Last Updated: October 24, 2025
1. Who We Are
Our website address is: https://cpop.store. We operate as Cpop Store, an online clothing retailer based in Sri Lanka.
2. What Personal Data We Collect and Why We Collect It
We collect information about you during the checkout process on our store, as well as when you interact with our site in other ways (like leaving comments or creating an account).
- Information You Provide to Us:
- Order Information: When you purchase from us, we’ll ask you to provide information including your name, billing address, shipping address, email address, phone number, and optionally account information like username and password. We use this information to:
- Send you information about your account and order.
- Respond to your requests, including refunds and complaints.
- Process payments and prevent fraud.
- Set up your account for our store (if you choose to create one).
- Comply with any legal obligations we have, such as calculating taxes.
- Improve our store offerings.
- Send you marketing messages, if you choose to receive them.
- Account Information: If you create an account, we store your name, address, email, and phone number, which will be used to populate the checkout for future orders.
- Comments & Product Reviews: When visitors leave comments or product reviews on the site, we collect the data shown in the form, and also the visitor’s IP address and browser user agent string to help spam detection. An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here:
https://automattic.com/privacy/. After approval of your comment/review, your profile picture (if using Gravatar) may be visible to the public in the context of your comment/review.
- Order Information: When you purchase from us, we’ll ask you to provide information including your name, billing address, shipping address, email address, phone number, and optionally account information like username and password. We use this information to:
- Information Collected Automatically:
- Cookies: We use cookies to keep track of cart contents while you’re browsing our site and for other functionalities explained below.
- Technical Data: We may automatically log information like your IP address, browser type, and operating system when you visit our site for security and analytics purposes.
3. Comments & Product Reviews
(As stated above) When visitors leave comments or reviews, we collect the data shown in the form, IP address, and browser information for spam detection. Approved comments/reviews and associated metadata may display your Gravatar profile picture publicly.
4. Media
If you upload images to the website (e.g., for a user profile or potentially product reviews if enabled), you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
5. Cookies
Our site uses cookies for several purposes:
- Functionality Cookies (WooCommerce):
woocommerce_cart_hash: Helps WooCommerce determine when cart contents/data changes.woocommerce_items_in_cart: Helps WooCommerce determine when cart contents/data changes.wp_woocommerce_session_: Contains a unique code for each customer so that it knows where to find the cart data in the database for each customer.- No personal information is stored within these cookies.
- Comment Cookies: If you leave a comment or review, you may opt-in to saving your name, email address, and website in cookies. These are for your convenience so that you do not have to fill in your details again. These cookies last for one year.
- Login Cookies: If you have an account and you log in, we set cookies to save your login information and screen display choices. Login cookies last for two days, screen options cookies last for a year. If you select “Remember Me”, your login persists for two weeks. Logging out removes these cookies.
- Temporary Cookies: A temporary cookie is set when you visit the login page to check if your browser accepts cookies. It contains no personal data and is discarded when you close your browser.
6. Embedded Content from Other Websites
Articles or pages on this site may include embedded content (e.g., videos from YouTube, images, articles, payment forms from gateways). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction if you have an account and are logged in to that website.
7. Who We Share Your Data With
We do not sell your personal data. We share information with third parties who help us provide our orders and store services to you; for example:
- Payment Gateways: To process your payments, we need to share required information with our payment processing partners, PayHere and Koko. This typically includes your purchase total, billing information, and potentially shipping information. Note: Sensitive payment details like full credit card numbers are handled directly by the payment gateway and are not stored on our servers.
- Shipping Providers: To deliver your orders, we may share your name, address, and phone number with our shipping partners, Fardar and Koobiyo.
- Analytics: We may use analytics services (e.g., Google Analytics) to understand how visitors use our site. These services may collect anonymized data.
- Spam Detection: Visitor comments and reviews may be checked through an automated spam detection service.
- Password Resets: If you request a password reset, your IP address will be included in the reset email.
8. How Long We Retain Your Data
- Comments/Reviews: If you leave a comment or review, the content and its metadata are retained indefinitely so we can recognize and approve follow-up comments automatically.
- Registered Users: For users that register on our website, we store the personal information they provide in their user profile. Users can see, edit, or delete their personal information at any time (username cannot be changed). Administrators can also see and edit that information.
- Order Information: We generally store customer order information (name, email, address, products purchased) for as long as necessary for the purposes for which it was collected, including for tax, accounting, and legal purposes (e.g., typically several years in accordance with Sri Lankan law).
9. What Rights You Have Over Your Data
If you have an account on this site, have placed orders, or have left comments/reviews, you have certain rights regarding your personal data, subject to local laws (including the Sri Lanka Personal Data Protection Act, No. 9 of 2022 where applicable):
- You can request to receive an exported file of the personal data we hold about you, including any data you have provided to us.
- You can request that we correct any inaccurate personal data we hold about you.
- You can request that we erase personal data we hold about you.
Please note that we cannot erase data we are obliged to keep for administrative, legal, security, or financial purposes (such as records of past orders).
To make a request regarding your data, please contact us via email at cpopc7615@gmail.com or by phone at 0779881905.
10. Where Your Data Is Sent
As mentioned above, your data may be sent to:
- Automated spam detection services (for comments/reviews).
- Third-party payment gateways (PayHere, Koko) for processing payments. Some of these gateways may be located outside of Sri Lanka.
- Third-party shipping providers (Fardar, Koobiyo) for order fulfillment.
We take reasonable measures to ensure data transfers are handled securely.
11. Data Security
We implement reasonable security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. However, no internet transmission is completely secure, and we cannot guarantee absolute security.
12. Changes to This Privacy Policy
We may update this privacy policy from time to time. We encourage you to review this page periodically for any changes. The date of the last update will be noted at the top of the policy.
13. Contact Information
If you have any questions about this privacy policy or our data practices, please contact us via email at cpopc7615@gmail.com or by phone at 0779881905.