Last Updated: April 2026
GlowWithAshi ("we," "our," "us," or "Company") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and handle your information when you contact us or purchase products.
This policy is governed by Sri Lanka's Personal Data Protection Act No. 27 of 2022 (PDPA) and other applicable Sri Lankan laws. Please read this carefully. If you do not agree with our practices, please do not use our Website or contact us.
We collect personal data only for legitimate business purposes — to serve you better, process orders, and respond to inquiries. Here's what we collect:
We collect and use your information for specific, legitimate purposes:
We do NOT: Use your information for unsolicited marketing, sell data to third parties, or send promotional emails without explicit consent.
We respect your privacy and share your information only when necessary:
Your delivery address and contact details may be shared with our delivery partners in Sri Lanka solely to deliver your products. These partners are contractually bound to protect your data and use it only for delivery purposes.
For secure payment processing, transaction information is shared with authorized payment processors. We do not store payment card information on our Website.
We may disclose information if required by Sri Lankan law, court order, or government request. We will notify you of such requirements unless prohibited by law.
If GlowWithAshi is acquired or merged, your information may be transferred. You will be notified of any material changes to this policy.
Protecting your information is a priority. We implement appropriate security measures:
However, no method of transmission over the internet is 100% secure. While we use industry-standard protections, we cannot guarantee absolute security. If you have security concerns, contact us immediately at glowwithashi6@gmail.com.
Our Website uses minimal tracking technology to improve user experience:
We do NOT use:
You can control cookies through your browser settings. Disabling essential cookies may affect Website functionality.
Under Sri Lanka's Personal Data Protection Act 2022, you have the following rights:
You can request access to the personal data we hold about you. Contact us at glowwithashi6@gmail.com to request a copy of your data.
If your information is inaccurate or incomplete, you have the right to request correction. We will update your data promptly.
You can request deletion of your personal data, unless we are required to retain it by law or for business purposes (e.g., tax compliance, delivery records). We will retain data only as long as necessary.
You can object to the processing of your data for any purpose. We will respect your preferences and discontinue processing where possible.
You can request your data in a structured, commonly-used format for transfer to another service provider.
To exercise any of these rights, contact us at glowwithashi6@gmail.com with your full name and request details. We will respond within 30 days.
Our Website may link to external websites and social media platforms. This Privacy Policy applies only to our Website. We are not responsible for the privacy practices of external sites.
If you follow links to external sites, review their privacy policies before providing any information. Your use of external sites is governed by their terms and policies.
Our Website and products are not directed to children under 18 years of age. We do not knowingly collect personal information from children under 18.
If we become aware that we have collected information from a child under 18, we will delete such information immediately. If you are a parent or guardian and believe a child has provided information, please contact us right away.
Parental Guidance: Our skincare products are intended for adult use only. All products require a patch test before application.
We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy:
After the retention period, data is securely deleted unless we are legally required to retain it. You can request earlier deletion by contacting us.
GlowWithAshi operates primarily in Sri Lanka. Your data is stored and processed within Sri Lanka. We do not regularly transfer data outside Sri Lanka unless necessary for specific business purposes (e.g., international delivery logistics).
If data is transferred internationally, we ensure such transfers comply with Sri Lankan Personal Data Protection Act requirements.
We may update this Privacy Policy to reflect changes in our practices, legal requirements, or technology. The "Last Updated" date at the top indicates the most recent revision.
Significant changes will be communicated via our contact channels. Your continued use of the Website following updates constitutes your acceptance of the revised policy.
For questions about this Privacy Policy, to exercise your privacy rights, or to report data concerns, please contact us:
If you have unresolved privacy concerns or believe we have violated your rights under Sri Lanka's Personal Data Protection Act, you may file a complaint with the Office of the Commissioner for Personal Data Protection (OCPDP) in Sri Lanka.