Privacy Policy

Information We Collect

When you shop, create an account, contact support, subscribe to care letters, request restock alerts, or use plant care tools, we collect the information needed to provide that service.

This may include your name, email, phone number, delivery address, order details, wishlist activity, support messages, review content, newsletter preferences, restock alert requests, and account authentication details.

How We Use Information

We use customer information to process orders, arrange delivery, provide order and account support, send service emails, manage returns or plant promise claims, personalize plant recommendations, maintain wishlists, and improve the storefront.

If you subscribe to marketing, we may send plant care notes, restock alerts, offers, and seasonal updates. You can unsubscribe from marketing messages at any time.

Payments

Card and online payment processing is handled by our payment providers, including PayHere where available. We do not store full card numbers on the storefront.

Payment providers may process payment identifiers, transaction status, billing details, and fraud-prevention signals under their own security and compliance requirements.

AI Plant Tools

When you use Plant Matcher, Plant Doctor, or care guidance features, the details you provide may be sent to our backend and AI service so the tool can return recommendations or guidance.

Plant care outputs are informational and should be checked against the real condition of your plant, home environment, and any safety concerns such as pets or children.

Browser Storage

We use browser storage to keep non-sensitive storefront state such as carts, wishlist display, newsletter dismissal, payment return access, and storefront preferences. Account credentials are kept in an HTTP-only server session rather than localStorage.

You can clear browser storage through your browser settings, but some storefront features may reset when you do.

Sharing

We share information only when needed to run the store, such as with payment processors, delivery partners, email providers, support tooling, analytics or event systems, and service providers that host or maintain the storefront.

We may also share information if required by law, to protect customers or the business, or to investigate fraud, abuse, or security issues.

Retention And Choices

We keep information for as long as needed for orders, customer support, accounting, legal obligations, fraud prevention, and storefront operation.

You can contact us to request access, correction, deletion, or marketing opt-out support. Some order and transaction records may need to be retained for business, tax, or legal reasons.

Contact

For privacy questions or requests, contact mal.lk through the support page or WhatsApp link in the footer. Include the email address connected to your account or order so we can locate the right records.