Privacy Policy

Baby Boat is a Sri Lankan baby-products shop trading at babyboat.lk. This page explains what we collect when you use the site, why we collect it, and who else sees it.

You can browse the whole shop — categories, products, cart — without signing in or telling us anything about yourself.

We collect information when you sign in and place an order:

• From your Google account, when you sign in: your name, email address and profile picture. We use Google sign-in so that there is no password for you to create and none for us to store.
• Your mobile number, which we ask for at checkout. We need it because every order is confirmed by a phone call before we send it. We save it to your profile so you are not asked again.
• Your delivery address, and the point you pick on the map. The map point is what we measure the delivery distance from, which is what sets the delivery fee.
• Your orders: what you bought, the prices at the time, the total, and how you chose to pay.
• Notes we make while handling your order — for example that we called and could not reach you, or that you asked us to deliver after 5pm.

No card details, ever. We pay for nothing through this site — the three ways to pay are cash on delivery, cash on pickup, and a bank transfer you make yourself from your own bank. There is no card form anywhere on this site, and no card number, CVV or PIN ever reaches us.

We also do not collect passwords — there are none — and we do not run advertising trackers or analytics scripts on the site.

• To confirm, pack, deliver and — if it comes to it — refund your order.
• To call or message you about an order you have placed.
• To show you your own order history when you are signed in.
• To work out the delivery fee for your address.

We do not send marketing emails or promotional SMS. If that ever changes, it will be something you opt into, and this page will say so first.

• A sign-in cookie, set when you sign in with Google, so the site knows it is you on the next page. Signing out deletes it.
• Your cart, kept in your own browser’s local storage. It never reaches us until you place the order.
• A preview cookie, only while the shop is still pre-launch, for people we have given an early-access link to.

No advertising or tracking cookies are set.

• Google — the site runs on Google Firebase, which handles sign-in and stores the database. Google Maps is used for the address search and to measure the delivery distance.
• Whoever delivers your order — they get your name, address and phone number, because they cannot deliver without them.
• Our bank, if you pay by bank transfer, sees what your own bank sends with the transfer.

We do not sell your information, and we do not share it with anyone else unless the law requires it.

Because we use Google’s services, your information is stored on Google servers outside Sri Lanka.

Order records are kept as long as we need them for our accounts and for handling returns or disputes. Your profile — name, email, phone, saved address — is kept while your account exists. Ask us to delete it and we will, apart from the order records we are required to keep.

You can ask us what we hold about you, ask us to correct it, or ask us to delete your account. Contact us using the details below and we will sort it out.

We sell products for babies, but the shop is for adults. Accounts and orders are for people 18 and over, and we do not knowingly collect information from children.

If this policy changes we will update this page and the date at the top. Changes apply from the date they appear here.

Questions about any of this, or about your own information: