Privacy Policy

Yusuf Traders, a watch shop at 196, Central Road, Trincomalee, Sri Lanka (business registration number TMC/MR/TRL/2026/10298), decides how personal data collected through this site is used. For any privacy question, email yousuftrader2@gmail.com or call 074 038 4314.

We collect only what we need to run the shop:

• Account details — your name and email address, handled by our sign-in provider, Clerk, when you create an account or sign in.
• Order details — the name, delivery address, phone number, and email you give at checkout, the watches you ordered, and the amount paid. Store-pickup orders have no delivery address.
• Saved items — the watches you heart and anything sitting in your cart.
• Reviews — the rating and text you write, stored with the name on your account.
• Messages — what you send us by email or WhatsApp, including payment slips.
• Availability requests — your email address, when you ask to be told that a brand we do not stock has come in.
• Technical data — cookies that keep your cart and sign-in working, and your IP address, which our servers and abuse protection see when you use the site (see our Cookie Policy).

We do not take card or bank login details on this site. You pay by transferring from your own bank, so we only ever see the payment reference and the slip you choose to send us.

• To take, confirm, deliver, and keep a record of your order — this is how we perform our contract with you.
• To answer your questions and sort out problems with an order.
• To show your order history, saved watches, and warranty certificates in your account.
• To keep the shop secure and prevent fraud and abuse — our legitimate interest in running it safely.
• To email you that a brand has arrived, if you asked us to. You can tell us to stop at any time.
• To meet tax, accounting, and other legal obligations.

We do not sell your personal data, and we do not use it for advertising.

We share data only with the services that help us run the shop, and only as far as they need it:

• Clerk — sign-in and account security.
• Neon — the hosted PostgreSQL database holding orders, accounts, and reviews.
• Vercel — hosting for the site, which processes requests and keeps short-term server logs.
• Brevo and Resend — sending order and account emails.
• Upstash — the rate-limiting service that blocks abusive traffic.
• ImageKit — delivering product images.
• WhatsApp (Meta) — if you choose to message us there; their own privacy terms apply to that chat.
• Delivery partners — the name, address, and phone needed to bring your order to you.
• Our bank — to match your transfer to your order.

We may also share data where the law requires it, or to establish or defend a legal claim.

Several of the services above store data on servers outside Sri Lanka. When your data is transferred abroad we rely on the provider's contractual protections and their own security commitments.

A review you post is public, and shows the name on your account next to it. Everything else — your orders, address, saved watches, and warranties — is visible only to you and to us.

Order records, including the address and the amount paid, are kept for as long as tax and accounting rules require, even if you close your account. Warranty records are kept while the warranty runs and for a reasonable period after. Account details, saved watches, and cart contents are kept until you ask us to delete your account. Availability requests are deleted once we have replied or the brand is no longer expected.

You can ask us for a copy of the personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it, or object to how we are using it. Sri Lanka's Personal Data Protection Act No. 9 of 2022 sets out these rights and the time we have to respond.

Email yousuftrader2@gmail.comand we will deal with your request. Bear in mind we may need to keep order records to meet legal obligations even after you ask us to delete your account. If you are not happy with how we have handled it, you can complain to Sri Lanka's data protection authority.

The site runs over encrypted connections (HTTPS), sign-in and passwords are handled by Clerk rather than by us, and we rate-limit sensitive actions to make abuse harder. Access to order data is limited to the people running the shop. No system is perfectly secure, but we take reasonable steps to protect your information — and because we never take card details, there are none to lose.

The shop is intended for adults, and we do not knowingly collect data from anyone under 18.

We may update this policy as the shop changes. The “last updated” date above reflects the latest version.