Legal & Customer Protection

PRIVACY POLICY

How we collect, protect, and handle your personal data in accordance with Sri Lanka Data Protection laws.

Last Updated: August 23, 2026

1. Commitment to Privacy

VORTEX ("we", "us", "our") respects your fundamental right to privacy. This Privacy Policy sets out our principles in collecting, handling, safeguarding, and processing your personal data in full compliance with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka (PDPA) and international data security best practices.

2. Information We Collect

When you visit our digital store, create an account, or place an order, we may collect the following information:

3. Purpose of Data Processing

We process your data strictly for legitimate operational purposes, including:

🔒 Zero Third-Party Selling: We NEVER sell, rent, trade, or monetize your personal information to third-party advertisers or marketing data brokers.

4. Third-Party Service Providers

To deliver a world-class shopping experience, we partner with reputable service providers under strict data confidentiality agreements:

5. Data Security & Retention

We employ enterprise-grade SSL/TLS encryption, secure cloud infrastructure, and strict role-based access control. Payment receipt images and billing records are stored securely and retained only for as long as required for tax, warranty, and accounting obligations.

6. Your Statutory Rights

Under the Sri Lanka Personal Data Protection Act, you possess the right to:

7. Privacy Inquiries & Data Protection Officer

If you have any questions, requests, or concerns regarding your personal data, please contact our Privacy Team: