Privacy Policy

1. Introduction

Welcome to Gleaming Glitz ("we," "our," or "us"). We specialize in premium bridal jewellery rentals, traditional dance jewellery sets, engagement collections, and ceremony accessories across Sri Lanka, operating from Jaffna.

We are committed to respecting and protecting the privacy of our customers, website visitors, and rental clients. This Privacy Policy explains how we collect, use, store, and safeguard your personal information when you visit our website (gleamingglitz.com), explore our jewellery collections, contact us through our messaging tools, or place jewellery bookings and rentals.

By using our website or booking jewellery with Gleaming Glitz, you acknowledge and agree to the practices described in this Privacy Policy.

2. Information We Collect

We only collect information that is necessary to provide our jewellery rental services, handle customer inquiries, and fulfill bookings:

A. Personal Information Provided by Customers

• Contact Details: Your full name, mobile telephone number, WhatsApp contact number, and email address when you contact us or request a booking.
• Identification & Verification: National Identity Card (NIC) number, passport details, or address verification when required for high-value bridal and temple jewellery rental agreements and security deposits.
• Communication Data: Inquiries, preferences, wedding or function dates, and messages sent via our WhatsApp concierge or website contact forms.

B. Order and Rental Information

• Rental Specifications: Jewellery product codes (e.g., S001, S015), selected sets (bridal collection, dance sets, tikka, engagement sets), rental start date, event date, and scheduled return date.
• Fulfillment Details: Delivery address or showroom pickup schedule in Jaffna, return status, and inspection verification notes.

C. Account Information

• For administrative and registered client records in our booking portal, we maintain customer profile records, rental history, and booking reference numbers.

D. Payment Processing

• Rental fees, advance booking deposits, and security deposits are settled directly through verified offline methods (cash at showroom, direct bank transfer, or invoice settlement).
• We do not store, process, or transmit credit card numbers, CVV codes, or online banking passwords on our web servers.

E. Cookies and Similar Technologies

• Essential Session Cookies: We utilize standard technical session cookies (such as PHPSESSID) strictly necessary for site navigation, security token validation, and state preservation.
• Preference Storage: Minimal client-side storage (such as localStorage) to store your preferred language (English, Tamil, or Sinhala) for the interactive concierge.
• We do not deploy invasive cross-site advertising or third-party behavioral tracking cookies on this website.

F. Website Analytics

• We may review aggregate, anonymous server access logs (such as browser type, operating system, and pages visited) solely to maintain system security, monitor server uptime, and optimize website performance.

3. How We Use Information

We use the collected information strictly for legitimate business purposes:

1. Booking & Rental Fulfillment: Managing jewellery reservations, scheduling pickup/delivery dates, confirming availability, and processing returns.
2. Customer Service: Responding promptly to your pricing, packaging, and availability inquiries via phone and WhatsApp.
3. Notifications: Sending booking confirmation notices, event date reminders, and return acknowledgments.
4. Security & Loss Prevention: Verifying customer identity to protect high-value jewellery assets against loss, theft, or unauthorized retention.
5. Platform Integrity: Protecting our website and booking infrastructure against cyber attacks, automated bots, and security vulnerabilities.

4. Sharing Information with Third Parties

We do not sell, rent, trade, or monetize your personal information to third-party advertisers or data brokers under any circumstances.

We only share limited information with trusted service partners where strictly necessary to operate our business:

• SMS & Notification Providers: Secure SMS gateway providers (e.g., Text.lk) strictly to deliver transactional booking confirmations and status alerts to your registered telephone number.
• AI Concierge Technology: Non-confidential product inquiries submitted through the chat widget are processed via Google AI Studio API through our secure server proxy. Confidential customer details and personal identities are never supplied to the AI engine.
• Legal & Regulatory Authorities: We may disclose information if required by applicable Sri Lankan laws, court orders, or law enforcement authorities in connection with fraud or theft investigations.

5. Data Security

We implement industry-standard technical and organizational security measures to protect your personal data, including:

• Transport Layer Security (TLS/HTTPS) encryption for all website communications.
• Strict HTTP security response headers, including Content Security Policy (CSP), X-Frame-Options (SAMEORIGIN), and X-Content-Type-Options (nosniff).
• Restricted server access with credentials protected by environment variables and security controls.
• Staff confidentiality protocols for managing customer booking records and identification documents.

6. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected:

• Rental Records: Retained for the duration of the active rental plus a reasonable period for accounting, tax verification, and dispute resolution.
• Identity Verification Records: Retained until the rented jewellery is fully inspected and returned in good condition, after which sensitive verification copies are securely archived or deleted.
• General Inquiries: Inquiries submitted via WhatsApp or web chat that do not result in a booking may be deleted periodically.

7. Customer Privacy Rights

In accordance with applicable privacy principles and Sri Lanka’s Personal Data Protection Act (PDPA) No. 9 of 2022, you have the following rights regarding your personal data:

• Right to Access: You may request a summary of the personal data we hold about you.
• Right to Rectification: You may request corrections to inaccurate or incomplete information.
• Right to Erasure: You may request the deletion of your personal records once your rental obligations have concluded.
• Right to Withdraw Consent: You may opt out of receiving promotional messages or WhatsApp updates at any time.

8. Third-Party Links

Our website includes links to external third-party services, such as WhatsApp (Meta) and our online shop portal. When you navigate to external platforms or interact with WhatsApp, their respective privacy policies and terms apply. We encourage you to review their privacy statements.

9. Children's Privacy

Our jewellery rental services and commercial contracts are intended for adults aged 18 and older. While children’s dance jewellery (such as Bharatanatyam and arangetram costume sets) is available for rent, all bookings, agreements, and communications must be conducted by a parent, legal guardian, or dance instructor. We do not knowingly collect personal information directly from children under 16.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory updates. Any changes will be posted directly on this page with an updated "Last Updated" date. Continued use of our website or services after updates indicates acceptance of the revised policy.