Home » Privacy Policy

Privacy Policy

Effective date: April 2026

Last updated: April 2026

Wachana (“we,” “our,” or “us”) is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and share your data when you visit our website (wachana.com), purchase products, register for events, or interact with us through any of our channels.

1. Information We Collect

We may collect the following types of information:

a) Information you provide directly

Name, email address, phone number, and postal address when you place an order, register for a workshop, or subscribe to our newsletter.
Payment information (processed securely by our payment gateway provider, PayHere; we do not store your full card details on our servers).
Competition submissions, including any biographical information you provide with your entry.
Feedback, reviews, and correspondence you send to us.

b) Information collected automatically

Device and browser type, IP address, and operating system.
Pages visited, time spent on our website, and referring URLs.
Cookies and similar tracking technologies (see Section 5 below).

2. How We Use Your Information

We use your personal information for the following purposes:

To process and fulfil your orders and deliver digital or physical products.
To register you for workshops, events, and competitions.
To send you order confirmations, shipping updates, and digital download links.
To send our newsletter and promotional communications (only with your consent; you may unsubscribe at any time).
To improve our website, products, and services.
To respond to your enquiries and provide customer support.
To comply with legal obligations and prevent fraud.

3. Sharing Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information with:

Payment processors: PayHere processes payments on our behalf. Your payment data is handled in accordance with their privacy policy and PCI-DSS standards.
Shipping and delivery partners: Sri Lanka Post or other courier services, to fulfil physical orders.
Email service providers: Substack or similar platforms, to deliver our newsletter.
Analytics providers: Such as Google Analytics, to understand website usage (data is anonymised where possible).
Legal authorities: If required by law, regulation, or legal process.

4. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes described in this policy, including to satisfy any legal, accounting, or reporting requirements. Order records are retained for a minimum of 6 years for tax and accounting purposes. You may request deletion of your personal data at any time by contacting us (see Section 8).

5. Cookies

Our website uses cookies — small text files stored on your device — to improve your browsing experience. These include:

Essential cookies: Required for the website and shopping cart to function properly.
Analytics cookies: Help us understand how visitors use our site (e.g. Google Analytics).
Marketing cookies: Used to deliver relevant advertisements on social media platforms (e.g. Meta Pixel).

You can control or disable cookies through your browser settings. Disabling essential cookies may affect your ability to use certain features of our website, including the shopping cart and checkout.

6. Data Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. Our website uses SSL encryption for all data transmitted between your browser and our servers. Payment processing is handled by PCI-DSS compliant third-party providers.

7. Your Rights

You have the right to:

Access the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your personal data, subject to legal retention requirements.
Withdraw your consent for marketing communications at any time.
Lodge a complaint with the relevant data protection authority if you believe your data has been mishandled.

To exercise any of these rights, please contact us at hello@wachana.com.

8. Third-Party Links

Our website may contain links to third-party websites, including Amazon, social media platforms, and partner organisations. We are not responsible for the privacy practices of these external sites and encourage you to review their privacy policies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.