Privacy Policy

1. Introduction

iCentre (“we”, “our”, “us”) operates icentre.lk, a Sri Lanka-based online store selling genuine electronics, Apple products, and accessories. This Privacy Policy explains what personal information we collect when you use our website, how we use it, and the choices you have. By using icentre.lk you agree to the practices described here.

2. Information We Collect

Information you provide

• Order & checkout: first name, last name, email address, phone number(s), delivery address (street, city, postal code).
• Contact form: name, email address, phone number, subject, and message. We also log your IP address and browser user-agent on the server side for spam prevention.
• Newsletter signup: email address and, optionally, the page you signed up from.

Information collected automatically

• Analytics data: pages visited, time on site, referring URL, device type, browser, and approximate location (city level), collected via Google Analytics.
• Security & performance data:IP address and request metadata processed by Cloudflare to protect against attacks and improve load times.
• Cookie consent preference:stored in your browser's localStorage (key: icentre-cookie-consent) so we remember your choice without a server round-trip.

3. How We Use Your Information

• Process and fulfil your orders, including arranging island-wide delivery.
• Communicate with you about your order status and respond to enquiries.
• Send our newsletter, but only if you have subscribed. You can unsubscribe at any time by contacting us at [email protected].
• Prevent fraud and abuse, including rate-limiting contact form submissions.
• Understand how visitors use our site and improve our content and product listings.
• Comply with legal obligations under Sri Lanka law, including tax and accounting requirements.

4. Cookies & Tracking

We use cookies and similar technologies to make our site work and to understand how it is used. The table below lists the cookies set by icentre.lk and our service providers.

You can opt out of Google Analytics tracking at any time using the Google Analytics Opt-out Browser Add-on. You can also disable cookies entirely in your browser settings, though some parts of our site may not work as expected.

5. Third-Party Services

We work with the following third-party services that may process your data on our behalf:

• Google Analytics provides web analytics. Data is processed under Google's privacy policy at policies.google.com/privacy.
• WebXPay handles card payments. Your card details are entered directly on WebXPay's secure servers and are never stored by iCentre.
• Cloudflare serves as our CDN and DDoS protection layer, processing request metadata (IP address, HTTP headers) to secure and accelerate our site.
• Google Maps powers the embedded map on our Contact Us page. Google may set cookies when you interact with the map.

6. Data Sharing

We do not sell, rent, or trade your personal information. We share data only with the third-party processors listed above, and only to the extent necessary to provide our services. We may also disclose information where required by Sri Lanka law or a lawful order from a competent authority.

7. Data Retention

• Order records: retained for 5 years to meet Sri Lanka tax and accounting obligations.
• Contact form submissions:retained for up to 12 months, then deleted unless ongoing correspondence requires longer retention.
• Newsletter subscriptions:retained until you request removal.
• Analytics data: retained per Google Analytics default settings (up to 14 months for user-level data).

8. Your Rights

You have the right to:

• Request a copy of the personal data we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal data, subject to legal retention requirements.
• Withdraw consent for newsletter communications at any time.
• Object to processing of your data for analytics purposes (see Section 4).

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Security

icentre.lk is served exclusively over HTTPS. We use Cloudflare for DDoS mitigation and server-side rate limiting on form submissions. Payment card data is handled entirely by WebXPay and is never transmitted to or stored on our servers. No method of transmission over the internet is completely secure; we cannot guarantee absolute security but we take reasonable technical measures to protect your information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of icentre.lk after changes are posted constitutes your acceptance of the revised policy.

11. Governing Law

This Privacy Policy is governed by the laws of Sri Lanka. Any disputes relating to privacy shall be subject to the exclusive jurisdiction of the courts of Sri Lanka.

12. Contact

Questions or requests regarding this policy? Reach us at: [email protected]
iCentre, 383 Galle Road, Colombo 04, Sri Lanka.