Privacy Policy

This Privacy Policy explains how The Ceylon Ultrafine Mill (Pvt) Ltd. collects, uses, stores, shares, and protects customer information when customers visit our website, create an account, place an order, make a payment, contact us, or use our online services.

By using our website, creating an account, placing an order, or providing personal information to us, you agree to the terms of this Privacy Policy.

Effective Date: 11 June 2026

Company Information

This website is owned and operated by:

The Ceylon Ultrafine Mill (Pvt) Ltd.
No. 17/30, 10th Mile Post,
Katuwawala, Boralesgamuwa,
10290, Sri Lanka.

Website: https://tcum.lk/
Email: info@tcum.lk
Phone: (+94) 11 251 6570
Opening Hours: Monday to Friday, 8:00 AM – 5:00 PM

Information We Collect

We may collect personal information from customers when they visit our website, create an account, place an order, make a payment, contact us, use our WhatsApp chat, or request customer support.

The information we may collect includes:

• Customer name
• Email address
• Contact number
• Delivery address
• Billing address, where applicable
• Account registration details
• Order details
• Payment confirmation details
• Delivery instructions
• Customer support messages
• Return, refund, replacement, or complaint details
• Photos or proof submitted for damaged goods, incorrect items, missing items, packaging defects, or visible quality issues

We may also collect limited technical and website usage information, including:

• IP address
• Browser type
• Device information
• Website pages visited
• Date and time of website access
• Cookie information
• Website interaction and analytics data

We do not normally collect NIC numbers, date of birth, or business registration details from customers through the website unless required for a specific lawful business, payment, delivery, or regulatory purpose.

Customer Accounts

Customers may create accounts on our website to make ordering easier and to manage their purchase-related information.

When a customer creates an account, we may collect and store account-related information such as name, email address, contact number, delivery details, order history, and login-related details.

Customers are responsible for keeping their account login details confidential. Customers must inform us immediately if they believe their account has been accessed without permission.

How We Use Customer Information

We collect and use customer information for the following purposes:

• To create and manage customer accounts
• To process online orders
• To confirm payments
• To arrange delivery
• To contact customers regarding orders
• To provide customer support
• To handle returns, refunds, replacements, and complaints
• To improve our products, website, and customer service
• To send order updates and delivery updates
• To send promotional messages, offers, or product updates where permitted
• To prevent fraud, misuse, or unauthorized transactions
• To maintain business records
• To comply with legal, accounting, tax, and regulatory requirements

We will not use customer information for unrelated purposes without a valid reason or customer consent where required.

Payment Information

Online payments on our website are processed through OnePay.

We do not store full card numbers, CVV numbers, or sensitive card authentication details on our website.

Payment-related information is processed securely by OnePay according to its own security standards, terms, and privacy practices.

We may receive limited payment confirmation details such as transaction status, payment reference, order value, and payment confirmation information for order processing, accounting, refund, and customer support purposes.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve website functionality, customer experience, website performance, analytics, and marketing activities.

Cookies are small files stored on a customer’s device when visiting a website.

We may use cookies for:

• Website functionality
• Customer account login
• Shopping cart operation
• Checkout process
• Website security
• Website performance monitoring
• Analytics
• Advertising and remarketing
• Customer experience improvement

Customers may disable cookies through their browser settings. However, some parts of the website may not function properly if cookies are disabled.

Analytics, Meta Pixel, and WhatsApp Chat

Our website may use third-party tools such as analytics tools, Meta Pixel, and WhatsApp chat features.

These tools may collect information about how customers use our website, interact with advertisements, communicate with us, or engage with our products and services.

We may use this information to:

• Understand website visitor behaviour
• Improve website performance
• Measure advertising effectiveness
• Improve customer service
• Provide better product recommendations
• Respond to customer inquiries through WhatsApp
• Send relevant promotional updates where permitted

Third-party platforms such as Meta, analytics providers, and WhatsApp may process information according to their own privacy policies and terms.

Marketing Communications

We may contact customers by phone, SMS, WhatsApp, or email for order-related communication, payment confirmation, delivery updates, customer support, and service-related matters.

We may also send promotional messages, product updates, offers, or marketing communications through email, WhatsApp, SMS, or similar communication methods where permitted.

Customers may request to stop receiving marketing messages by contacting us through:

Email: info@tcum.lk
Phone: (+94) 11 251 6570

Please note that even after opting out of marketing messages, customers may still receive order-related, payment-related, delivery-related, or customer service communications.

Delivery and Courier Partners

We deliver products to selected areas in Sri Lanka.

Our delivery company or courier partner may change from time to time. Since a delivery partner has not yet been finalized, we may use suitable courier companies, delivery partners, or logistics service providers depending on customer location and business requirements.

To deliver customer orders, we may share necessary delivery information with courier or delivery partners, including:

• Customer name
• Delivery address
• Contact number
• Order details required for delivery
• Delivery instructions, if provided

Delivery partners are expected to use this information only for delivery-related purposes.

Sharing of Personal Information

We do not sell customer personal information to third parties.

However, we may share customer information with trusted third parties where necessary for business, service, legal, or operational purposes, including:

• OnePay payment gateway
• Banks or payment service providers
• Courier and delivery partners
• Website hosting providers
• IT and technical service providers
• Analytics and advertising platforms
• WhatsApp or communication service providers
• Accounting, audit, tax, or legal advisors
• Government, regulatory, or law enforcement authorities, where required by law

We will only share information that is reasonably necessary for the relevant purpose.

Food Product Complaints, Returns, and Refunds

When customers submit complaints, return requests, refund requests, or replacement requests, we may collect order details, proof of purchase, photos, and other relevant information to verify the issue.

This information will be used to review and process the customer’s request according to our Shipping & Returns Policy and Refund Policy.

For food safety and hygiene reasons, opened, used, repacked, improperly stored, or moisture-exposed food products may not be eligible for return or refund.

B2B and Wholesale Customers

For B2B and wholesale customers, we may collect business-related information required for quotations, orders, invoices, delivery notes, payment follow-ups, and business communication.

This may include:

• Business name
• Business address
• Contact person’s name
• Contact number
• Email address
• Delivery details
• Invoice details
• Payment records
• Delivery note details

We do not normally collect NIC numbers, date of birth, or business registration details from B2B customers unless specifically required for a lawful business or regulatory purpose.

B2B sales and wholesale deliveries may be subject to separate invoice and delivery note conditions.

Data Storage and Security

We take reasonable steps to protect customer information from unauthorized access, misuse, loss, alteration, or disclosure.

We may use security measures such as:

• Secure website access
• Limited access to customer records
• Secure payment processing through OnePay
• Website and server security controls
• Internal data handling procedures
• Account access controls

However, no website, online platform, or electronic storage method can be guaranteed to be completely secure. Customers are responsible for keeping their account login details and devices secure.

Data Retention

We will keep customer information only for as long as necessary for the purposes mentioned in this Privacy Policy.

In general, we may retain customer account details, order records, payment confirmation details, delivery records, complaint records, and customer support records for up to 1 year from the relevant transaction or interaction.

Certain records may be retained for a longer period if required for legal, accounting, tax, audit, dispute resolution, fraud prevention, or regulatory purposes.

When personal information is no longer required, we may delete, anonymize, or securely store it according to our internal procedures and applicable legal requirements.

Customer Rights

Customers may contact us to request:

• Access to their personal information
• Correction of inaccurate information
• Updating of account, contact, or delivery details
• Deletion of personal information, where legally possible
• Withdrawal of marketing consent
• Information about how their personal information is used

Some requests may be subject to identity verification, order verification, legal obligations, accounting requirements, or business record requirements.

Accuracy of Customer Information

Customers are responsible for providing accurate and complete information when creating an account, placing an order, making a payment, or requesting delivery.

The Ceylon Ultrafine Mill (Pvt) Ltd. will not be responsible for delivery delays, failed deliveries, incorrect deliveries, payment issues, or customer support issues caused by incorrect or incomplete customer information.

Children’s Privacy

Our website and products are intended for general customers and are not specifically directed at children.

If a minor uses our website, it should be done with the consent and supervision of a parent or legal guardian.

External Links

Our website may contain links to third-party websites, payment gateways, social media pages, WhatsApp, or other external platforms.

We are not responsible for the privacy practices, content, or security of external websites or platforms. Customers are advised to read the privacy policies of those external platforms before providing personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any changes will be published on this page with the updated effective date. Customers are encouraged to review this Privacy Policy periodically.

Contact Us

If you have any questions, requests, or concerns regarding this Privacy Policy or how we handle personal information, please contact us:

The Ceylon Ultrafine Mill (Pvt) Ltd.
No. 17/30, 10th Mile Post,
Katuwawala, Boralesgamuwa,
10290, Sri Lanka.

Website: https://tcum.lk/
Email: info@tcum.lk
Phone: (+94) 11 251 6570
Opening Hours: Monday to Friday, 8:00 AM – 5:00 PM