Privacy policy

Privacy Policy – KiXX

Effective Date: June 24, 2025

KiXX (“we,” “our,” or “us”) operates this online store and website, hosted by Shopify, to provide you (“you” or “user”) with a curated shopping experience. This Privacy Policy outlines how we collect, use, disclose, and protect your personal information, and is aligned with Sri Lanka’s Personal Data Protection Act No. 9 of 2022 (PDPA).

By accessing our services, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are (Data Controller)

KiXX, located at 247 Galle Road, Colombo, 04000, Sri Lanka, is the Data Controller of your personal information under Sri Lankan law. You can contact us at wearkixx@gmail.com for questions about this Policy or your data rights.

2. Personal Information We Collect

We may collect the following types of personal data:

Contact Information: Name, email, phone number, shipping & billing address
Payment Information: Card or bank details for transactions
Account Info: Username, password, preferences
Transaction History: Products viewed, purchased, returned
Device Data: IP address, browser, device type
Usage Data: Website activity, clicks, interactions
Communication Records: Messages, inquiries, feedback

We collect this data:

Directly from you
Automatically through cookies/technologies
From Shopify and third-party service providers

3. Why We Process Your Data (Lawful Basis)

Under Sri Lanka’s PDPA, we process personal information based on one or more of the following lawful grounds:

To fulfill a contract (e.g. to deliver your order)
With your consent (e.g. for marketing emails)
To comply with legal obligations
For legitimate interests (e.g. fraud prevention, website improvement)

4. How We Use Your Personal Data

We use your data to:

Fulfill and manage orders
Operate and improve our website
Offer personalized shopping and marketing
Detect and prevent fraud or security threats
Respond to customer service inquiries
Comply with legal obligations

5. Cookies and Tracking

We use cookies and similar technologies to:

Analyze traffic and usage
Remember your preferences
Show personalized ads
You may manage cookie settings in your browser or decline certain tracking features via third-party opt-out tools.

6. Sharing Your Information

We share your data only when necessary, such as:

With Shopify, our eCommerce platform
With payment processors, shipping couriers, and customer support services
With marketing partners, only with your consent (when applicable)
When required by Sri Lankan law or legal process
In case of business transfers, like mergers or acquisitions

7. Cross-Border Data Transfers

Your data may be stored or processed outside Sri Lanka (e.g., in Shopify servers). We ensure that any such transfers are protected by appropriate safeguards, as required under the PDPA and international standards.

8. Your Rights under Sri Lankan Law

Depending on your interaction with us, you have the right to:

Request access to your personal information
Request correction of inaccurate information
Request deletion of your data
Withdraw previously given consent
Object to direct marketing
File a complaint to the Data Protection Authority of Sri Lanka once established

To exercise these rights, contact us at wearkixx@gmail.com. We may need to verify your identity before processing your request.

9. Children's Privacy

Our Services are not intended for children under 18. We do not knowingly collect data from minors. If you believe a child has provided us with their data, contact us and we will delete it promptly.

10. Security and Retention

We implement reasonable security measures to protect your data. However, no method is 100% secure.

We retain your data only as long as needed to:

Fulfill orders and support your account
Comply with legal obligations
Resolve disputes or enforce policies

11. Third-Party Links

Our website may include links to other platforms. We are not responsible for how those platforms handle your data. Please check their privacy policies before sharing information with them.

12. Complaints & Appeals

If you are unhappy with how we handle your data, please email us at wearkixx@gmail.com. You also have the right to appeal our response, and eventually lodge a complaint with the Sri Lanka Data Protection Authority (once operational).