Privacy Policy

Last Updated: May 8, 2026

At Culta, your privacy is important to us. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you visit or use our website, place an order, create an account, contact us, or interact with our services.

This Privacy Policy applies to the website Culta.lk and all services provided through the website.

Throughout this Privacy Policy, the terms “Culta,” “we,” “us,” and “our” refer to Culta Private Limited, operated under Canyon Group. The terms “you,” “your,” and “customer” refer to any person who visits our website, creates an account, places an order, or uses our services.

By using our website or providing your information to us, you agree to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our website or provide personal information to us.

1. Who We Are

Culta is an ecommerce website offering beauty, wellness, personal care, fashion, and related products. Culta.lk is primarily created for customers in Sri Lanka, although users may be able to access the website from outside Sri Lanka.

Culta Private Limited operates under Canyon Group and provides customers with an online shopping experience that includes product browsing, customer accounts, online orders, delivery support, customer service, and promotional communications.

2. Information We Collect

We may collect personal information from you when you visit our website, create an account, place an order, make a payment, contact our support team, subscribe to updates, or interact with our website features.

The information we collect may include the following:

Information You Provide to Us

This may include:

• Full name
• Email address
• Phone number
• Billing address
• Shipping address
• Account login details
• Order details
• Payment method selection
• Bank transfer confirmation details, where applicable
• Customer support messages
• Feedback, reviews, or other information you submit through the website

You may choose not to provide certain information. However, some information is required to create an account, place an order, process payments, deliver products, or provide customer support.

Order and Transaction Information

When you place an order on Culta, we collect and process information related to your purchase, including product details, order value, delivery details, payment method, order status, and refund or return information where applicable.

For card payments and payment gateway transactions, payment processing may be handled by third-party payment service providers. Culta does not intentionally store your full card number, CVV, or sensitive banking credentials on our website.

Information Collected Automatically

When you visit our website, certain information may be collected automatically through cookies, analytics tools, pixels, logs, and similar technologies.

This may include:

• IP address
• Browser type
• Device type
• Operating system
• Pages visited
• Time spent on pages
• Website interactions
• Referral sources
• Approximate location based on technical data
• Shopping and browsing behavior on our website

We use this information to improve website performance, understand customer behavior, personalize your experience, improve marketing, prevent fraud, and maintain website security.

3. How We Use Your Information

We use your personal information for the following purposes:

To Process and Deliver Orders

We use your information to:

• Confirm your order
• Process payments
• Prepare and dispatch products
• Deliver your order to the address provided
• Contact you regarding your order
• Manage returns, cancellations, exchanges, or refunds
• Provide order tracking and delivery updates

To Manage Your Account

If you create an account on Culta, we use your information to:

• Register and maintain your account
• Allow you to view order history
• Save account preferences
• Make future checkout easier
• Help you manage your personal details
• Provide customer support related to your account

To Provide Customer Support

We may use your information to respond to questions, complaints, refund requests, delivery issues, product concerns, and other customer service matters.

You may contact us through our Contact Us page or by emailing support@culta.lk.

To Improve Our Website and Services

We use website usage information to:

• Improve website speed, design, and functionality
• Understand how customers use our website
• Fix technical errors
• Improve product selection and availability
• Improve customer experience
• Monitor website security and performance

To Send Service Communications

We may contact you by email or SMS regarding:

• Order confirmations
• Payment updates
• Delivery updates
• Account notifications
• Refund or return updates
• Customer support responses
• Important website or policy updates

These communications are necessary for us to provide our services.

To Send Promotional Communications

With your consent or where permitted by applicable law, we may send promotional messages by email or SMS about:

• New arrivals
• Offers and discounts
• Sale events
• Product recommendations
• Brand updates
• Special campaigns

You may opt out of promotional communications where an unsubscribe or opt-out option is available, or by contacting us at support@culta.lk.

To Run Advertising and Retargeting

We may use tools such as Google Analytics and Meta Pixel to understand website activity and show relevant advertisements to users who have interacted with Culta.

This may help us show ads related to products you viewed, categories you browsed, or promotions that may interest you.

4. Cookies and Tracking Technologies

Culta uses cookies and similar technologies to operate the website, improve your browsing experience, analyze website traffic, and support advertising activities.

Cookies are small files stored on your device when you visit a website. They help websites remember certain information about your visit.

We may use the following types of cookies:

Strictly Necessary Cookies

These cookies are required for the website to function properly. They help with features such as account login, cart management, checkout, security, and order processing.

Without these cookies, some parts of the website may not work correctly.

Functional Cookies

These cookies help remember your preferences and improve your shopping experience.

For example, they may help remember your account details, selected preferences, or items added to your cart.

Analytics Cookies

These cookies help us understand how visitors use our website. We use this information to improve website performance, layout, content, and customer experience.

For example, we may use Google Analytics to measure website visits, page views, traffic sources, and user behavior.

Advertising Cookies and Pixels

We may use advertising technologies such as Meta Pixel to measure ad performance and show relevant ads on platforms such as Facebook and Instagram.

These tools may collect information about your website activity, such as pages viewed, products viewed, or actions taken on the website.

5. Third-Party Services We Use

To operate Culta and provide our services, we may use trusted third-party tools and service providers.

These may include:

• WooCommerce for ecommerce website functionality
• Payment gateways for processing online payments
• Courier and delivery partners for delivering orders
• Google Analytics for website analytics
• Meta Pixel for advertising and retargeting
• Email and SMS service providers for customer and promotional communications
• Hosting, security, and technical service providers for website operations

These third parties may process personal information only as needed to provide their services to us, support our business operations, comply with legal requirements, or protect against fraud and security risks.

6. Payment Information

Culta accepts payment methods such as card payments, Cash on Delivery, bank transfer, and payment gateway payments.

When you make an online payment, your payment may be processed by a third-party payment service provider. We may receive payment confirmation details such as payment status, transaction reference, payment method, and order amount.

We do not intentionally collect or store sensitive payment authentication details such as your full card number, CVV, PIN, OTP, or online banking password.

Please do not share sensitive payment details with anyone claiming to represent Culta.

7. Sharing Your Personal Information

We do not sell your personal information.

However, we may share your personal information with trusted third parties where necessary for business, operational, legal, security, or customer service purposes.

This may include sharing information with:

• Delivery and courier partners
• Payment processors and payment gateways
• Website hosting and technical service providers
• Analytics and advertising platforms
• Email and SMS communication providers
• Customer support tools or service providers
• Legal, regulatory, or government authorities where required by law
• Professional advisors, auditors, or consultants where necessary

We only share information that is reasonably required for the relevant purpose.

8. International Access and Data Processing

Culta.lk is primarily operated for customers in Sri Lanka. However, our website may be accessed from outside Sri Lanka.

Some third-party tools and service providers we use may process or store data outside Sri Lanka. Where this happens, we take reasonable steps to ensure that your information is handled securely and in line with applicable privacy and data protection requirements.

9. Data Security

We take reasonable technical, administrative, and organizational measures to protect your personal information from unauthorized access, misuse, alteration, loss, disclosure, or destruction.

These measures may include secure website technologies, access controls, limited access to personal data, security monitoring, and working with trusted service providers.

However, no online platform, website, payment system, or method of electronic transmission can be guaranteed to be completely secure. You are responsible for keeping your account login details confidential and for notifying us if you suspect unauthorized access to your account.

10. Data Retention

We retain your personal information only for as long as necessary for the purposes described in this Privacy Policy.

This may include retaining information to:

• Process and complete orders
• Provide customer support
• Maintain account records
• Manage returns, refunds, and disputes
• Comply with legal, tax, accounting, and regulatory requirements
• Prevent fraud and protect website security
• Improve our services and business operations

When personal information is no longer required, we may delete, anonymize, or securely store it according to applicable requirements and business needs.

11. Your Rights and Choices

Depending on applicable privacy laws and regulations, you may have certain rights regarding your personal information.

These may include the right to:

• Request access to personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of certain personal information
• Withdraw consent for certain types of processing
• Opt out of promotional communications
• Ask questions about how your information is used

To make a privacy-related request, you may contact us at support@culta.lk or through our Contact Us page: https://mediumseagreen-crow-182766.hostingersite.com/contact/

We may need to verify your identity before responding to certain requests.

12. Marketing Preferences

If you receive promotional emails or SMS messages from Culta, you may unsubscribe or opt out where such options are available.

Please note that even if you opt out of promotional messages, we may still send you important service-related communications, such as order confirmations, payment updates, delivery updates, account notices, and policy updates.

13. Links to Other Websites

Our website may contain links to third-party websites, platforms, payment pages, social media pages, or external services.

This Privacy Policy does not apply to third-party websites or services. We are not responsible for the privacy practices, content, or security of external websites. We encourage you to read the privacy policies of any third-party websites you visit.

14. Customer Safety and Fraud Awareness

Culta will never ask you to share sensitive payment information such as your OTP, CVV, PIN, full card number, online banking password, or bank login details through phone calls, SMS, email, or social media messages.

Please be cautious of fraudsters, fake offers, phishing messages, and unofficial accounts pretending to represent Culta.

If you receive suspicious communication claiming to be from Culta, please contact us directly at support@culta.lk or through our Contact Us page.

Culta will not be responsible for losses caused by customers sharing confidential payment or account information with unauthorized third parties.

15. Children’s Privacy

Culta does not knowingly collect personal information from children without appropriate permission from a parent or guardian.

If you believe that a child has provided personal information to us without proper permission, please contact us at support@culta.lk, and we will take reasonable steps to review and address the matter.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website features, legal requirements, technology, or data handling practices.

Any updates will be posted on this page with the updated date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

17. Contact Us

If you have any questions, concerns, requests, or complaints regarding this Privacy Policy or how your personal information is handled, you may contact us using the details below:

Email: support@culta.lk
Contact Page: Contact Us