Privacy policy

Last updated: 5 October 2026

This policy explains what personal information CosmoCosmetics (“Cosmo”, “we”, “us”) collects when you visit cosmocosmetic.lk or buy from us, how we use it, and the choices you have. We handle your information in line with Sri Lanka’s Personal Data Protection Act, No. 9 of 2022.

Information we collect

Details you give us: your name, phone number, email address, delivery and billing address, order details, and anything you write to us, such as messages, reviews or order notes.
Account details: if you create an account, your login details and order history.
Payment information: card payments are processed by our payment providers. We do not see or store your full card number.
Questions to our beauty expert: if you use “Ask our beauty expert”, the questions you send so we can answer them.
Device and browsing information: information such as your device, browser, IP address and the pages you view, collected through cookies and similar technologies.

How we use your information

To process, pack and deliver your orders, and to contact you about them.
To take payments and help prevent fraud.
To answer your questions and give you support.
To send you news and offers, if you have agreed to receive them. You can unsubscribe at any time using the link in our emails.
To understand how our website is used, so we can improve it.
To meet our legal and accounting obligations.

Who we share it with

We never sell your personal information. We only share it with trusted partners who help us run the store, and only as much as they need:

Shopify, which hosts our online store.
Payment providers, such as our card payment provider (onepay), Koko and our bank.
Delivery partners, so they can deliver your order.
Analytics and advertising services, such as Meta (Facebook and Instagram), which help us measure and improve our marketing.

We may also share information when the law requires it, or to protect our customers, our business or others.

Cookies

Our website uses cookies to keep your cart and login working, to remember your preferences, and to understand how the site is used. Some cookies come from our analytics and advertising partners. You can block or delete cookies in your browser settings, but some parts of the store may not work properly without them.

How long we keep it

We keep your information for as long as we need it to provide our services, and for as long as the law requires us to keep records of orders and payments.

Your rights

You can ask us to:

tell you what personal information we hold about you,
correct information that is wrong or out of date,
delete your information, where we are not required to keep it,
stop sending you marketing messages, or
withdraw consent you have given us.

To make a request, contact us using the details below. We will reply as soon as we can.

Keeping it safe

We use reasonable technical and organisational measures to protect your information. Our store runs on Shopify’s secure platform, and payments are processed over encrypted connections.

Children

Our store is intended for adults. If you are under 18, please use the store with the involvement of a parent or guardian.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.

Contact us

CosmoCosmetics, Nawala Road, Rajagiriya, Colombo 10100, Sri Lanka
Phone: +94 74 010 1098
Email: cosmocosmetic.lk@gmail.com