Privacy Policy
Last updated: June 2025
1. Information We Collect
When you register, place an order, or use our services, we collect personal information including your name, email address, phone number, and bank details (for withdrawal processing only). We also collect usage data such as pages visited and purchase history to improve our platform.
2. How We Use Your Information
We use your information to process orders and payments, operate the referral and commission programme, send order confirmations and support communications, improve our products and services, and comply with legal obligations. We never sell your personal data to third parties.
3. Commission & Financial Data
Commission earnings, wallet balances, and withdrawal records are stored securely and are accessible only to you and authorised administrators. Bank details provided for withdrawal purposes are encrypted and used solely for processing your payment requests.
4. Cookies
We use essential cookies to keep you logged in and to maintain your session security. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but this may affect platform functionality.
5. Data Security
All data is transmitted over HTTPS (TLS encryption). Passwords are hashed using industry-standard bcrypt. We conduct regular security reviews and restrict data access to authorised personnel only. In the event of a data breach, we will notify affected users within 72 hours.
6. Data Retention
We retain your account data for as long as your account is active. Financial records (commissions, withdrawals) are retained for 7 years to comply with Sri Lankan financial regulations. You may request account deletion at any time; financial records required by law will be anonymised.
7. Your Rights
You have the right to access, correct, or delete your personal data. You may request a copy of all data we hold about you. To exercise any of these rights, contact us at privacy@greenleaf.lk.
8. Third-Party Services
We may use third-party services for payment processing and analytics. These providers are contractually obligated to handle your data securely and may not use it for their own purposes.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users by email of any material changes. Continued use of the platform after notification constitutes acceptance of the updated policy.
10. Contact
For privacy-related questions or requests, please contact us at privacy@greenleaf.lk or by post at Green Leaf Herbal Naturals (Pvt) Ltd, No. 45, Herbal Garden Road, Colombo 07, Sri Lanka.