g. standard contractual clauses or equivalent safeguards offered by the provider), in line with applicable law.
6. Data retention
We retain personal information only as long as necessary for the purposes above, including legal, tax, and accounting requirements (for example, retaining order records for a period after purchase). When data is no longer needed, we delete or anonymise it where feasible.
7. Security
We implement appropriate technical and organisational measures designed to protect your information against unauthorised access, alteration, disclosure, or loss. No method of transmission over the internet is 100% secure; you share information with us at your own risk to that extent.
8. Cookies and similar technologies
We use cookies and similar technologies to operate the site (e.g. session, cart), remember preferences, measure traffic, and (where consented) marketing. You can control cookies through your browser; if you disable essential cookies, parts of the site may not work correctly.
9. Your rights
Subject to applicable law in Sri Lanka, you may have the right to access, correct, delete, or restrict certain processing of your personal data, and to object to processing or to withdraw consent for optional uses (e.g. marketing). To exercise these rights, contact us using the details on our Contact page. We may need to verify your identity before responding.
10. Children
Our services are not directed at individuals under 18. We do not knowingly collect personal information from children. If you believe we have done so, please contact us and we will take steps to delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes may be communicated by email or a notice on the website where appropriate. Continued use of the site after changes constitutes your acceptance of the updated policy.
12. Contact
For questions about this Privacy Policy or your personal data, please use the contact details on our Contact page.