Last updated 9 September 2026

Privacy Policy

This is placeholder policy text pending legal review before launch. It is drafted to match the disclosures required under the Personal Data Protection Act No. 9 of 2022, the CAA gazette (Extraordinary Gazette No. 2332/15, 2023), and our payment provider PayHere's merchant requirements, and must be reviewed by the business owner before the site accepts real orders or payments.

At Ritual by Jaya, we respect your privacy. This policy explains what personal information we collect when you visit our website or place an order, how we use it, and the choices you have. By using our website, you agree to the practices described here.

Information we collect

When you browse or order from us, we may collect:

• Order and contact information you give us directly — your name, phone number, email address, and (for delivery orders) your delivery address. We never require you to create an account to place an order.
• Payment information needed to process your order. Card details are entered directly into PayHere's secure payment page and are never seen or stored by us — see "Payment processing" below.
• Browsing information collected automatically, such as your IP address, approximate country-level location, device and browser type, and the pages you visit, for analytics and security purposes.
• Account information, if you choose to create an optional account via phone verification — your phone number and, if you provide one, your name.

How we use your information

We use the information we collect to:

• Process, prepare, and fulfil your order, including coordinating pickup or delivery.
• Contact you about your order (e.g. to confirm details or resolve an issue).
• Maintain order records as required by tax and consumer-protection law.
• Understand site traffic and improve performance and reliability.
• Detect and prevent fraud, abuse, and unauthorised activity.

Payment processing

Online payments are processed by PayHere, a licensed payment service provider. When you pay by card, your card details go directly to PayHere's secure systems — we do not receive, see, or store your full card number. We receive only confirmation that your payment succeeded and the amount paid.

Sharing your information

We do not sell, trade, or rent your personal information to third parties. We only share it with:

• Trusted service providers who help us run our business — our payment processor (PayHere), our SMS provider (for order updates and account verification codes), and our hosting/infrastructure providers. These providers only receive what they need to do their job and are contractually required to keep it secure and confidential.
• Legal requirements — if required by law or a valid legal request.

Data retention

Raw IP addresses are kept for 90 days for fraud and abuse investigation, then automatically truncated to remove precise identifying detail. Order records are kept for as long as required by applicable tax and consumer-protection law.

Data security

We use industry-standard security measures — including encrypted connections (SSL/TLS) and access controls limiting who can see your data — to protect your information. No method of transmission over the internet is completely secure, so while we work hard to protect your data, we cannot guarantee absolute security.

Cookies

We use minimal cookies needed for the site to function (such as remembering items in your cart and keeping you signed in, if you have an account) and for basic, privacy-conscious traffic analytics. We do not use cookies for third-party advertising.

Your rights

You may ask us what personal data we hold about you and request correction or deletion, where the law allows, by contacting us using the details on our Contact page.

Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with a revised "last updated" date.