PRIVACY POLICY
Introduction
Mascons Agrotech Limited (“Mascons Agrotech”, “we”, “our”, or “us”) respects your privacy and is committed to protecting the personal information you share with us.
This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit https://mascons-agro.com/, purchase our products, submit enquiries, or interact with our services.
We aim to handle personal data responsibly and in accordance with applicable Sri Lankan data protection legislation, including the Personal Data Protection Act No. 9 of 2022, as amended.
Information We Collect
Depending on how you interact with our website and services, we may collect the following categories of information.
Personal Information
- Full name.
- Email address.
- Telephone or mobile number.
- Billing and delivery addresses.
- Account registration details, where applicable.
- Order and Transaction Information
- Products purchased.
- Order numbers and transaction history.
- Delivery preferences and instructions.
- Payment confirmation and transaction references.
- Refund and cancellation information.
- Recipient Information
- When you order flowers or gifts for another person, we may collect the recipient’s name, delivery address, contact number, and gift message.
- Technical Information
Our website and service providers may collect:
- IP address.
- Browser type and device information.
- Website usage information.
- Cookie identifiers.
- Pages visited and interaction information.
We collect only information reasonably necessary for the relevant purposes.
How We Collect Information
We may collect personal information when you:
- Visit or browse our website.
- Place an online order.
- Create a customer account.
- Complete a contact or enquiry form.
- Request wholesale pricing or dealer registration.
- Communicate with us by telephone, email, or other authorised channels.
- Subscribe to marketing communications.
- Interact with website cookies or analytics technologies, where enabled.
- Information may also be received from payment providers, delivery partners, and other service providers involved in fulfilling your requests.
How We Use Your Information
We may use personal information for the following purposes:
- Order Processing
- To confirm, process, prepare, and fulfil customer orders.
- Delivery Services
- To arrange delivery of flowers, bouquets, plants, and related products.
- Customer Support
- To respond to enquiries, complaints, cancellations, and refund requests.
- Payment Administration
- To verify transactions, maintain payment records, and manage refunds.
- Business and Wholesale Services
- To process dealer registrations, provide quotations, and administer wholesale customer relationships.
- Website Improvement
- To maintain website functionality, diagnose technical issues, and improve customer experience.
- Marketing Communications
- To send promotional messages, offers, and product updates where we have a lawful basis to do so.
- Legal and Security Purposes
- To maintain business records, comply with applicable legal obligations, protect our systems, and prevent fraudulent transactions.
Legal Basis for Processing
We process personal information only where an appropriate legal basis applies.
Depending on the circumstances, this may include:
- Performing or preparing to enter into a contract with you.
- Complying with legal obligations.
- Obtaining your consent where required.
- Pursuing legitimate business interests where permitted by applicable law and subject to appropriate safeguards.
- Other lawful grounds recognised under applicable data protection legislation.
- Where processing is based on consent, you may withdraw that consent in accordance with applicable law.
Payment Information
- Online payments may be processed through authorised third-party payment service providers.
- Where a third-party payment gateway is used, payment information is handled according to the provider’s applicable security measures and privacy policy.
- Mascons Agrotech may retain transaction references, payment status, and related accounting records as necessary.
- We do not require customers to disclose payment card PINs or online banking passwords.
Cookies and Website Technologies
Our website may use cookies and similar technologies to support its operation.
These may include:
Essential Cookies
- Cookies necessary for shopping cart functionality, checkout, security, and website operation.
- Preference Cookies
- Cookies that remember user preferences and improve website convenience.
Analytics Cookies
- Cookies that help us understand website traffic and performance, where analytics tools are enabled.
Marketing Cookies
- Cookies used for advertising or promotional measurement, where such services are enabled.
Where required by applicable law, we will obtain consent before using non-essential cookies.
You may also manage cookies through your browser settings. Disabling certain cookies may affect website functionality.
Sharing of Personal Information
We do not sell customer personal information.
We may share relevant information with trusted third parties when reasonably necessary, including:
- Payment service providers.
- Delivery and logistics partners.
- Website hosting and maintenance providers.
- IT and security service providers.
- Professional advisers.
- Government authorities or regulators where disclosure is legally required.
We seek to limit the information shared to what is necessary for the relevant purpose and require appropriate protection of personal data.
International Data Transfers
Some website, hosting, payment, or technical service providers may process or store information outside Sri Lanka.
Where personal data is transferred internationally, we will apply safeguards required by applicable Sri Lankan data protection law.
Data Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, loss, or misuse.
These measures may include appropriate access controls, secure communications, software maintenance, and restrictions on access to customer records.
However, no internet-based service can guarantee absolute security.
Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including:
- Completing customer orders.
- Providing customer support.
- Maintaining accounting and transaction records.
- Resolving disputes.
- Complying with legal obligations.
- Protecting legitimate business interests where permitted by law.
- Retention periods depend on the type of information, its purpose, and applicable legal requirements.
When personal information is no longer required, we will take appropriate steps to delete, anonymise, or securely dispose of it.
Your Privacy Rights
Subject to applicable Sri Lankan data protection law and its commencement provisions, you may have rights relating to your personal information, including the right to:
- Request access to personal information held about you.
- Request correction of inaccurate or incomplete information.
- Withdraw consent where processing relies on consent.
- Object to certain processing activities.
- Request erasure of personal information where legally applicable.
- Exercise other rights available under applicable law.
- To submit a privacy-related request, please contact us using the contact information provided below.
- We may request reasonable verification of identity before processing a request involving personal information.
- Requests will be handled in accordance with applicable legal requirements.
Marketing Communications
We may send promotional communications about flowers, plants, seasonal collections, special offers, and related services where permitted by law.
Customers may opt out of promotional communications by following the unsubscribe instructions provided or contacting us directly.
Opting out of marketing will not prevent necessary communications relating to existing orders or customer service matters.
Children's Privacy
Our website is intended primarily for customers purchasing flowers, plants, and related products.
We do not knowingly collect personal information from children without an appropriate lawful basis or required parental or guardian authorisation.
If we become aware that children’s personal information has been collected improperly, we will take appropriate corrective action.
Third-Party Websites
Our website may include links to external websites and services.
We are not responsible for the privacy practices of third-party websites that operate independently of Mascons Agrotech.
We encourage users to review the privacy policies of external services before providing personal information.
Data Breaches
If a personal data breach occurs, we will investigate and take appropriate steps to contain and address the incident.
Where required by applicable law, we will notify the relevant regulatory authority and affected individuals within the legally prescribed requirements.
Changes to This Privacy Policy
We may revise this Privacy Policy to reflect changes in our services, business operations, technology, or legal obligations.
The latest version will be published on our website with its updated effective date.
We encourage visitors to review this page periodically.
Contact Us
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about the handling of personal information, please contact:
Mascons Agrotech Limited
Address: 175, Sri Sumanatissa Mawatha, Colombo 12, Sri Lanka
Telephone: +94 11 238 8263 / +94 11 720 4444
Hotline: +94 77 222 4419
Website: https://mascons-agro.com/
Privacy Contact Email: [email protected]
Applicable Law
This Privacy Policy is governed by the applicable laws of Sri Lanka, including relevant provisions of the Personal Data Protection Act No. 9 of 2022, as amended, to the extent those provisions are in force.