Privacy Policy - Hodru.lk

Last updated: 15th January 2026

At Hodru.lk, we are committed to protecting your personal data in accordance with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka and other applicable laws. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website or purchase our products.

By accessing or using Hodru.lk, you consent to the practices described in this policy.

1. Personal Data We Collect

We may collect and process the following categories of personal data:

a) Personal Identification Information

Full name
Email address
Contact number
Shipping and billing address

b) Transaction Information

Order details
Payment confirmation (payment information is processed securely by third-party payment service providers; we do not store card details)

c) Technical & Usage Data

IP address
Browser type and device information
Pages visited and interaction data

2. Purpose of Processing Personal Data

We collect and process your personal data for lawful purposes, including:

Processing and delivering customer orders
Managing payments and invoices
Providing customer support and communication
Improving our products, services, and website
Ensuring website security and preventing fraud
Complying with legal and regulatory obligations

We process your data only to the extent necessary for these purposes.

3. Lawful Basis for Processing

Under the Sri Lankan PDPA, we process personal data based on one or more of the following lawful bases:

Your consent
Performance of a contract (order fulfillment)
Compliance with a legal obligation
Our legitimate business interests, where such interests do not override your rights

4. Disclosure of Personal Data

We do not sell or trade your personal data.

Your information may be shared only with trusted third parties where necessary, including:

Payment service providers
Courier and logistics partners
Website hosting and analytics service providers

All third parties are required to handle your data securely and in compliance with applicable data protection laws.

5. Data Storage & Security

We implement appropriate technical and organizational safeguards to protect your personal data against unauthorized access, loss, misuse, or disclosure.

Personal data is retained only for as long as necessary to fulfill the purposes outlined in this policy or to comply with Sri Lankan legal requirements.