Privacy Policy

1. Information we collect

• Account information: your name, email address, phone number, delivery addresses and password.
• Order information: products purchased, order value, payment method, and delivery and return history.
• Payment information: processed securely by our payment partners; andhum does not store full card numbers.
• Device and usage information: IP address, browser type, pages viewed and how you interact with the Marketplace, collected through cookies and similar technologies.
• Communications: messages you send us, including support requests and reviews.

2. How we use your information

• to create and manage your account, and to process and deliver your orders;
• to communicate with you about orders, returns, offers and updates to our policies;
• to personalise your experience and show you Products and brands you may be interested in;
• to detect, prevent and investigate fraud or misuse of the Marketplace; and
• to comply with our legal obligations.

3. Who we share information with

We share the minimum information necessary with the following, so that your order can be fulfilled:

• the Vendor you are buying from, so they can prepare and dispatch your order;
• our courier and logistics partners, to deliver your order;
• our payment processing partners, to collect and process payment;
• analytics and service providers who help us operate and improve the Marketplace; and
• regulators or authorities, where required by law.

We do not sell your personal data to third parties.

4. Cookies

We use cookies and similar technologies to keep you logged in, remember your preferences, and understand how the Marketplace is used. You can control cookies through your browser settings, though disabling them may affect how the Marketplace functions.

5. Data retention

We retain personal data for as long as your account is active, and for a reasonable period afterwards to meet legal, accounting and dispute resolution requirements, after which it is deleted or anonymised.

6. Data security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and may object to or restrict certain uses of it. To exercise these rights, contact us using the details below.

8. Children’s privacy

The Marketplace is not directed at children under 18. We do not knowingly collect personal data from children, and will delete any such data if we become aware of it.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified through the Marketplace or by email, and the "Last updated" date above will reflect the most recent revision.

10. Contact us

Questions about this Privacy Policy, or requests relating to your personal data, can be sent to corp@andhum.com, or by post to 33, Level 12, Parkland Building, Park Street, Colombo 00200.