Privacy Policy

This policy explains what information Sweave (https://www.sweave.skin) collects when you browse the site or place an order in Sri Lanka.

Information we collect

When you place an order we collect your name, phone number, shipping address, optional email or WhatsApp number, order notes, and payment method (Cash on Delivery or Bank Transfer). We may also store a transfer reference you provide.

If you create an account we also store your email address, a hashed password (we never store your password in plain text), saved shipping details, and a session cookie so you stay signed in. Account sessions are used to show your order history and prefills at checkout.

How we use it

We use this information to fulfil orders, confirm payments, arrange delivery, and contact you about your order. We do not sell your personal information.

Email updates

Product and studio emails are sent only if you opt in at checkout or through the site form and then confirm using the link we email you. Order updates are separate and go to the email on that order. Each marketing email has an unsubscribe link that stops further product and studio mail; if you sign up again later, you will be asked to confirm again.

Sharing

We may share shipping details with delivery partners solely to complete your order. Payment processors are not used for COD or bank-transfer checkout — bank transfers are verified manually.

We use a small number of service providers to run the site: Vercel hosts the site and its database, and Resend delivers our emails. To protect checkout and sign-up from abuse we keep short-lived, hashed request counters, and we may use Cloudflare Turnstile to check that a form is being submitted by a person.

Retention & contact

Order records are kept as needed for fulfilment and accounting. For privacy questions, message us on Instagram @sweave.skin or WhatsApp via the contact link on the site.