Privacy policy

Privacy Policy

Last updated: September 3, 2026

Coco Cloud ("Coco Cloud", "we", "us", or "our") respects your privacy and is committed to protecting the personal information you provide when you visit or use our website, place an order, contact us, or otherwise interact with our services.

This Privacy Policy explains what personal information we collect, why we collect it, how we use it, when we share it, and the choices and rights available to you.

Our online store is powered by Shopify. Shopify provides the technology and infrastructure used to operate our online store and may process personal information on our behalf or for its own purposes in accordance with its applicable privacy policies.

By using our website or purchasing from Coco Cloud, you acknowledge that you have read this Privacy Policy.

1. Personal Information We Collect

Depending on how you interact with Coco Cloud, we may collect the following information:

Information you provide directly

When you place an order, contact us, create an account, subscribe to communications, or otherwise interact with us, we may collect:

  • Full name

  • Email address

  • Telephone/mobile number

  • Billing address

  • Delivery/shipping address

  • Order and purchase details

  • Information provided when contacting customer support

  • Information you voluntarily provide in reviews, messages, or other communications

Payment information

When you make a purchase, payment information may be collected and processed by our payment service providers.

Depending on the payment method you choose, this may include payment transaction details, payment confirmation, and information necessary to process the transaction.

Coco Cloud does not intentionally store your full credit or debit card number, CVV, or other complete card authentication information on our own systems when these details are processed by a third-party payment provider.

Payment providers such as PayHere, Koko, Mintpay, banks, card networks, or other providers may process payment information according to their own privacy policies and terms.

Information collected automatically

When you visit our website, certain information may be collected automatically, including:

  • IP address

  • Browser type

  • Device type

  • Operating system

  • Approximate location derived from technical information

  • Pages visited

  • Products viewed

  • Referring pages or links

  • Website usage and interaction information

  • Cookies and similar technologies

This information may be used for website operation, security, analytics, and improving your shopping experience.

2. How We Collect Personal Information

We may collect personal information:

  • Directly from you when you place an order or provide information to us.

  • Automatically when you browse or interact with our website.

  • Through Shopify and other technology providers that operate parts of our online store.

  • Through payment providers when you make a payment.

  • Through delivery and logistics providers when we arrange delivery.

  • Through social media or other third-party services when you interact with us through those services.

3. How We Use Your Information

We may use your personal information for legitimate business and operational purposes, including:

Processing orders

We use your information to:

  • Process and confirm orders.

  • Process payments.

  • Prepare and package products.

  • Arrange deliveries.

  • Provide order and delivery updates.

  • Process returns, exchanges, and refunds.

  • Provide customer support.

Communicating with you

We may use your contact information to respond to questions, provide customer support, and communicate with you about your orders or requests.

Improving our website and services

We may use information about how customers use our website to:

  • Improve website functionality.

  • Improve product selection and customer experience.

  • Understand website traffic and usage.

  • Identify technical problems.

  • Monitor and improve website security.

Security and fraud prevention

We may use information to detect and prevent fraudulent, unauthorized, illegal, or harmful activity and to protect our customers, business, website, and payment processes.

Marketing

If you choose to receive marketing communications from us, we may use your email address or other contact details to send information about products, promotions, launches, or other Coco Cloud updates.

You may unsubscribe from promotional emails at any time by using the unsubscribe option provided in the communication or by contacting us.

We will continue to send necessary transactional communications, such as order confirmations and important information about your purchases, even if you opt out of promotional communications.

Legal and regulatory purposes

We may use or disclose information where reasonably necessary to comply with applicable laws, regulations, legal proceedings, lawful requests from authorities, or to establish, exercise, or defend our legal rights.

4. How We Share Personal Information

We may share personal information with trusted third parties where necessary to operate Coco Cloud and provide our services.

These may include:

Shopify

Our online store is powered by Shopify. Shopify may process information relating to your visits, account, orders, and interactions with our store as necessary to provide its services and according to its applicable privacy policies.

Payment providers

We may share or allow the necessary information to be processed by payment providers that help us accept payments, such as PayHere, Koko, Mintpay, banks, card networks, or other payment services made available through our store.

The payment provider may collect and process payment information directly. You should review the applicable privacy policy of the payment provider used for your transaction.

Delivery and logistics providers

We may provide your name, phone number, delivery address, order information, and other necessary details to courier or delivery providers so that your order can be delivered.

Technology and service providers

We may use third-party providers for services such as:

  • Website technology

  • Hosting and infrastructure

  • Email

  • Analytics

  • Customer support

  • Security

  • Marketing

  • Data storage

These providers may process personal information only as necessary to provide their services or as otherwise permitted by applicable law.

Legal requirements

We may disclose information where required or permitted by law or where reasonably necessary to protect the rights, safety, property, or security of Coco Cloud, our customers, or others.

5. Cookies and Similar Technologies

Our website may use cookies and similar technologies to allow the website to function properly, remember preferences, understand website usage, improve performance, and support relevant features.

Some cookies may be placed by third-party service providers that help operate our website, provide analytics, process payments, or provide other services.

You can manage or restrict cookies through your browser settings. However, disabling certain cookies may affect the functionality of parts of our website.

6. Third-Party Websites and Services

Our website may contain links, integrations, or features provided by third parties, including payment providers, social media platforms, courier services, or other websites.

When you interact with a third-party service, that service may collect and process your information according to its own privacy policy.

Coco Cloud does not control the privacy practices of third-party websites or services and recommends reviewing their applicable privacy policies before providing personal information.

7. Data Security

We take reasonable steps to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of transmitting or storing information online can be guaranteed to be completely secure.

Where third-party platforms or service providers are used, including Shopify and payment providers, those providers are also responsible for maintaining appropriate security measures within their respective services.

8. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

  • Complete transactions.

  • Provide customer support.

  • Manage returns and refunds.

  • Maintain business and transaction records.

  • Meet legal, tax, accounting, or regulatory requirements.

  • Prevent fraud and resolve disputes.

  • Enforce our agreements and policies.

When personal information is no longer reasonably required, we will take appropriate steps to delete it, anonymize it, or otherwise handle it in accordance with applicable law.

9. Your Privacy Rights

Subject to applicable law, you may have rights in relation to your personal information, including rights to:

  • Request access to personal information we hold about you.

  • Request correction of inaccurate or incomplete information.

  • Request deletion of personal information where legally applicable.

  • Request information about how your personal information is processed.

  • Object to or request restriction of certain processing where applicable.

  • Withdraw consent where processing is based on consent.

  • Make a complaint about the way your personal information is handled.

These rights may be subject to legal conditions, exceptions, and limitations.

Sri Lanka's Personal Data Protection Act, No. 9 of 2022 provides rights and protections concerning the processing of personal data.

To exercise a privacy-related right or make a request, contact us using the details at the end of this policy.

We may need to verify your identity before processing certain requests in order to protect your information from unauthorized access.

10. Marketing Communications

We may send promotional communications only where permitted by applicable law.

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in the email or contacting us at:

hello@cococloud.lk

Unsubscribing from marketing communications will not prevent us from sending essential messages relating to orders, payments, deliveries, refunds, or other transactions.

11. Children's Privacy

Our website and services are intended primarily for general consumers and are not specifically directed at children.

We do not knowingly request or intentionally collect personal information from children where such collection is prohibited by applicable law.

If you believe that a child has provided personal information to us and you believe we should not have collected it, please contact us at hello@cococloud.lk.

12. International Data Processing

Because Coco Cloud uses third-party service providers, including Shopify, payment providers, email providers, analytics services, and other technology providers, your personal information may be processed or stored in countries outside Sri Lanka.

Where required by applicable law, we will take appropriate measures in relation to such transfers and processing.

Shopify and other third-party providers may have their own international data processing arrangements and privacy policies.

13. Shopify

Our website is hosted on Shopify.

Shopify processes certain personal information relating to visitors and customers as part of providing its platform and services.

For more information about how Shopify processes personal information, please review Shopify's applicable privacy policy:

Shopify Privacy Policy:
https://www.shopify.com/legal/privacy

Where applicable, you may also review Shopify's privacy tools and resources at:

https://privacy.shopify.com/

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, technology, services, or applicable legal and regulatory requirements.

When we make changes, we will update the "Last updated" date at the top of this Privacy Policy.

We encourage you to review this page periodically to stay informed about how we handle personal information.

15. Contact Us

If you have any questions, concerns, complaints, or requests regarding your personal information or this Privacy Policy, please contact us:

Coco Cloud
Email: hello@cococloud.lk
Phone: +94 71 530 5313
Address: 386C, Wijethunga Mawatha, Pilimatalawa, 20450, Sri Lanka

For privacy-related requests, please use hello@cococloud.lk and include sufficient information for us to understand and respond to your request.