Home/Privacy Policy

Privacy Policy

Last updated August 2026

This policy explains what personal data Yusuf Traders collects, why we collect it, who we share it with, and the choices you have. It covers yousuftraders.store, our checkout, and the messages you send us.

Who we are

Yusuf Traders, a watch shop at 196 Central Rd, Trincomalee, Sri Lanka (business registration number TMC/MR/TRL/2026/10298), decides how personal data collected through this site is used. For any privacy question, email yousuftrader2@gmail.com or call 074 038 4314.

What we collect

We collect only what we need to run the shop:

  • Account details — your name and email address, handled by our sign-in provider, when you create an account or sign in.
  • Order details — the name, delivery address, phone number, and email you give at checkout, the watches you ordered, and the amount paid. Store-pickup orders have no delivery address.
  • Saved addresses — if you save a delivery address to your account, we keep the name, phone number, address, city, postal code, and country so checkout is quicker next time.
  • Saved items — the watches you heart and anything sitting in your cart.
  • Reviews — the rating and text you write, stored with the name on your account.
  • Messages — the name, email address, subject, and message you send through our contact form, and anything you send us by email or WhatsApp, including payment slips.
  • Newsletter signup — your email address, if you subscribe to our newsletter.
  • Availability requests — your email address, when you ask to be told that a brand we do not stock has come in.
  • Technical data — cookies that keep your cart and sign-in working, and your IP address, which our servers and abuse protection see when you use the site (see our Cookie Policy).
  • Usage data — how the site is used, measured by Google Analytics. See Analytics below.

We do not take card or bank login details on this site. You pay by transferring from your own bank, so we only ever see the payment reference and the slip you choose to send us.

Why we use it

  • To take, confirm, deliver, and keep a record of your order — this is how we perform our contract with you.
  • To answer your questions and sort out problems with an order.
  • To show your order history, saved watches, and warranty certificates in your account.
  • To keep the shop secure and prevent fraud and abuse — our legitimate interest in running it safely.
  • To email you that a brand has arrived, if you asked us to. You can tell us to stop at any time.
  • To send you our newsletter, if you subscribed — new arrivals and occasional notes. We send these only because you asked for them, and you can unsubscribe whenever you like.
  • To see how the site is used so we can improve it.
  • To meet tax, accounting, and other legal obligations.

We do not sell your personal data, and we do not run advertising on this site.

Who we share it with

We share data only with the services that help us run the shop, and only as far as they need it:

  • Our sign-in provider — keeping your account and password secure.
  • Our hosting, database, and content-delivery providers — running the site and storing your orders, account, and reviews. They also keep short-term server logs and help us block abusive traffic.
  • Our email provider — sending order and account emails, passing on what you send through the contact form, and holding the newsletter list if you subscribed.
  • Google Analytics — as described below.
  • WhatsApp (Meta) — if you choose to message us there; their own privacy terms apply to that chat.
  • Delivery partners — the name, address, and phone needed to bring your order to you.
  • Our bank — to match your transfer to your order.

We may also share data where the law requires it, or to establish or defend a legal claim.

Analytics

We use Google Analytics to understand how the shop is used — which pages people open, which watches they look at, what kind of device and browser they are on, and roughly where in the world they are, which Google works out from your IP address. It sets its own cookies to do this, as described in our Cookie Policy.

When an order is confirmed we also send Google the order number, the total, the delivery charge, and the watches bought, so we can see which models actually sell. We do not send Google your name, address, phone number, or email address, and we do not use analytics to advertise to you elsewhere.

If you would rather not be measured, you can block cookies in your browser or install Google's own opt-out add-on. Nothing on the shop stops working if you do.

Where your data is held

Several of the services above store data on servers outside Sri Lanka. When your data is transferred abroad we rely on the provider's contractual protections and their own security commitments.

What other people can see

A review you post is public, and shows the name on your account next to it. Everything else — your orders, address, saved watches, and warranties — is visible only to you and to us.

How long we keep it

Order records, including the address and the amount paid, are kept for as long as tax and accounting rules require, even if you close your account. Warranty records are kept while the warranty runs and for a reasonable period after. Account details, saved addresses, saved watches, and cart contents are kept until you ask us to delete your account. Availability requests are deleted once we have replied or the brand is no longer expected. Your email stays on the newsletter list until you unsubscribe.

Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it, or object to how we are using it. You can also stop our marketing emails at any time — use the unsubscribe link in any newsletter, or just tell us. Sri Lanka's Personal Data Protection Act No. 9 of 2022 sets out these rights and the time we have to respond.

Email yousuftrader2@gmail.comand we will deal with your request. Bear in mind we may need to keep order records to meet legal obligations even after you ask us to delete your account. If you are not happy with how we have handled it, you can complain to Sri Lanka's data protection authority.

Security

The site runs over encrypted connections (HTTPS), sign-in and passwords are handled by our sign-in provider rather than by us, and we rate-limit sensitive actions to make abuse harder. Access to order data is limited to the people running the shop. No system is perfectly secure, but we take reasonable steps to protect your information — and because we never take card details, there are none to lose.

Children

The shop is intended for adults, and we do not knowingly collect data from anyone under 18.

Changes

We may update this policy as the shop changes. The “last updated” date above reflects the latest version.

This page is a general template, not legal advice. Have it reviewed by a qualified professional and complete the bracketed details (legal entity, registered address, governing law) before accepting real payments.