Privacy policy
Privacy Policy
Effective Date: 18 August 2026
CAVE Colombo (“CAVE”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal information you provide when using http://cavecolombo.com or purchasing our products.
This Privacy Policy explains what information we collect, how we use it, how we may share it, and the choices available to you.
CAVE Colombo is operated by Timothy & Partners (Pvt) Ltd in Sri Lanka.
1. Information We Collect
When you visit our website, create an account, place an order, contact us, or otherwise interact with CAVE, we may collect information such as:
Information you provide to us
Full name
Telephone number
Email address
Billing address
Delivery address
Order details
Product and size selections
Payment-related information
Customer service enquiries
Information you voluntarily provide when communicating with us
Information collected automatically
When you use our website, certain information may be collected automatically, including:
IP address
Device type
Browser type
Operating system
Pages visited
Products viewed
Referring website or source
Website interaction and usage information
Cookies and similar technologies
2. How We Use Your Information
We may use your personal information to:
Process and fulfil your orders.
Arrange delivery of your purchases.
Process or facilitate payments.
Provide Cash on Delivery services.
Process payments through available payment providers.
Provide customer support.
Respond to enquiries and requests.
Confirm or update order information.
Prevent fraud, abuse, and unauthorised transactions.
Improve our website, products, and services.
Understand website usage and customer preferences.
Send promotional communications where permitted and where you have provided the appropriate consent.
Comply with applicable legal and regulatory requirements.
3. Payment Information
When you make an online payment, your payment may be processed through third-party payment providers.
CAVE Colombo does not intentionally store your complete credit or debit card number, card security code, or other complete card credentials on our own systems.
Payment information may be securely processed by the relevant payment service provider according to its own privacy policy and security practices.
4. KOKO Payments
If you choose to use KOKO as a payment method, certain information required to process your transaction may be shared with or processed by KOKO and its relevant service providers.
KOKO’s processing of your information may be subject to KOKO’s own privacy policy and terms.
5. Cash on Delivery
If you choose Cash on Delivery, we may provide your name, telephone number, delivery address, order information, and other information necessary to the relevant courier or delivery service to fulfil your order and collect payment.
6. Sharing Your Information
We may share relevant personal information with trusted third parties where necessary to operate our business and provide our services.
These may include:
Shopify, which provides the e-commerce platform used to operate our online store.
Payment service providers, to process online payments.
KOKO, where KOKO is selected as a payment method.
Courier and delivery providers, to deliver orders.
Technology and service providers, who assist with website operation, analytics, communications, security, and customer support.
Professional advisers, where reasonably necessary.
Government authorities, regulators, law-enforcement agencies, or other parties, where required or permitted by applicable law.
We do not sell your personal information as a product to third parties.
7. Shopify
Our online store is powered by Shopify.
Shopify may process information relating to your use of our store, orders, payments, and interactions with the website in order to provide its services.
Shopify’s handling of personal information is also governed by Shopify’s applicable privacy policies and terms.
8. Cookies and Similar Technologies
Our website may use cookies and similar technologies to:
Keep the website functioning properly.
Remember preferences.
Understand how visitors use our website.
Improve website performance.
Provide relevant marketing and advertising.
Measure the effectiveness of our marketing campaigns.
You may be able to control or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of parts of our website.
9. Marketing Communications
Where permitted by applicable law, we may use your contact information to send information about CAVE products, new collections, promotions, launches, or other marketing communications.
You may unsubscribe from promotional emails by using the unsubscribe option provided in the relevant communication or by contacting us.
Even if you opt out of marketing communications, we may still contact you regarding transactions, orders, deliveries, payments, account matters, or other necessary service-related communications.
10. Data Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.
However, no online transmission or electronic storage system can be guaranteed to be completely secure.
You should also take reasonable precautions to protect your own information and account credentials.
11. Data Retention
We retain personal information for as long as reasonably necessary to:
Provide our products and services.
Complete and maintain transaction records.
Provide customer support.
Comply with legal, accounting, tax, and regulatory requirements.
Resolve disputes.
Prevent fraud and abuse.
Protect our legitimate business interests.
When personal information is no longer reasonably required, we may delete, anonymise, or securely dispose of it, subject to applicable legal requirements.
12. Your Privacy Rights
Subject to applicable Sri Lankan law, you may have rights regarding your personal information, including rights to:
Request access to personal information we hold about you.
Request correction of inaccurate or incomplete information.
Request deletion of personal information where legally applicable.
Object to or restrict certain processing where legally applicable.
Withdraw consent where processing is based on consent.
Opt out of certain marketing communications.
Make a complaint regarding the handling of your personal information.
Some requests may be subject to legal or regulatory limitations.
To exercise a privacy-related right or make a request, please contact us using the contact details provided on our website.
13. Children’s Privacy
Our website is intended for general consumers and is not specifically directed toward children.
We do not knowingly seek to collect personal information from children in circumstances where such collection is prohibited by applicable law.
If you believe that a child has provided personal information to us improperly, please contact us so that we can review the matter and take appropriate action.
14. Third-Party Websites and Services
Our website may contain links to third-party websites, applications, social media platforms, payment providers, or other services.
We are not responsible for the privacy practices or content of third-party services
We recommend reviewing the privacy policy of any third-party service before providing personal information to it.
15. International Data Processing
Some service providers used to operate our website and process transactions may process or store information outside Sri Lanka.
Where applicable, such processing may be subject to the privacy laws, safeguards, contractual requirements, or policies applicable to the relevant service provider.
16. Applicable Law
We intend to handle personal information in accordance with applicable Sri Lankan data-protection laws and regulations, including the Personal Data Protection Act No. 9 of 2022, as amended.
Nothing in this Privacy Policy is intended to limit any privacy right that cannot legally be limited under applicable law.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, website, services, technology, or applicable legal requirements.
The updated version will be published on our website with the applicable effective date.
18. Contact Us
If you have questions about this Privacy Policy, wish to make a privacy request, or have concerns about how your personal information is handled, please contact CAVE Colombo using the contact details provided on our website.
CAVE Colombo
Timothy & Partners (Pvt) Ltd
Sri Lanka
Website: cavecolombo.com