Privacy Policy – Epic Store

Last Updated: 13 August 2026

Epic Store (Pvt) Ltd, operating EpicStore.lk, respects the privacy of our customers and website visitors.

This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you access EpicStore.lk, create an account, place an order, communicate with us or otherwise use our services.

1. Information We Collect

Depending on how you interact with EpicStore.lk, we may collect information including:

Personal and Contact Information

Name;
Billing address;
Delivery address;
Email address;
Telephone or WhatsApp number; and
Account information.

Order Information

We may collect information relating to:

Products purchased;
Order value;
Order history;
Delivery details;
Payment method;
Transaction references;
Refunds;
Returns;
Warranty requests; and
Customer service communications.

Payment Information

Payments may be processed through third-party payment service providers such as banks, card processors, PayHere, Koko, or other payment gateways made available through EpicStore.lk.

Where payments are processed by a third-party payment provider, sensitive payment credentials are handled in accordance with that provider’s systems and policies.

Epic Store may receive information such as payment status, transaction reference, amount and payment method necessary to confirm and manage an order.

We do not intentionally store customers’ complete card numbers or card security codes on EpicStore.lk.

Technical Information

When you use our website, we may automatically collect information including:

IP address;
Browser type;
Device type;
Operating system;
Pages visited;
Referring pages;
Approximate location information derived from technical data;
Session information; and
Website interaction and performance information.

2. Why We Use Your Information

We may process personal information to:

Create and manage customer accounts;
Receive and process orders;
Verify payments;
Arrange delivery;
Contact customers regarding orders;
Provide invoices and receipts;
Handle returns, refunds and exchanges;
Process warranty and after-sales support;
Respond to inquiries;
Prevent fraudulent transactions;
Protect our website and systems;
Improve our products, services and website;
Maintain business and accounting records;
Meet legal and regulatory requirements; and
Send promotional communications where permitted and appropriate.

3. Payment Providers

When a customer selects a third-party payment service, some information required to complete the transaction may be transferred to that payment provider.

Those providers may process information according to their own privacy policies, terms and regulatory obligations.

Epic Store is not responsible for the independent privacy practices of third-party payment services, but we aim to use reputable payment providers appropriate for online commerce.

4. Delivery and Fulfilment Providers

To complete an order, we may share relevant information with courier companies and delivery partners.

This may include:

Customer name;
Delivery address;
Telephone number;
Order or parcel reference; and
Other information reasonably required to complete delivery.

We only provide information reasonably necessary for the service being performed.

5. Other Service Providers

We may use third-party providers for services such as:

Website hosting;
Cloud infrastructure;
Website security;
Analytics;
Email;
SMS;
Customer communication;
Fraud prevention;
Payment processing;
Accounting; and
Technical support.

These providers may process information on our behalf where necessary to provide their services.

6. Cookies

EpicStore.lk may use cookies and similar technologies to:

Maintain shopping cart sessions;
Keep customers signed in;
Remember preferences;
Improve website functionality;
Understand website traffic;
Measure website performance;
Detect security threats; and
Support advertising or analytics where applicable.

Customers may manage cookies through their browser settings.

Disabling certain cookies may affect website functionality, including login or checkout features.

7. Analytics and Advertising

We may use analytics, advertising and measurement services to understand how customers interact with EpicStore.lk and to improve our services.

These services may use cookies or similar technologies.

Where required, consent choices may be provided for relevant categories of tracking technology.

8. How We Share Personal Information

We do not sell customers’ personal information.

We may disclose information where reasonably necessary to:

Process a payment;
Deliver an order;
Provide customer support;
Provide warranty services;
Operate or protect our website;
Prevent fraud;
Comply with applicable law;
Respond to a lawful request by an authority; or
Establish, exercise or defend legal rights.

9. Data Security

We take reasonable administrative and technical measures intended to protect customer information against:

Unauthorised access;
Loss;
Misuse;
Alteration;
Disclosure; and
Destruction.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

10. Data Retention

We retain personal information only for as long as reasonably required for the purpose for which it was collected or as required for legitimate business, accounting, warranty, fraud-prevention, dispute-resolution or legal purposes.

Different types of information may therefore be retained for different periods.

11. Customer Rights

Subject to applicable Sri Lankan data protection law, individuals may have rights relating to their personal information, including rights to request access, correction and other permitted actions concerning their personal data.

Where legally applicable, requests can be submitted to Epic Store using our published contact details.

We may need to verify a person’s identity before completing certain requests.

12. Links to Other Websites

EpicStore.lk may contain links to third-party websites and services.

Epic Store is not responsible for the privacy practices, security or content of websites operated independently by third parties.

13. Children’s Privacy

EpicStore.lk is intended for general commerce and is not designed specifically to collect personal information from children.

Where a minor wishes to make a purchase, a parent or legal guardian should supervise the transaction.

14. Changes to This Privacy Policy

We may update this Privacy Policy when our services, technology, business practices or legal requirements change.

The latest version will be published on EpicStore.lk together with its updated date.

15. Contact Us

For privacy questions or requests, contact:

Epic Store (Pvt) Ltd
Website: EpicStore.lk
Call / WhatsApp: +94 71 300 0311

You may also contact us through the official Contact Us page on EpicStore.lk.