Jump to section
Privacy Policy
How we collect, use, and protect your personal information.
Who we are
"Clouze" (legal entity: Clouze Private Limited).
Contact: support@clouzeofficial.com | +94 77 423 7272
Clouze is the "data controller" for your personal data collected via clouzeofficial.com, our checkout, and our customer support channels.
1) Data we collect
We collect different types of information to provide and improve our services.
Identity & contact
Name, email, phone/WhatsApp, delivery/billing addresses.
Order & account
Cart/checkout details, order/return history, support tickets.
Payment
Payment method, status and transaction IDs from our payment providers. We do not store full card numbers. Bank transfer: we receive your transfer reference and any receipt you send us.
Communications
Emails, web chat, and WhatsApp messages/attachments you send us.
Device & usage
IP address, device/browser info, pages viewed, and cookie identifiers.
Marketing preferences & UGC
Newsletter opt-ins, reviews, photos you submit.
2) Why we use your data
We use your data for specific business purposes with clear legal bases.
- •To fulfill your order and provide support (contract).
- •To operate, secure, and improve our site and services (legitimate interests).
- •To send marketing when you opt in; you can unsubscribe anytime (consent/legitimate interests).
- •To prevent fraud, comply with tax/law, and handle claims (legal obligation/legitimate interests).
3) Cookies & analytics
We use cookies and similar technologies to enhance your experience and analyze site usage.
We use cookies and similar tech for:
- •Essential (checkout, login, security)
- •Performance/analytics (site usage, diagnostics)
- •Marketing (if you opt in)
Manage preferences anytime via Cookie Settings (link in footer). See our Cookie Notice for details.
4) Sharing your data (processors/partners)
We share data only with trusted service providers under strict contractual agreements.
We never sell your personal data
We share data with service providers under contracts that restrict their use.
- •Commerce & hosting: e.g., Vendure platform, infrastructure and storage (e.g., Supabase/DO).
- •Payments: e.g., PayHere / WebXPay / Stripe (we never store full card data).
- •Email & messaging: e.g., Resend/Titan Mail; WhatsApp for support.
- •Shipping/courier: e.g., Koombiyo and similar logistics partners.
- •Analytics & anti-fraud: e.g., GA4/PostHog, security services.
We may disclose information to authorities where required by law or to defend legal claims.
5) International transfers
Some of our service providers may process data outside Sri Lanka with appropriate safeguards.
Some providers may process data outside Sri Lanka. Where required, we use appropriate safeguards (e.g., contractual clauses or equivalent mechanisms) and minimize what we transfer.
6) Retention
We keep your data only as long as necessary for business and legal requirements.
- •Orders & invoices: kept at least 7 years (tax/audit).
- •Support (email/WhatsApp): typically 12–24 months after closure.
- •Accounts & marketing: kept while your account is active or until you unsubscribe; we'll delete or anonymize after inactivity in line with our retention schedule.
- •Logs & diagnostics: ~90 days unless needed longer for security/investigation.
7) Your rights
You have control over your personal data and can exercise various rights.
You can request access, correction, deletion, or restriction of your data, object to certain processing (including marketing), and withdraw consent at any time.
To exercise rights: support@clouzeofficial.com. We may ask for proof of identity.
Additional notices (only if applicable to you)
Special rights and protections for residents of certain regions.
EU/UK residents
You also have data portability and the right to complain to your supervisory authority. Our legal bases include contract, consent, legitimate interests, and legal obligation. See "International transfers." GDPR territorial scope can apply when we offer goods to individuals in the EU/UK.
California residents (CCPA/CPRA)
If we meet applicability thresholds, you may have rights to know/access, delete, correct, and opt out of "sharing/sale" for cross-context advertising. We do not sell personal information.
8) WhatsApp-specific note
Important information about using WhatsApp for customer support.
If you message us on WhatsApp, content may be visible to multiple team members and processed by Meta and service providers that help us manage business communications. Avoid sending sensitive financial data in chat; for bank transfers, send only the reference and receipt image as requested. WhatsApp's own privacy terms apply to your use of their service.
9) Security
We implement comprehensive security measures to protect your data.
We use administrative, technical, and physical safeguards (e.g., HTTPS/TLS, access controls, limited access) to protect your data. No method is 100% secure.
10) Children
Our services are not intended for children under certain ages.
Our site is not intended for children under 13 (or under 16 in the EU/UK). We do not knowingly collect such data; please contact us to delete it if you believe we have.
11) Changes
We may update this policy and will notify you of significant changes.
We may update this policy. We'll post changes here and update the "Effective date." If changes are material, we'll provide a more prominent notice.
12) Contact
Get in touch with us for any privacy-related questions or concerns.