XXALAYA EDIT STORE
/// LEGAL / PRIVACY

PRIVACY POLICY.

How XALAYA Edit Store collects, uses, protects and shares customer information, and how you can make a privacy request.

Last updated: 20 October 2026

1. Who we are

XALAYA Edit Store is a freelance digital editing business in Sri Lanka. This policy explains how we handle personal information when you visit this website, contact us or place an order. We aim to handle personal data in line with Sri Lanka’s Personal Data Protection Act No. 9 of 2022.

2. Information we may collect

  • Name: your name or creator name.
  • Contact details: your WhatsApp number (shared when you message us) and an email address, if you give one.
  • Order information: the service or pack you chose, your platform (Android, iOS or PC), reference links, your ideas, deadlines, our messages with you, and the files you send (gameplay clips, photos) or we deliver.
  • Payment status: whether a payment was made, the amount, the date, the payment method type and transaction or reference numbers. If you pay through a payment provider, we receive a confirmation of payment from them.
  • Social profile information: your public username, if you contact us through TikTok.

The order form on this website does not send your details to a server we run. It prepares a WhatsApp message on your device, and you choose whether to send it.

3. Card and payment details

XALAYA Edit Store does not collect, see or store your full card number, CVV/CVC code, card PIN or online banking passwords.

If online card payments are offered, you enter your card details directly on the secure payment page of a licensed third-party payment provider (such as PayHere). That provider processes and protects your card data under its own security standards and privacy policy. We only receive the payment result and limited transaction details, such as the amount, a reference number and whether the payment was successful.

We will never ask you to send card details, CVV codes, PINs or one-time passwords by WhatsApp, TikTok, email or this website.

4. Why we use your information

  • to understand, confirm and complete your order;
  • to verify your payment and confirm the order;
  • to deliver your files and give revisions and support;
  • to deal with cancellations, refunds, disputes and chargebacks;
  • to keep basic business and accounting records required by law;
  • to show finished work in our portfolio, only as described in our Terms and never with your contact details.

We do not sell your personal information. We do not send marketing messages unless you ask for them.

5. When we may share information

  • Payment providers: when you pay online, your payment is handled by the payment provider (such as PayHere) and your bank. We may share your name, contact details, the order amount and the order reference with them to process the payment, issue a refund, prevent fraud or respond to a dispute or chargeback.
  • Communication and file-sharing services: our messages and file transfers go through services such as WhatsApp and file-sharing links. These services handle data under their own privacy policies.
  • Legal reasons: when the law requires it, or a lawful request from a court or authority in Sri Lanka requires it, or when we need to protect our legal rights.

We do not share your information with anyone else without your permission.

6. How we protect your information

  • We only collect what we need to complete your order.
  • Order messages and files are kept on password-protected devices and accounts that only the store owner can access.
  • This website is served over HTTPS (encrypted connection).
  • Card payments are handled only by the payment provider, never by us (see section 3).

No system is completely secure, but we take reasonable steps to protect your information. If a security problem affects your personal information, we will tell you as required by law.

7. How long we keep information

  • Your source files and delivered edits: kept for up to 60 days after delivery, so we can handle revisions and support. After that they are deleted, unless you ask us to keep them or they are part of our portfolio with your permission.
  • Order and payment records (name, contact, order details, amount, payment status, reference numbers): kept as long as needed for accounting, tax, refunds and disputes, normally up to 6 years.
  • Messages: kept while they are needed for your order and support, then deleted when no longer needed.

8. Your privacy rights and requests

You can ask us to:

  • tell you what personal information we hold about you and give you a copy;
  • correct wrong or incomplete information;
  • delete your information, where we are not legally required to keep it;
  • stop using your work in our portfolio;
  • stop or limit other uses of your information, where the law allows.

To make a request, contact us on WhatsApp at +94 71 755 6749 and include the words “Privacy request”. We may ask you to confirm your identity first. We aim to respond within 14 days. If you are not satisfied with our answer, you can contact the Data Protection Authority of Sri Lanka.

9. Cookies and browser storage

This website does not use advertising or tracking cookies. It uses your browser’s local storage only to remember your language choice (English or Sinhala), and for the demo login page, which saves demo account details on your device only. You can clear this storage at any time in your browser settings. Links to TikTok, WhatsApp or a payment provider take you to their websites, which have their own privacy and cookie policies.

10. Younger customers

If you are under 18, please get a parent or guardian’s permission before placing an order or making a payment.

11. Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with its “last updated” date.