1. Information we collect
We may collect information you provide directly, including your name, email address, phone number, delivery and billing details, account profile information, order notes, support messages, reviews and feedback. We also receive technical information such as device, browser, IP address, session and security data needed to operate and protect the service.
- Account information used to create and secure your customer account.
- Order and delivery information used to process, fulfil and track purchases.
- Support, review and feedback content you choose to submit.
- Shopping activity such as recently viewed products, wishlist items and cart activity where those features are enabled.
2. Google Sign-In information
If you choose Continue with Google, Google and our authentication provider may provide basic profile information needed to sign you in, such as your email address, name and profile image. We use this information only to authenticate you, maintain your customer account and provide requested account features. We do not use Google Sign-In data to access your Gmail, contacts, files or other Google services unless a future feature clearly asks for additional permission.
- We do not sell Google Sign-In information.
- We do not use Google Sign-In information for third-party advertising profiles.
- You can remove linked sign-in access from your Google Account security settings and contact us if you want assistance with account deletion.
3. How we use information
We use information to provide and improve SOUNDS.LK, including account authentication, customer service, checkout, payment processing, delivery, fraud prevention, stock and order management, invoices, shipping documents, product recommendations and operational analytics.
- Create, authenticate and secure customer accounts.
- Validate prices, stock, discounts and delivery charges during checkout.
- Process orders, payments, refunds, fulfilment and tracking updates.
- Send service messages such as account confirmation, password reset, order, payment, shipping and support emails.
- Prevent misuse, investigate errors and protect our systems and customers.
4. Payments
Where online card or electronic payments are enabled, payment details are handled by the selected payment service provider. SOUNDS.LK may receive transaction identifiers, status, amount and limited payment metadata needed to reconcile the order. We do not intend to store full card numbers or card security codes on SOUNDS.LK servers.
5. Service providers
We use specialist service providers to operate the store. Depending on the feature you use, these may include Vercel for website hosting and delivery, Supabase for database, authentication and storage, Resend or other configured email infrastructure for transactional messages, payment providers such as PayHere when enabled, Google for optional Google Sign-In, and OpenAI for AI-assisted product or shopping features when enabled.
- Providers receive only the data reasonably required to perform their service.
- Their processing is also subject to their own terms, security controls and privacy practices.
6. AI-assisted features
SOUNDS.LK may provide AI-assisted product discovery, comparison or support features. We design these features so that private payment credentials and sensitive authentication secrets are not sent to the AI service. AI responses can be imperfect and should not be treated as authoritative confirmation of payment, stock reservation, warranty eligibility or shipment status; those facts come from our order and inventory systems.
7. Cookies, local storage and similar technologies
The site may use cookies, browser storage and similar technologies for essential sessions, authentication, carts, customer preferences, recently viewed products, security and performance. Some features may not function correctly if essential storage is blocked.
8. Marketing and communications
Transactional emails needed for an account or order are different from promotional marketing. Where we offer newsletters or promotional messages, we aim to send them only when permitted and to provide an unsubscribe method. Unsubscribing from marketing does not stop essential account, security, payment or order messages.
9. Data retention
We retain information for as long as reasonably necessary to provide the service, maintain order and accounting records, resolve disputes, enforce agreements, prevent fraud and meet applicable legal or regulatory obligations. Retention periods can differ by record type. Data that is no longer required may be deleted, anonymised or securely archived.
10. Security
We use technical and organisational safeguards such as HTTPS, access controls, authentication, database security policies and role separation. No internet service can guarantee absolute security. Customers should use strong passwords, protect one-time codes and contact us promptly if they suspect unauthorised access.
11. Your choices and rights
Depending on applicable law and the nature of the request, you may ask to access, correct or delete certain personal information, object to or restrict certain processing, or withdraw consent where processing is based on consent. Some information may need to be retained for completed orders, fraud prevention, legal obligations or legitimate business records.
12. Children
SOUNDS.LK is a general retail service and is not intentionally designed to collect personal information from young children without appropriate involvement of a parent or guardian. If you believe information has been provided inappropriately, contact us so we can review it.
13. Changes to this policy
We may update this Privacy Policy as the store, service providers or legal requirements change. The current version will be published at this URL with an updated effective date where appropriate.
14. Contact us
For privacy, account or data questions, contact SOUNDS.LK using the details shown on our Contact page or email hello@sounds.lk. Please do not send passwords, one-time codes or full payment-card details by email or support message.