Privacy Policy

This website is operated by VEXOR Clothing (“VEXOR”, “we”, “us”), a clothing label based in Colombo, Sri Lanka. We are the controller of the personal data described in this policy.

We respect your privacy and handle personal data in accordance with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka (“PDPA”). If you have any questions, contact us at [email protected].

We only collect what we need to run the store and look after you:

• Order details — your name, email, phone number, delivery address, the items you buy and any notes you add at checkout.
• Account details — if you register: your name, email, phone (optional), saved addresses, wishlist and order history. Passwords are stored only as a secure one-way hash.
• Google sign-in details — if you choose “Continue with Google”: your name, email address and profile photo, as shared by Google (see Sign in with Google).
• Payment information — card and wallet payments are processed by our payment partners. We receive a payment confirmation and reference, but never your full card number or security code.
• Messages — what you send us through the contact form, email or WhatsApp, and reviews you choose to publish.
• Newsletter preferences — whether you receive VEXOR news and offers, and when you unsubscribed, so we never email you again by mistake.
• Technical data — your IP address, browser type and pages requested, used to keep the site secure (for example, to prevent spam and abuse) and to fix problems.

• To process, deliver and support your orders, including returns, exchanges and refunds.
• To manage your account and keep it secure.
• To reply to your questions and requests.
• To send order-related messages, such as confirmations and dispatch updates. If you enter your email at checkout but don’t complete your purchase, we may send a reminder about the items left in your bag.
• To send VEXOR news, offers and early access to customers, account holders and newsletter subscribers — see Newsletter & marketing emails. Every one of these emails has a one-click unsubscribe link.
• To prevent fraud, protect our customers and comply with our legal, tax and accounting obligations.
• To understand what works on our site and improve our products and service.

We process your data because it is necessary to perform our contract with you, to meet legal obligations, for our legitimate interests in running a safe and effective store (including telling our customers about new collections and offers), or with your consent — which you can withdraw at any time.

We ask for a Sri Lankan phone number with every order because our courier calls before delivering — to confirm the address, arrange a convenient time and, for Cash on Delivery, make sure someone is home to receive the parcel.

We use your number only to coordinate your deliveries, returns and exchanges, and to contact you about a problem with your order. We share it only with the courier handling your parcel. We don’t use it for marketing calls or SMS, and we never sell it. If you have an account, we save the number from your first order to your profile so you don’t have to type it again; you can change or remove it under Account › Profile.

When you order from us, create an account (including with Google) or sign up for our newsletter, we’ll send you occasional VEXOR news — new collections, offers and early access. We tell you this wherever we collect your email, and there is no box to tick because you can stop it at any moment:

• Every marketing email has a one-click unsubscribe link at the bottom, and supports your email app’s built-in “Unsubscribe” button. No password or sign-in needed.
• Signed-in customers can also switch the newsletter off or back on from their account.
• Once you unsubscribe, we remember that choice: placing another order or creating an account won’t sign you up again. Only you, signed in to your own account, can opt back in.
• Unsubscribing never affects order emails. You’ll still receive confirmations, payment and dispatch updates and other messages about orders you place.

We send these emails ourselves through our email provider. We never sell or rent our mailing list or share it with other brands.

You can create an account or sign in with your Google account instead of a password. When you choose “Continue with Google”, Google asks for your permission and then shares with us your name, email address and profile photo, plus a Google account ID that lets us recognise you next time.

• We never see or receive your Google password. You type it only on Google’s own sign-in page.
• We don’t get access to your Gmail, contacts, Drive or any other Google data, and we don’t post anything on your behalf.
• We use these details only to create and secure your VEXOR account, show your name and photo in your account, and send emails described in this policy.

Google’s handling of your data is covered by the Google Privacy Policy. You can remove VEXOR’s access at any time from your Google Account’s security settings; your VEXOR account and order history stay with us until you ask us to close it.

We never sell your personal data. We share it only with trusted partners who help us run the store, and only as much as they need:

• Courier and delivery partners, to deliver your parcel and collect returns — including your phone number, so they can call ahead.
• Payment providers (such as PayHere), to process card and wallet payments securely.
• Hosting, security and email service providers that keep the website and our communications running.
• Professional advisers, such as accountants and lawyers, where required.
• Government or law-enforcement authorities when the law requires us to.

Some of these providers may store data outside Sri Lanka. Where that happens, we take steps to ensure your information remains protected to the standard required by the PDPA.

We use a small number of essential cookies and browser storage to make the store work:

• Session cookie — keeps you signed in to your account, whether you use a password or Google.
• Bag cookie — remembers the items in your bag between visits.
• Short-lived security cookies — one protects a “Continue with Google” sign-in while it’s in progress (up to 10 minutes); another lets you finish or cancel an unpaid card payment (up to 24 hours).
• Your browser’s storage — recent searches, recently viewed pieces, a guest wishlist and dismissed announcements are kept only in your own browser. Light or dark appearance simply follows your device setting and isn’t stored.

We do not use advertising or cross-site tracking cookies. If we introduce analytics in future, we will update this policy first.

• Order and payment records — for as long as Sri Lankan tax and accounting laws require.
• Account information — until you ask us to close your account.
• Contact messages — up to 24 months after your enquiry is resolved.
• Newsletter subscriptions — until you unsubscribe. After that we keep only your email address and the date you unsubscribed, so we can honour your choice.

Our website is served over encrypted HTTPS, passwords are hashed, payment data is handled by PCI-compliant providers and access to customer information is restricted to staff who need it to serve you. No method of transmission or storage is completely secure, but we work hard to protect your data and will notify you and the authorities of any breach as required by law.

Under the PDPA you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data, where we no longer need to keep it;
• withdraw your consent or object to marketing — every marketing email has a one-click unsubscribe link;
• object to or ask us to restrict certain processing.

To make a request, email [email protected]. We may need to verify your identity before responding. If you’re unhappy with how we handle your data, you can also contact the Data Protection Authority of Sri Lanka.

Our store is intended for adults. If you are under 18, please shop with the involvement of a parent or guardian. We do not knowingly collect data from children.

We may update this policy as our services or the law change. The “last updated” date at the top shows the latest version. Questions? Email [email protected], call +94 77 000 0000 or use our contact form.