Privacy Policy

Last updated: 11 Oct 2026, 09:12 PM

Effective from: 11 Oct 2026, 09:12 PM

Privacy Policy

Last updated: 12 October 2026

Elmwood Studio respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains what information we may collect, how we use it, when it may be shared, and the choices available to you when you use our website or purchase from us.

Website: https://elmwoodstudio.lk

Contact: info@elmwoodstudio.lk

1. Information We Collect

Depending on how you use Elmwood Studio, we may collect the following categories of information.

Account Information

When you create or use a customer account, we may process information such as:

  • name;
  • email address;
  • account identifier;
  • authentication-related information.

Authentication may be provided through a third-party authentication service.

Elmwood Studio does not need to store your account password directly where authentication is handled by that provider.

Order Information

When you place an order, we may collect:

  • customer name;
  • email address;
  • telephone number;
  • billing or delivery information;
  • products ordered;
  • quantities;
  • prices;
  • customization instructions;
  • order status;
  • payment status;
  • delivery information;
  • customer communications.

Custom Order Information

For personalized or custom products, you may provide:

  • personal photographs;
  • family photographs;
  • names;
  • dates;
  • messages;
  • design references;
  • customization instructions;
  • other content required for your requested product.

Some photographs may contain identifiable people.

Please only provide photographs and content that you are authorized to use.

Payment Information

Depending on the payment method, we may process information required to verify and manage your payment.

For Bank Transfer orders, this may include:

  • transfer details supplied by you;
  • payment reference information;
  • uploaded payment receipts or screenshots;
  • payment verification status.

We do not require customers to provide online-banking passwords or similar banking credentials.

Communications

If you contact Elmwood Studio through:

  • email;
  • WhatsApp;
  • Facebook Messenger;
  • website messaging;
  • telephone;
  • social media;
  • in person,

we may retain relevant information from that communication to:

  • answer your questions;
  • prepare quotations;
  • process orders;
  • provide support;
  • maintain customer and order records.

Technical and Usage Information

When you use our website, certain technical information may be collected automatically, such as:

  • IP address;
  • browser type;
  • device type;
  • operating system;
  • pages viewed;
  • referring pages;
  • approximate location information derived from network data;
  • interaction and usage information;
  • timestamps.

2. How We Use Personal Information

We may use personal information to:

  • create and manage customer accounts;
  • process orders;
  • prepare personalized and custom products;
  • communicate about orders;
  • verify payments;
  • arrange delivery;
  • provide customer support;
  • respond to inquiries and quotation requests;
  • maintain transaction and business records;
  • prevent fraud or misuse;
  • protect website and account security;
  • troubleshoot technical problems;
  • improve our website and services;
  • understand how visitors use the website;
  • comply with legal, accounting, tax, or regulatory obligations.

We do not use customer photographs or private custom-order content for unrelated purposes without an appropriate basis or permission.

3. Custom Photographs and Reference Images

Photographs and other reference material supplied for personalized products are used to process the relevant order and provide related customer support.

These materials may be stored using service providers used by Elmwood Studio for website and media storage.

We take reasonable steps to restrict access appropriately.

Customers should not upload content that:

  • they are not authorized to use;
  • unlawfully violates another person's privacy;
  • infringes intellectual-property rights;
  • contains unlawful material.

4. Google Analytics

Elmwood Studio uses Google Analytics to understand how visitors interact with our website.

Google Analytics may collect information such as:

  • pages visited;
  • device and browser information;
  • traffic source;
  • approximate geographic information;
  • interactions with website features;
  • shopping-funnel activity.

We use this information to understand website performance and improve the customer experience.

We do not intentionally send customer photographs, payment receipts, passwords, or other sensitive custom-order content to Google Analytics.

Google's handling of information is governed by its own privacy policies and service terms.

5. Cookies and Similar Technologies

Our website may use cookies or similar technologies for purposes such as:

  • authentication;
  • account sessions;
  • security;
  • website functionality;
  • preferences;
  • analytics.

Some cookies may be necessary for the website to operate correctly.

Analytics-related technologies may be used to help us understand website usage and performance.

You can control certain cookies using your browser settings. Blocking some cookies may affect website functionality.

6. How We Share Information

Elmwood Studio does not sell personal information to advertisers.

We may share information with trusted service providers where reasonably necessary to operate the business.

These may include providers supporting:

  • website hosting;
  • authentication;
  • cloud storage;
  • analytics;
  • email delivery;
  • payment processing;
  • courier or delivery services;
  • website security and infrastructure.

These providers receive only the information reasonably necessary for the relevant service and may process it according to their own legal and contractual obligations.

We may also disclose information where reasonably necessary to:

  • comply with applicable law;
  • respond to lawful authorities;
  • enforce our rights;
  • investigate fraud;
  • protect customers, Elmwood Studio, or others.

7. Cloud and Media Storage

Elmwood Studio may use cloud infrastructure and object-storage services to store website content, product images, customer-uploaded reference material, and other operational files.

Information may therefore be processed or stored on infrastructure operated by third-party service providers.

We use reasonable technical and organizational measures intended to protect this information.

8. Authentication Services

Customer and staff authentication may be handled through a third-party authentication provider.

That provider may process information necessary to:

  • create accounts;
  • authenticate users;
  • maintain secure sessions;
  • prevent unauthorized access.

Its processing may also be subject to its own privacy policy.

9. Payment Information

Available payment methods may involve banks or external payment providers.

Those organizations may process payment-related information according to their own terms and privacy policies.

For Bank Transfer orders, Elmwood Studio may store payment confirmation information and receipts where necessary to verify payment and maintain order records.

Elmwood Studio will never ask you to provide your online-banking password.

10. Delivery Information

Where physical delivery is required, we may share information such as:

  • recipient name;
  • telephone number;
  • delivery address;
  • order or delivery reference;

with a courier or delivery provider where necessary to complete delivery.

11. Order Source Information

Elmwood Studio may record how an inquiry or order was received.

For example:

  • website checkout;
  • website messaging;
  • WhatsApp;
  • Facebook Messenger;
  • email;
  • telephone;
  • in person;
  • other referral sources.

We use this information for internal order management and to understand which sales and communication channels are most useful to customers.

12. Data Retention

We retain personal information only for as long as reasonably necessary for purposes such as:

  • completing orders;
  • providing customer support;
  • maintaining business and transaction records;
  • accounting and tax requirements;
  • dispute resolution;
  • fraud prevention;
  • legal obligations.

Different categories of information may be retained for different periods.

Custom images and files may be retained for a reasonable period to support an order, re-order, dispute, or customer-support requirement.

Where information is no longer reasonably required, we may delete, anonymize, or securely remove it where practical and subject to applicable obligations.

13. Data Security

We use reasonable technical and organizational safeguards designed to protect personal information.

These may include measures such as:

  • authenticated access;
  • restricted administrative permissions;
  • encrypted network connections;
  • secure cloud infrastructure;
  • backups;
  • access controls.

However, no internet transmission, website, or electronic storage system can be guaranteed to be completely secure.

Customers should also protect their account credentials and devices.

14. Children's Privacy

Elmwood Studio's products and website are intended for general customers and are not specifically directed toward young children.

We do not knowingly seek to collect personal information from children who are not legally able to provide it without appropriate authorization.

If you believe a child has provided personal information improperly, please contact us.

15. Your Choices and Rights

Subject to applicable law and relevant exceptions, you may contact us regarding personal information associated with you.

Depending on the circumstances, you may request that we:

  • provide information about personal data we hold;
  • correct inaccurate information;
  • update account or contact information;
  • delete certain information;
  • address concerns about how information is being used.

Some information may need to be retained where required for:

  • orders;
  • accounting;
  • fraud prevention;
  • disputes;
  • legal obligations.

To make a privacy request, contact:

info@elmwoodstudio.lk

We may need to verify your identity before processing certain requests.

16. Marketing Communications

Elmwood Studio may communicate with customers regarding their:

  • orders;
  • payments;
  • delivery;
  • custom designs;
  • customer-support requests.

If we introduce optional promotional email or marketing communications, customers will be provided with an appropriate way to manage those communications where required.

Transactional communications necessary to complete an order may still be sent.

17. Social Media

Elmwood Studio may operate accounts on social-media platforms such as Facebook, Instagram, TikTok, or other services.

If you interact with us through those platforms, information may also be processed by the relevant social-media provider according to its own privacy policy.

Information you post publicly on social media may be visible to other users.

18. External Links

Our website may contain links to websites or services operated by third parties.

Elmwood Studio is not responsible for the privacy practices of websites or services that we do not control.

We encourage you to review their privacy policies where appropriate.

19. International Processing

Some service providers used by Elmwood Studio may operate infrastructure outside Sri Lanka.

As a result, personal information may sometimes be processed or stored in other countries as part of providing services such as cloud hosting, authentication, analytics, or storage.

Where applicable, we take reasonable steps to use reputable providers and appropriate safeguards.

20. Business Changes

If Elmwood Studio is reorganized, merged, acquired, financed, or transfers part of its business, relevant business records and personal information may be transferred where reasonably necessary as part of that transaction, subject to applicable law and appropriate protections.

21. Changes to This Privacy Policy

We may update this Privacy Policy when our:

  • website;
  • services;
  • technologies;
  • business practices;
  • legal obligations

change.

The updated version will be published on this website with a revised "Last updated" date.

22. Contact Us

For questions, concerns, or privacy requests, contact:

Elmwood Studio

Website: https://elmwoodstudio.lk

Email: info@elmwoodstudio.lk