Privacy policy_

Template — have it reviewed. This page was written from what this website actually collects and does. Before launch, replace everything in [square brackets] with your own details, have the page reviewed by someone who knows Sri Lanka's data-protection law, and then delete this note.

Who we are

This website is run by [BUSINESS NAME], [POSTAL ADDRESS]. For anything to do with your personal data — a question, a copy of what we hold, a correction or deletion — email [CONTACT EMAIL] or write to us through our contact page.

What we collect and why

Orders

When you place an order we store your email address, first and last name and phone number; for delivery, your street address, city, district, postal code and country (not needed for showroom pickup); any delivery note you add; the products, quantities and prices; any discount code; how you chose to pay (cash on delivery or bank transfer); and the currency you were viewing prices in, with its exchange rate, for our records — you are always charged in Sri Lankan rupees. If you pay by bank transfer, we may note your transfer reference on the order.

We use this to prepare, deliver or hand over your order, to contact you about it, and to email you the order confirmation and delivery updates. A copy of each new order, with your contact and delivery details, is also emailed to our own inbox. We never ask for card details on this site.

If you are signed in, the order is linked to your account. If you order as a guest and later create an account and confirm the same email address, those orders are linked to the account.

Checkout details saved before you order

Once you have typed your email address and first name at checkout, what you have entered so far — email, name, phone number, address and basket — is saved automatically as you type, before you place the order. If you don't complete the order, we may email you up to three reminders about that basket in the hours and days that follow. Every reminder has a link to restore the basket (the products only, never your address) and a link to stop the reminders. Stopping them puts your email address on our do-not-remind list, which we keep so that we don't remind you again. When you place the order, the saved checkout is marked as completed.

Newsletter

If you sign up — with the form on our home page, or by asking the product finder to email you your results — we store your email address, where you signed up and when. We use it to send you our newsletter. You can unsubscribe at any time with the link in our newsletter emails or by contacting us; we record when you unsubscribed and keep your address on a do-not-email list so that we don't email you again, unless you sign up again yourself.

Messages you send us

The contact form stores your name, email address, subject and message and, when we answer by email, our reply and who sent it. Each message is also emailed to our own inbox, so that we see it straight away. We use it to answer you.

The product finder

When the product finder shows you results, we store your answers (what you are shopping for, what you will use it for, your budget, how portable it needs to be and anything to avoid), the products it showed you (up to three), a summary of the preferences your answers imply (scores out of 10 for performance, portability, battery life, value and weight), a random identifier for your visit (kept in your browser tab) and, if you are signed in, your account. If you ask us to email you the results, we also store your email address, email you the results and add you to our newsletter (you can unsubscribe at any time). We use the answers to show you results and to understand what shoppers are looking for; if you are signed in, the shopping assistant can use your preferences to tailor its suggestions.

The shopping assistant

When you chat with the shopping assistant, we store your messages and its replies with email addresses, phone numbers, order numbers and other long numbers replaced by placeholders before they are saved. With them we store which products were shown to you or added to your basket, the search terms it used, the page you were on, timings and usage figures, whether you attached a photo and a short description of what the photo showed, and a one-way code derived from your network (IP) address — not the address itself. If you are signed in, the chat is linked to your account. The photo itself is not stored.

To answer you, the recent conversation and any photo you attach are sent to our AI provider, OpenAI, together with the page you are on, the products you have viewed in this browser tab and your basket total. If you are signed in, your first name, the products from your recent orders and your product-finder preferences are sent too, so the assistant can tailor its answers. We never add your email address, phone number, delivery address or order numbers — but anything you type into the chat is sent as written, so please don't type personal details there. To check an order, use the order look-up form in the assistant: the order number and email address you type into it are never sent to the AI. If the order is found, the list of products in it is added to the conversation, so the assistant can help with them.

Order look-ups in the assistant

When you look up an order in the assistant, we log the order number, the part of your email address after the @ (for example gmail.com — never the full address), whether it matched, the chat session and the one-way network code, so that we can spot abuse.

Browsing statistics — only if you allow them

If you allow analytics in the cookie banner, we record the pages you view (the address without anything after a "?"), the products, categories and collections you look at, what you search for and how many results it found, adding and removing basket items, starting checkout (with the basket value), saving items, finishing the product finder, opening the shopping assistant and signing up to the newsletter. Each record carries a random identifier that changes after 30 minutes of inactivity and, if you are signed in, your account. If you don't allow analytics, none of this is recorded. You can change your choice at any time with the cookie settings link at the bottom of every page.

Your account

If you create an account we store your email address, first and last name and, if you add them, your phone number and default delivery address. Your password is handled by Supabase, our sign-in provider, and is never stored in readable form. We keep a running total of your orders and what you have spent, and our staff can add a note to your customer record. You can update your details in your account settings.

Saved items

If you are signed in, the products you save are stored with your account. If you are not, they are kept only in your browser; when you sign in, they are added to your account.

Reviews

If you review a product we store your rating, title, review and the display name you choose, linked to your account, and whether you bought the product (from your delivered orders). Reviews are published after we check them; we may reply publicly and show a review on our home page. If your account is deleted, your published reviews stay under your display name unless you ask us to remove them.

Protection against abuse

To stop automated abuse of our forms, we keep short-lived records of one-way codes derived from your network (IP) address and, for some forms, your email address — not the addresses themselves. They are deleted after a day.

How long we keep it

Who processes your data for us

• Supabase — hosts our database, sign-in and uploaded images, and sends account emails (confirmation and password reset). The information described above is stored in its database.
• Resend — sends our emails: order confirmations and updates, basket reminders, replies to your messages and product-finder results, and the copies of new orders and messages sent to our own inbox.
• OpenAI — writes the shopping assistant's replies from what is sent to it, as described above.
• A currency exchange-rate service — our server fetches exchange rates for the currency switcher; no personal data is sent.
• [HOSTING PROVIDER] — runs this website, so it handles your requests, including your network (IP) address, when you visit.
• [ANY OTHER SERVICE YOU USE WITH THIS DATA — for example the tool you send newsletters with.]

This site runs no third-party advertising or tracking scripts.

Cookies and browser storage

Some storage is essential for the shop to work and is always on; analytics storage is used only if you allow it. Session storage is cleared when you close the tab; local storage stays until you clear it or it expires.

Essential — always on

• dockone.cart.v2 (local storage) — your basket.
• dockone.wishlist.v2 (local storage) — items you saved while signed out.
• dockone.currency.v1 (local storage) — the currency you chose to view prices in.
• dockone.offer.v1 (local storage) — the discount code you applied, or one the shopping assistant offered you, kept for checkout for up to 24 hours.
• dockone.consent.v1 (local storage) — your cookie choice.
• dockone.assistant.v1 (local storage) — your conversation with the shopping assistant, for 24 hours; cleared when you sign out.
• dockone.assistant.nudge-off.v1 (local storage) — assistant tips you dismissed, for 24 hours.
• dockone.rates.v1 (session storage) — exchange rates for the currency switcher.
• dockone.checkout.id (session storage) — a random identifier that ties your checkout's automatic saves together.
• dockone.order.v1 (session storage) — your last order's confirmation, without your address or phone number.
• dockone.viewed.v1 (session storage) — the last products you viewed in this tab, shared with the shopping assistant.
• dockone.finder.v1 (session storage) — a random identifier for your product-finder answers.
• dockone.assistant.nudges.v1 (session storage) — which assistant tips were shown during this visit.
• Sign-in cookies (sb-…-auth-token) — set when you sign in, create an account or reset your password, to keep you signed in.
• dockone_site_access (cookie) — only before the shop opens, for people given a preview PIN; 30 days.

Analytics — only if you allow them

• dockone.analytics.v1 (local storage) — a random identifier for your browsing session, replaced after 30 minutes of inactivity and deleted if you withdraw your consent.

Your choices

• Update your name, phone number and address in your account settings.
• Remove saved items at any time.
• Stop basket reminders with the link in any reminder email.
• Unsubscribe from the newsletter with the link in our newsletter emails.
• Change your analytics choice with the cookie settings link at the bottom of every page.
• To ask for a copy of your personal data, or for it to be corrected or deleted, email [CONTACT EMAIL]. Some records, such as orders, may have to be kept for legal reasons.