Privacy policy
Privacy Policy
Effective Date: 01.01.2025 (Updated 01.03.2025)
Introduction
Welcome to [Revlon Sri Lanka] ("we," "our," "us"). Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website revlon.lk (the "Site"), in accordance with applicable laws (including but not limited to the Personal Data Protection Act No. 9 of 2022 of Sri Lanka).
This Privacy Policy also applies to our marketing content, including offers and advertisements for our products and services, which we send to you on third-party websites, platforms and applications based on your site usage and other publicly available information. These third-party websites generally have their own privacy notice and terms and conditions. We encourage you to read them before using those websites.
1. Personal Information We Collect
We only collect the limited information that is necessary for your identification and for processing the order placed and service requested. We do not collect your personal information unless you directly or indirectly provide it to us voluntary. Though the personal information sought from you may vary depending upon your dealing, we generally collect the following data:
- Personal Information : When you interact with our Site, we may collect personal information such as your name, address, email address, phone number, gender, date of birth, or payment information (such as your credit card/ debit card number).
- Usage Data: We collect information about how you access and use the Site, including your IP address, browser type, device type, pages viewed, and other diagnostic data.
2. How We Use Your Personal Information
We use the personal information we collect for various purposes, including:
- To provide and maintain the Site and services.
- To personalise your experience and respond to your inquiries.
- To process transactions and send related communications, including to administer sales, and to manage your membership with our customer loyalty scheme (if you become a member).
- To improve our website and services based on usage data.
- To comply with legal obligations and protect our rights.
- To direct market to you, with your permission.
- To respond to your requests in relation to exchange and returns.
- To address your complaints and grievances.
- To enable you to participate in promotions and contests.
- To improve your overall shopping experience.
- To understand and analyse our sales, and your needs and preferences.
- To develop, enhance market and provide products and services to meet your need.
We will use your personal information only for the above purposes that was specified to you, prior to any data being sought from you.
We give assurance to you that your personal information will not be given to third parties for cross selling purposes.
We use anonymous information, such as that pertaining to web or mobile pages you have viewed, to analyse trends, track user's movements, provide a better user experience and gather broad demographic information for aggregate use. We do not use this data in a manner that would identify you personally.
3, Other uses of your Personal information
Your personal information may also be used for sending you other information about us, our Site, our products, sales promotions, our emailers, SMS updates, anything relating to other companies in our group or our business partners. You can unsubscribe at any time if you wish not to receive any of this additional information as detailed in this paragraph (or any part of it) by clicking the “unsubscribe” link in any email that we send to you or follow the un-subscription process as detailed in the SMS.
4.Accessing and Updating Personal information
We make reasonable efforts to keep personal information accurate, complete and up to date as necessary it is the customers’ responsibility to timely update such information for ensuring timely delivery of products by us.
5. How We Share Your Personal Information
We ensure that your personal information will not be provided to third parties for marketing their own products or services to you without your consent. In addition, we do not sell or otherwise disclose personal information except as described here:
- The Company’s Affiliates
We may share your personal information with our Affiliates that distribute and market our products. Our Affiliates may use this information in accordance with this Privacy Policy including, if you have provided prior explicit consent, sending you product information, cosmetic tips or promotions. If you prefer that we not share your personal information with our Affiliates, please do not provide it to us you may opt out of sharing your personal information with us. We are unable to offer the benefits of our products to anyone who does not consent to the sharing of their personal information with our Affiliates.
- Third Parties
We may retain other companies, individuals and service providers to perform functions on our behalf consistent with this Privacy Policy. Examples include webstore management companies, order processing companies, courier companies, data analysis firms, customer support specialists, email vendors, web-hosting companies and fulfilment companies (e.g., companies that coordinate mailings). Such third parties may be provided with access to personal information needed to perform their functions but may not use such information other than on our behalf and in accordance with this Privacy Policy.
In addition, in some instances, you may be offered the opportunity to consent to the sharing of your personal information with a third party such as an event or promotion co-sponsor. If you consent, we will share your information with such third party and the information you provide may be used by such third party for their own purposes and in accordance with their own policies.
- Business Transfers
As we continue to develop our business, we might sell certain of our assets. In such transactions, user information, including personal information, generally is one of the transferred business assets, and by submitting your personal information to us you agree that your data may be transferred to such parties in these circumstances.
- Compliance with Law
We may disclose information that is necessary to comply with any applicable law, regulation, legal process or governmental request. In addition, we may disclose any information when it is necessary to prevent physical harm or financial loss or in connection with suspected or actual illegal activity.
Personal information in our possession may also be transferred to other countries for any of the purposes described in this Privacy Policy. You and they understand and accept that these countries may have differing (and potentially less stringent) laws relating to the degree of confidentiality afforded to the information they hold and that such information can become subject to the laws and disclosure requirements of such countries, including disclosure to governmental bodies, courts regulatory agencies and private persons, as a result of applicable governmental or regulatory inquiry, court order or other similar process. In addition, a number of countries have agreements with other countries providing for exchange of information for law enforcement, tax and other purposes. When we, or our permitted third parties, transfer information outside Sri Lanka, we or they will impose contractual obligations on the recipients of that data to protect such information to the standard required under Sri Lankan law. We or they may require the recipient of the relevant personal information to subscribe to international frameworks intended to enable secure data sharing. In the case of transfer by us, we may also transfer your personal information where the transfer is otherwise permitted by applicable data protection legislation in Sri Lanka.
6. Legal Basis for Processing Personal information
We will rely on one or more of the following grounds for processing your personal information:
a. you have given consent to the processing of your personal information;
b. the processing is necessary to fulfil a contract to which you are a party or to take preparatory steps at your express or implied request before entering into a contract;
c. the processing is necessary to address an emergency that poses a threat to the life, health, or safety of you or another individual;
d. the processing is necessary to comply with a legal obligation to which We are subject under applicable laws;
e. the processing is necessary to perform a task carried out in the public interest or to exercise powers, functions, or duties assigned to Us under any applicable laws, including government-issued circulars, directives, or codes; or
f. the processing is necessary to achieve our legitimate interests, such as marketing or otherwise making available information about our products and services to you, or to provide necessary access and/or use of this website and any of its features or functionalities.
- We have taken appropriate standard and technical measures and other physical, electronic and procedural safeguards to protect the security and confidentiality of the personal information we have collected, and to prevent unauthorised access to or disclosure of your personal information.
- Your personal information is collected on a secure server when it is collected from our Site. We use firewalls on our servers. When we collect payment card details electronically, we use encryption by using Secure Socket Layer (SSL) coding. This makes it hard for anyone to decrypt your personal information.
- Whilst we are unable to guarantee 100% security, still this makes it hard for a hacker to decrypt your details.
- You are strongly recommended not to send full credit or debit card details in unencrypted electronic communications with us.
- Our security procedures mean that we may occasionally request proof of identity before we disclose personal or other sensitive information to you.
- You are responsible for maintaining confidentiality and protecting against unauthorised access to your password and to your computer.
- We will not be liable for loss of your data form your computer.
We take reasonable precautions to protect your personal information from unauthorised access, alteration, or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
8. Your Privacy Rights
Under applicable law, you have certain rights of request regarding your personal information such as:
a. Right to request access - You have the right to request access to the personal information we hold about you, including information on how your data is being used.
b. Right of withdrawal - You have the right to withdraw your consent at any time by submitting a written request. Please note that withdrawing your consent will not affect the legality of any processing that occurred before the withdrawal or our rights under applicable laws to process such personal information without consent.
c. Right to request rectification or completion - If you believe that the personal information we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
d. Right to request erasure - You have the right to request the deletion of your personal information in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected, or if you withdraw your consent (and there is no other legal basis for the continuation of such processing).
e. Right to refrain from further processing- You have the right to request that we refrain from further processing your personal information if such processing is either based on powers, functions or duties imposed on us under any written law, or in pursuance of our legitimate interests.
f. Right to review a decision based solely on automated processing- You have the right to request a review of any decision made by us solely through automated processing, particularly if it has a significant or continuous impact on your rights or freedoms.
g. Right of appeal- If we refuse to act on your request regarding access, rectification or erasure, you have the right to appeal to the ‘Data Protection Authority of Sri Lanka’.
To exercise these rights, please write to us, with all relevant details, using the contact information provided below.
9. Customer consent (Opt In –Unsubscribe)
When you opt-in, personal information provided by you will not be used for those purposes that were not specified before the information was sought from you unless your prior consent is obtained or the same is legally required. Explicit consent will be obtained from you before sending any marketing communications. Your personal information is not a condition for selling our product unless the same is required for processing your order or for any specified condition or legal requirement.
If you consented to become a member of our customer loyalty scheme while also explicitly consenting to receive our commercial communications, then subsequent cease of your membership will not amount to an automatic request to unsubscribe and your continued consent to receiving our commercial communications will be assumed.
10. Data Retention
We retain your personal information only for so long as it is reasonably necessary to fulfil the purposes outlined in this Privacy Policy or as required by law. We will securely delete, anonymise or pseudonymise your personal information once it is no longer required for the purpose it was collected or to comply with our responsibilities under applicable law.
11. Cookies and Tracking Technology
We use cookies, web beacons, and other tracking technologies to enhance your experience, analyse site usage, and personalise content. You can manage cookie settings through your browser.
Various technologies are being used by us to collect information relating to your visit to our Site such as the Uniform Resource Locater (URL) that referred you to our Site, Internet Protocol address, browser type, browser language, the date and time of your request or we can use your Internet Protocol (IP) address identifying your computer or device and indicating your geographic region for statistical purposes. This enables us to enhance and customise your experience on our Site.
In some instances, we may use these technologies in combination with the personal information you provide on the Site. These technologies may provide a variety of information such as whether you have visited www.revlon.lk. They also may enable you to save your preferences. Each technology is explained below.
- Web Beacons and Tracking Links
Web Beacons (also called clear gifs and pixel tags), tracking links and/or similar technology consist of a few lines of code and are embedded on the pages of our Site. They are often used in combination with Cookies and are often not visible to the user of the Site. Web Beacons may relay information to third parties such as our service providers and may be used in order to track customer response to certain advertising, to target interactive advertising and to enhance customer support and usability. If you reject our Cookies (see Cookie section below), you will prevent Web Beacons from relaying this information about you and may limit your use of some of our Site features.
- Cookies
We use cookies, pixel tags, and/or other similar technologies to collect visitor information. Browser Cookies are bits of text that are placed on your computer’s hard drive when you visit our Site. Flash Cookies are similar to Browser Cookies except that they can store data more complex than simple text and are stored in your browser rather than on your hard drive. You can have your browser and/or plugs to your browser, such as flash, notify you of, or automatically reject, Cookies. If you reject our Cookies or opt-out of the use of cookies, you may still use this Site, but you may be limited in the use of some of its features.
12. Third-Party Links
Our Site may contain links to third-party websites. We are not responsible for the privacy practices or content of these sites. We encourage you to read the privacy policies of any third-party websites you visit.
13. Children's Privacy
Our Site is not intended for children under the age of 18, and we do not knowingly collect personal information from minors. If we learn that we have collected personal information from a minor, we will take steps to delete that information.
14. Effective date and changes to Privacy Policy
This Privacy policy is effective as of [•]
This Privacy Policy is subject to change and any change effected in the Privacy Policy will be intimated to users by posting the revised Privacy Policy on our homepage (ww.revlon.lk) so that our users always know about the information collected by us from them, how their information is used by us, any new legal requirement which requires information, under what circumstances we may disclose this information to third parties. We encourage you to review this Privacy Policy periodically.
An intimations will be send to you to notify that we wish to use personal information for any purpose other than, or in addition to the purpose(s) listed in this policy or from that stated at the time this personal information was collected, we will notify you by way of an email, unless we do not have your email address, in which case we will use any other means of communication available to us depending on the contact details that you have provided to us. We will only proceed with such use, if we receive your consent with respect to such additional purposes’ (not previously communicated, or not previously included in this policy).
15. Contact Us
If you have any questions, concerns, or requests related to your personal information, your rights, or this Privacy Policy, you may contact our Data Protection Officer using the following details: :
Mr. T. S. Prakash
prakashts@bplanka.com
Beauty Products Lanka Pvt. Ltd.
342 Awissawella Road, Angoda
info@bplanka.com
0112 549 707