Privacy Policy

Effective Date: January 23, 2026

At Furniture Plus (Pvt) Ltd. (“we,” “us,” or “our”), located at #41, Dutugemunu Street, Pamankada, Dehiwala, Sri Lanka, we are committed to protecting your personal data in accordance with the Personal Data Protection Act No. 9 of 2022 (as amended), the Online Safety Act No. 9 of 2024, and other applicable Sri Lankan laws. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website or interact with us. By using our site, you consent to these practices.

If you have questions, contact our Data Protection Officer at: info@furnitureplus.lk or +94 (0)11 282 2222.

1. Personal Data We Collect

We collect personal data you provide voluntarily, such as:

  • Contact details (name, email, phone, address) via inquiry forms or “Contact Us.”
  • Project preferences or messages for customization requests.
  • Automatically collected: IP address, browser type, device info (via cookies/logs) for site functionality.

We do not collect special categories of data (e.g., health, ethnicity) unless necessary for a project and with your explicit consent.

We process data for:

  • Responding to inquiries/projects (legal basis: contract necessity or consent).
  • Improving site/services (legitimate interests, e.g., analytics).
  • Marketing (consent, with opt-out).
  • Legal compliance (e.g., records for audits).

Processing is limited to these purposes; further use requires notification/consent.

3. Sharing Your Data

We share data only with:

  • Processors (e.g., IT providers) under strict contracts ensuring PDPA compliance.
  • Authorities if required by law (e.g., for investigations under Online Safety Act). No sales of data.

4. Cross-Border Transfers

Data is processed in Sri Lanka. If transferred abroad (e.g., cloud services), we ensure adequacy or safeguards (e.g., contracts) per PDPA.

5. Data Retention

We retain data only as needed (e.g., 1 year for inquiries). Deletion/anonymization follows, except for legal/archiving needs.

6. Security Measures

We use technical/organizational safeguards (e.g., encryption, access controls, firewalls) against breaches, per PDPA and cyber security standards. Breaches are reported to DPA and you if high-risk.

7. Your Rights as a Data Subject

Under PDPA, you have rights to:

  • Access your data.
  • Withdraw consent.
  • Object to processing.
  • Rectify inaccuracies.
  • Erase data (“right to be forgotten”).
  • Review automated decisions.
  • Restrict processing.

Submit requests in writing to info@furnitureplus.lk. We respond within 1 month (extendable). Appeals to DPA if unsatisfied.

For children: Parental consent required for under-18s.

8. Cookies and Tracking

We use essential cookies for site functionality. No third-party tracking. Manage via browser settings; refusal may limit features.

9. Changes to This Policy

We may update this policy; changes posted here with revised date. Continued use implies acceptance.

10. Complaints

Contact us first.

This policy ensures transparency and compliance, fostering trust in our services.