PRIVACY POLICY

1. Introduction

Eye Care Optometry Clinic, operated by (“Eye Care”, “we”, “us”, or “our”), respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you use https://eyecare.eyesight.lk/, purchase products, contact us, or interact with our online services.

Because some Eye Care products and services involve vision, hearing, prescriptions, measurements, fitting or clinical/professional assessment, information you provide may in some cases include sensitive or health-related information. We aim to handle such information only where reasonably necessary for the requested product or service and with appropriate safeguards.

2. Information We May Collect

Depending on how you interact with us, we may collect:

• Identity and contact data: name, billing/delivery address, email address and telephone number.
• Order and transaction data: products purchased, order number, invoice details, payment status, delivery details, returns, warranty or after-sales history.
• Account data: username, account preferences and related account records where customer accounts are available.
• Prescription, fitting and service data: prescription details, lens specifications, measurements, hearing-aid fitting/programming information, appointment details, assessment information or other information reasonably required to provide optical/hearing-care products and services.
• Communications: messages sent through forms, email, telephone, WhatsApp or other support channels, including complaints and feedback.
• Technical and usage data: IP address, browser/device information, pages visited, referral information, cookies and similar technology where used.
• Marketing preferences: whether you have chosen to receive promotional communications and related preference records.

3. Payment Information

Online payment transactions may be processed by PayHere or another payment provider shown at checkout. Payment processors receive the information necessary to process and verify the transaction. Eye Care does not intentionally store full payment-card numbers or card security codes (CVV/CVC) on the Website.

We may retain transaction references, payment status, amount, date and other non-card information needed for order administration, accounting, refunds, fraud prevention and reconciliation.

4. How We Use Personal Information

We may use personal information to:

• process orders, payments, delivery, collection, returns, exchanges and refunds;
• provide prescription, fitting, programming, assessment, repair, warranty and after-sales services requested by the customer;
• communicate about orders, appointments, product availability and customer-support requests;
• maintain business, accounting, tax, warranty, service and transaction records;
• prevent fraud, abuse, unauthorised transactions and security incidents;
• operate, secure, troubleshoot and improve the Website and customer experience;
• send marketing or promotional communications where permitted and consistent with the customer’s preferences;
• comply with applicable legal, regulatory, professional, safety and law-enforcement requirements.

5. Sensitive and Health-Related Information

Where we request prescription, vision, hearing, fitting, assessment or other health-related information, we will use it for purposes connected with the product or service requested, such as confirming suitability, preparing lenses, programming/fitting a hearing aid, providing after-sales care, or maintaining service records.

Please do not send medical or health information through a general contact form unless it is relevant to your request. Where a more appropriate in-person or professional assessment is needed, we may ask you to provide the information through that process instead.

6. Cookies and Similar Technologies

The Website may use cookies and similar technologies that are necessary for shopping-cart, checkout, security, login and site functionality, and may also use analytics or marketing technologies. The business should confirm the actual tools installed before publication and, where required, provide appropriate cookie notices or choices.

7. When We Share Information

We may share relevant personal information only as reasonably necessary with:

• PayHere, banks, payment networks and payment-service providers for payment processing, reconciliation and refunds;
• courier, logistics and delivery providers for order delivery or collection;
• IT, hosting, website, email, communications, analytics, security and professional service providers acting for or supporting Eye Care;
• manufacturers, distributors, authorised service centres or warranty partners where needed for technical support, warranty or repair;
• professional staff or service providers involved in optical/hearing assessment, fitting or customer care, where appropriate;
• government, regulatory, judicial or law-enforcement authorities where disclosure is required or permitted by law.

We do not sell personal information as a business model. Service providers should receive only information reasonably necessary for their role and should handle it under appropriate confidentiality/security arrangements.

8. International or External Processing

Some technology, cloud, communications, analytics, payment or service providers may process information using systems located outside Sri Lanka. Where this occurs, Eye Care will seek to use appropriate service providers and safeguards consistent with applicable requirements.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and for legitimate business, warranty, professional, accounting, tax, dispute, fraud-prevention or legal obligations. Different types of records may therefore have different retention periods.

the business should internally define retention periods for e-commerce orders, prescriptions/fitting records, warranty/repair files, inquiry messages, CCTV (if applicable), and marketing records.

10. Security

We use reasonable administrative, technical and organisational safeguards designed to protect personal information against accidental loss, unauthorised access, misuse, alteration or disclosure. However, no online service or method of transmission can be guaranteed to be completely secure.

11. Your Choices and Requests

You may contact us to ask about personal information we hold about you, request correction of inaccurate information, update communication preferences, or raise a privacy concern. The availability and scope of any formal rights will depend on applicable Sri Lankan law and the circumstances of the processing.

Sri Lanka’s Personal Data Protection Act No. 9 of 2022 was amended in 2025 and is being brought into operation in stages. Extraordinary Gazette No. 2498/16 dated 22 July 2026 appoints 1 January 2027 for Sections 2 and 3, Part I (processing of personal data) and Part III (controllers and processors). Eye Care should review this policy and its internal data-handling practices again before that date and as further provisions/rules become operational.

12. Marketing Communications

Where we send promotional messages, we will use contact information in accordance with applicable requirements and the customer’s preferences. You may ask us to stop promotional messages using the unsubscribe/opt-out method provided or by contacting us. Service messages concerning an existing order, appointment, warranty or transaction are not marketing messages.

13. Children

Products or services for a child may require information to be provided by a parent, guardian or authorised adult. We do not knowingly request more information about a child than is reasonably necessary for the relevant product, fitting or service.

14. Third-Party Links and Services

The Website may contain links or embedded services provided by third parties. Their privacy practices are governed by their own notices. We encourage users to review the privacy information of third-party services they choose to use.

15. Changes to This Policy

We may update this Privacy Policy to reflect changes in our Website, services, technology, service providers, legal requirements or data-handling practices. The latest version will be published on this page with an updated date.

16. Contact Us About Privacy

Eye Care Optometry Clinic
P51, Alvitigala Mawatha, Narahenpita, Colombo 05, Sri Lanka
Tel: 011 2585 352 / 077 7882 842