Privacy Policy
Last updated: July 2026
Herbal Crown ("we", "us", "our") operates herbalcrown.lk (the "Site"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our Site or place an order with us.
1. Information We Collect
When you place an order or contact us, we may collect:
- Full name, email address, and phone number
- Delivery address, city, and district
- Order details and purchase history
- Payment confirmation details from our payment partner (we never store your card number)
- Reviews, photos, and feedback you submit
- Basic technical data such as browser type and IP address, for security and fraud prevention
2. How We Use Your Information
- To process and deliver your orders
- To send order confirmations, OTP verification codes, and delivery updates via email or SMS
- To respond to customer support and warranty enquiries
- To improve our products, website, and customer experience
- To send optional newsletters or promotions, which you may unsubscribe from at any time
- To prevent fraud and comply with legal obligations
3. Payment Processing
All online payments are processed securely through PayHere (Pvt) Ltd, a PCI-DSS compliant payment gateway licensed to operate in Sri Lanka. Herbal Crown does not collect or store your card number, CVV, or banking credentials at any point — these are entered directly on PayHere's secure payment page. We only receive a payment success/failure status and a transaction reference for your order.
4. Sharing of Information
We do not sell or rent your personal information. We share information only with:
- PayHere, to process your payment
- Our delivery/courier partners, to fulfil your order
- SMS/email service providers (such as Notify.lk and our email provider), solely to send order and OTP notifications
- Authorities, where required by Sri Lankan law
5. Data Storage & Security
Your data is stored on secure servers with restricted access. We use industry-standard measures such as password hashing, OTP verification, and encrypted admin sessions to protect your information from unauthorized access, alteration, or disclosure.
6. Cookies
We use minimal cookies/local storage to remember your cart, wishlist, and session preferences. These do not track you across other websites.
7. Your Rights
You may request access to, correction of, or deletion of your personal data at any time by contacting us below. You can also opt out of marketing emails/SMS at any time.
8. Children's Privacy
Our Site is not directed at children under 18. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.
10. Contact Us
If you have questions about this Privacy Policy or how your data is handled, please contact us at:
- Email: info@herbalcrown.lk
- Website: herbalcrown.lk