Skip to Content

Privacy Policy

Privacy Policy


At Ceylon Merchant Limited, we are committed to safeguarding your privacy and ensuring that your personal information is protected. This Privacy Policy explains how we collect, use, and share your personal data when you interact with our e-commerce platform, in compliance with the UK Data Protection Act 2018 and the General Data Protection Regulation (GDPR).

By using our website, you consent to the terms of this policy.



1. Information We Collect

We may collect and process the following types of personal data:

  • Personal Information: Your name, email address, phone number, shipping address, billing address, payment details, and any other contact details you provide when making a purchase or creating an account.
  • Usage Information: Your IP address, browser type, operating system, and other data collected via cookies and similar technologies that help us improve your experience on our site.
  • Transaction Information: Details related to your purchases, order history, and customer service interactions.

2. Legal Basis for Data Processing

We process your data in line with the following legal bases under GDPR:

  • Contractual Necessity: To fulfill our obligations in processing your order, delivering products, and providing customer service.
  • Legitimate Interests: For improving our services, marketing communications (with consent), fraud prevention, and ensuring the security of our site.
  • Consent: Where you have explicitly opted into marketing communications.
  • Compliance with Legal Obligations: To comply with laws or regulations, including data retention requirements for tax purposes.

3. How We Use Your Data

We use your personal data for the following purposes:

  • To process and fulfill orders, including shipping, payment processing, and delivery.
  • To communicate with you regarding your orders, account, and customer service inquiries.
  • To improve the performance and functionality of our website and services.
  • To comply with legal and regulatory obligations.

4. Data Sharing and Transfers

We do not sell or share your personal information with third parties, except in the following circumstances:

  • Service Providers: We may share data with third-party service providers (e.g., payment processors, delivery services) who process your data on our behalf.
  • Legal Compliance: We may disclose your data to comply with legal obligations, respond to lawful requests from public authorities, or protect our legal rights.
  • International Transfers: If we transfer your data outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place to protect your privacy, such as using Standard Contractual Clauses approved by the European Commission.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or destruction. However, no system can guarantee absolute security, so we encourage you to take steps to protect your own information, such as using strong passwords.

6. Your Data Protection Rights

Under GDPR and the UK Data Protection Act 2018, you have the following rights:

  • Right to Access: You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification: You can ask us to correct any inaccurate or incomplete information.
  • Right to Erasure: You can request the deletion of your personal data where there is no legal basis for retaining it.
  • Right to Restrict Processing: In certain circumstances, you can ask us to restrict the processing of your data.
  • Right to Data Portability: You can request that your data be transferred to you or another service provider.
  • Right to Object: You can object to our processing of your personal data for certain purposes, including direct marketing.
  • Right to Withdraw Consent: Where we rely on your consent for processing, you can withdraw this consent at any time.

To exercise any of these rights, please contact us at info@ceylonmerchant.co.uk.

7. Cookies

Our website uses cookies to enhance your browsing experience. You can manage your cookie preferences or disable cookies via your browser settings.

8. Data Retention

We will retain your personal data only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law (e.g., for tax or legal reporting).

9. Changes to This Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes, we will notify you through our website or by email. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions or concerns regarding this Privacy Policy, or wish to exercise any of your rights under data protection law, please contact us at:

Ceylon Merchant Limited

Head Office: No 151, SW19 8PU,Effra Road Wimbledon, London, United Kingdom

Company Registration Number: 15749443

Email: info@ceylonmerchant.co.uk