Privacy Policy

1. Introduction

London Books ("we," "our," "us," or "the Company") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you use our website located at londonbooks.lk (the "Website") and our services.

This Privacy Policy is designed to comply with applicable data protection laws and regulations in Sri Lanka, including but not limited to the Electronic Transactions Act No. 19 of 2006 and other relevant legislation.

By using our Website, you consent to the collection and use of your information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use our Website.

2. Information We Collect

We collect various types of information to provide and improve our services. The information we collect includes:

2.1 Personal Information

When you create an account, place an order, or interact with our Website, we may collect the following personal information:

• Identity Information: First name, last name, and any other names you provide
• Contact Information: Email address, phone number, postal address (including street address, city, and postal code)
• Account Information: Username, password (encrypted), account preferences, and account status
• Profile Information: Profile image (if you choose to upload one)

2.2 Payment Information

When you make a purchase, we collect payment-related information:

• Payment method details (credit/debit card type, last four digits of card number)
• Billing address
• Transaction history and purchase records

Important: We do not store your complete payment card information on our servers. All payment transactions are processed securely through third-party payment gateways that comply with Payment Card Industry Data Security Standards (PCI DSS).

2.3 Order and Transaction Information

We collect information related to your orders and transactions, including:

• Order details (products purchased, quantities, prices)
• Shipping addresses and delivery preferences
• Order history and purchase patterns
• Returns and refund information

2.4 Technical and Usage Information

When you visit our Website, we automatically collect certain technical information:

• Device Information: Device type, operating system, browser type and version
• IP Address: Your Internet Protocol address
• Log Data: Pages visited, time spent on pages, click patterns, access times and dates
• Location Data: General geographic location based on IP address (not precise location)
• Cookies and Tracking Technologies: As described in Section 7

2.5 Communication Information

When you contact us or interact with our customer service, we collect:

• Correspondence history (emails, messages, feedback)
• Customer service inquiries and support requests
• Survey responses and feedback

2.6 Information from Third Parties

We may receive information about you from third-party services, including:

• Payment processors (transaction confirmations)
• Shipping providers (delivery status updates)
• Social media platforms (if you choose to connect your account)
• Analytics providers (website usage statistics)

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Provision

• Process and fulfill your orders
• Manage your account and provide account-related services
• Communicate with you about your orders, account, and our services
• Provide customer support and respond to your inquiries
• Send order confirmations, shipping notifications, and delivery updates

3.2 Business Operations

• Improve and optimize our Website, products, and services
• Conduct research and analysis to understand customer preferences
• Develop new products and services
• Manage inventory and supply chain operations
• Prevent fraud, abuse, and security threats
• Comply with legal obligations and enforce our Terms and Conditions

3.3 Marketing and Communications

With your consent, we may use your information to:

• Send you promotional emails, newsletters, and marketing communications
• Notify you about new products, special offers, and events
• Personalize your experience and show you relevant content
• Conduct surveys and gather feedback

You can opt-out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Updating your account preferences
• Contacting us directly at support@londonbooks.lk

3.4 Legal Compliance

• Comply with applicable laws, regulations, and legal processes
• Respond to government requests and court orders
• Protect our rights, property, and safety, as well as that of our users
• Investigate potential violations of our Terms and Conditions

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information in the following circumstances:

4.1 Service Providers

We may share your information with trusted third-party service providers who assist us in operating our Website and conducting our business, including:

• Payment Processors: To process your payments securely
• Shipping Companies: To deliver your orders
• IT Service Providers: To host our Website and provide technical support
• Email Service Providers: To send you communications
• Analytics Providers: To analyze Website usage and improve our services

These service providers are contractually obligated to:

• Use your information only for the purposes we specify
• Maintain appropriate security measures
• Not disclose your information to other parties

4.2 Business Transfers

If we are involved in a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (subpoenas, court orders, warrants)
• Government requests and regulatory inquiries
• Legal obligations to protect rights, property, or safety
• Prevention of fraud or illegal activities

4.4 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption: We use SSL/TLS encryption to protect data transmitted between your browser and our servers
• Secure Storage: Personal information is stored on secure servers with restricted access
• Password Protection: Passwords are hashed using industry-standard algorithms (bcrypt)
• Access Controls: Access to personal information is limited to authorized personnel who need it to perform their duties
• Regular Security Audits: We conduct regular security assessments and updates
• Payment Security: Payment information is processed through PCI DSS-compliant payment gateways

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

If you suspect any unauthorized access to your account, please contact us immediately at support@londonbooks.lk.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Our retention periods are as follows:

• Account Information: Retained while your account is active and for 3 years after account closure
• Order and Transaction Records: Retained for 7 years as required by tax and accounting regulations in Sri Lanka
• Marketing Communications: Retained until you opt-out or request deletion
• Customer Service Records: Retained for 2 years after the last interaction
• Technical and Usage Data: Retained for 2 years for analytics purposes

After the retention period expires, we will securely delete or anonymize your personal information, unless we are required to retain it for legal, regulatory, or legitimate business purposes.

7. Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files that are placed on your device when you visit our Website. They help us provide you with a better experience by remembering your preferences and understanding how you use our Website.

7.2 Types of Cookies We Use

We use the following types of cookies:

• Essential Cookies: Required for the Website to function properly (e.g., session management, security)
• Functional Cookies: Remember your preferences and settings (e.g., language, region)
• Analytics Cookies: Help us understand how visitors use our Website (e.g., pages visited, time spent)
• Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness

7.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to:

• View and delete cookies
• Block cookies from specific websites
• Block all cookies
• Receive notifications when cookies are set

Please note that disabling cookies may affect the functionality of our Website and your user experience.

7.4 Third-Party Tracking

We may use third-party analytics and advertising services that use cookies and similar technologies. These services have their own privacy policies governing the use of your information.

8. Your Rights and Choices

You have certain rights regarding your personal information. Subject to applicable law, you may:

8.1 Access Your Information

You have the right to request access to the personal information we hold about you. You can view and update much of your information through your account settings.

8.2 Correct Your Information

You have the right to request correction of inaccurate or incomplete personal information. You can update most information through your account settings or by contacting us.

8.3 Delete Your Information

You have the right to request deletion of your personal information, subject to legal and contractual obligations that may require us to retain certain information.

8.4 Object to Processing

You have the right to object to certain types of processing of your personal information, such as direct marketing.

8.5 Data Portability

You have the right to request a copy of your personal information in a structured, machine-readable format.

8.6 Withdraw Consent

Where we process your information based on consent, you have the right to withdraw your consent at any time.

8.7 Account Deletion

You may request deletion of your account at any time by contacting us. We will process your request in accordance with our data retention policies and legal obligations.

To exercise any of these rights, please contact us at:

Email: support@londonbooks.lk
Subject: "Privacy Rights Request"

We will respond to your request within 30 days, subject to verification of your identity.

9. Children's Privacy

Our Website is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

10. International Data Transfers

Your personal information is primarily processed and stored in Sri Lanka. However, some of our service providers may be located outside of Sri Lanka. When we transfer your information to other countries, we ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.

By using our Website, you consent to the transfer of your information to countries outside of Sri Lanka for the purposes described in this Privacy Policy.

11. Third-Party Links

Our Website may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to third-party websites. We encourage you to review the privacy policies of any third-party websites you visit.

We are not responsible for the privacy practices or content of third-party websites.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated Privacy Policy on our Website with a new "Last Updated" date
• Sending you an email notification (if you have an account with us)
• Displaying a prominent notice on our Website

Your continued use of our Website after such changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Compliance with Sri Lankan Laws

This Privacy Policy is designed to comply with applicable data protection and privacy laws in Sri Lanka, including:

• The Electronic Transactions Act No. 19 of 2006
• The Consumer Affairs Authority Act
• Other relevant legislation and regulations

We are committed to protecting your privacy rights and complying with all applicable legal requirements.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

London Books
Email: support@londonbooks.lk
Website: Contact Us Page

We will respond to your inquiry within a reasonable timeframe, typically within 5-7 business days.

15. Complaints

If you are not satisfied with our response to your privacy concerns, you may file a complaint with:

• Consumer Affairs Authority of Sri Lanka
  Website: www.caa.gov.lk
  Hotline: 1977

We are committed to working with you to resolve any privacy concerns you may have.