PRIVACY POLICY

1. Who we are

The Mysu (Private) Limited (PV00251556) is responsible for your personal data. Contact: help@themysu.com.

2. What we collect

• Orders: your name, email, phone number and delivery address.
• Newsletter: your email address, if you sign up.
• Chat assistant: the messages you type.
• Device and usage data: collected through cookies and similar tools.

We never see or store your full card details. Payments are handled by PayHere and MintPay.

3. Why we use it

To process and deliver your orders, send order updates, handle returns and refunds, answer your questions, send newsletters (only if you sign up), improve our website and prevent fraud.

4. Who we share it with

Only the services we need to run the store: Domex (delivery), PayHere and MintPay (payments), Sanity (order storage), Cloudflare (hosting), Resend (order emails), Google Analytics and Google Tag Manager (site analytics), Meta Pixel (advertising measurement), Google Gemini (our chat assistant) and Clerk (sign-in for our business partners only). We don't sell your data.

5. Chat assistant

Messages you type into our chat assistant are sent to Google's Gemini service to generate replies, and Google may use them to improve its services. Please don't enter payment details or other sensitive information in the chat.

6. Cookies

We use cookies for analytics and advertising measurement. You can block or delete cookies in your browser settings.

7. How long we keep it

We keep order records for as long as tax and accounting law requires. Newsletter data is kept until you unsubscribe.

8. Your rights

Under Sri Lanka's Personal Data Protection Act, No. 9 of 2022, you can ask to access, correct or delete your personal data, or withdraw your consent. Email help@themysu.com.

9. Changes

We'll post any updates to this policy on this page.