Privacy Policy
CHILL CO. DATA PROTECTION & PAYMENT PRIVACY STANDARDS
1Introduction & Data Controller
Scope and Organizational Commitment
Welcome to Chill Co. Apparel Enterprises ("Chill Co.," "we," "us," or "our"). We respect your privacy and are committed to protecting your personal data in strict compliance with applicable laws, including the Sri Lanka Personal Data Protection Act No. 9 of 2022 (PDPA) and international data privacy standards (GDPR).
This Privacy Policy governs your use of our website (chillco.store), online shop, checkout services, and custom apparel printing studio. By accessing our services or purchasing products from Chill Co., you acknowledge that you have read and agreed to the practices described herein.
Registered Operating Address: Colombo, Western Province, Sri Lanka
Official Contact Email: contact@chillco.store
2Information We Collect
Personal Data and Technical Identifiers
We collect personal information necessary to deliver products, fulfill custom print orders, process transactions securely, and manage customer accounts.
1. Directly Provided Information:
- Identity & Contact Data: Customer full name, email address, telephone contact number, shipping destination, and billing address.
- Order & Transaction History: Garment purchases, size selections, invoice details, and delivery instructions.
- Custom Print Studio Uploads: Artwork files, graphics, logos, and custom print design instructions.
- Account Credentials: Passwords and profile details authenticated securely.
2. Automatically Collected Technical Data:
- Device & Session Sigils: IP address, browser type and version, time zone setting, operating system, and hardware model.
- Site Telemetry: Pages visited, checkout funnel steps, clickstream data, and session durations.
3Payment Data Handling & Card Security
PCI-DSS Compliance and Card Protection
Chill Co. prioritizes customer transaction security and enforces strict financial data controls:
- Direct Gateway Redirection / iFrame: Credit and debit card details entered during checkout are submitted directly to PCI-DSS Level 1 certified Payment Gateway acquirers over 256-bit SSL encrypted connections.
- Zero Storage Guarantee: Full payment card numbers, CVVs, expiration dates, and card PINs are NEVER stored, logged, or retained on Chill Co. servers.
- Tokenized Processing: Gateway partners return only an encrypted transaction authorization token used to record payment status for your order invoice.
4Data Sharing & Third-Party Service Providers
Disclosure Protocols & Non-Sale Guarantee
WE DO NOT SELL, RENT, OR TRADE YOUR PERSONAL DATA TO THIRD PARTIES. Information is shared solely with vetted service providers necessary to operate our business:
- Licensed Payment Gateways: Acquirers and banking institutions processing online card payments.
- Database & Cloud Hosts (Supabase Inc.): Secure cloud database storage with row-level security policy controls.
- Logistics & Courier Guilds: Third-party delivery providers receiving only your name, phone number, and delivery address.
- Legal Requirements: Disclosures mandated by Sri Lankan courts or law enforcement statutory authorities.
5Custom Print Artwork Confidentiality
Protection of User-Uploaded Artwork
Graphics and logos uploaded to our Custom Print Studio remain your intellectual property. Uploaded artwork is used solely for printing and fulfilling your specific order and will never be resold or publicly displayed without your written consent.
6Data Retention & Customer Rights
Retention SLA and Data Rights under PDPA
We retain order and transaction records for a minimum of 6 years in accordance with Sri Lankan tax and commercial accounting laws. Customers possess the right to access, correct, or request deletion of their personal data by contacting contact@chillco.store.
8Contact Information
Reaching Our Support & Legal Team
For privacy queries, data requests, or compliance inquiries, please contact us at:
Registered Address: Colombo, Western Province, Sri Lanka
Contact Email: contact@chillco.store
Website: https://chillco.store
CHILL CO. COMPLIANCE & LEGAL AFFAIRS
Colombo, Western Province, Democratic Socialist Republic of Sri Lanka