Privacy Policy
Controller: Aurax (Pvt) Ltd, trading as CeyQuills
Contact: privacy@ceyquills.com
Registered address: NO:215/3, MIHINDU MAWATHA, WARAHANTHUDUWA, MAHARA, KADAWATHA
1. Who we are
CeyQuills is a brand of Aurax (Pvt) Ltd, a company registered in Sri Lanka. We operate the website at ceyquills.com and sell Ceylon cinnamon products internationally. References to "we", "us" or "CeyQuills" in this policy mean Aurax (Pvt) Ltd.
We are the data controller for personal data collected through this site.
2. What data we collect and why
We collect personal data only when necessary to process wholesale inquiries, maintain site analytics, or update subscribers.
| Data Type | Purpose | Legal Basis |
|---|---|---|
| Name, Email, Delivery Address, Phone | To process, build, and fulfill your wholesale inquiries and quotes | Performance of contract / Pre-contractual steps |
| Company Name (Optional) | To verify B2B business structures for bulk supply and quotes | Legitimate interests |
| Email Address (Newsletter) | To send you periodic product, farm, and harvest updates | Consent (retractable at any time) |
| IP address, Browser Type, Page views | Analytics — to understand and improve website layout and speed | Legitimate interests |
| Inquiry content & Messages | To respond to custom specifications or commercial inquiries | Pre-contractual steps |
We do not collect sensitive personal data (health metrics, racial or ethnic origin, religious beliefs, political views, genetic, or biometric data).
3. Cookies
We use cookies to enhance navigation and site performance:
- Essential cookies: Required for the B2B inquiry cart and navigation state to function. These do not store identifier cookies and cannot be turned off.
- Analytics cookies: Used to understand site performance and visitor volumes. These are loaded conditionally based on your browser choices.
- No advertising tracking cookies: CeyQuills does not utilize third-party pixels, Google Ads remarketing cookies, Facebook Pixel tracking, or behavioral profiling blocks.
4. Who we share your data with
We only share data with essential processors that support logistics, communication, and web operations:
- Resend / Email Providers: Utilized for dispatching transactional inquiry notifications.
- Vercel: Our web host, transiting metadata through secure EU/US nodes.
- Freight & Shipping Carriers: Shared under contract to deliver bulk cinnamon containers (DHL, FedEx, or standard freight forwarders).
We do not sell personal data. We do not share data with marketing organizations without explicit consent.
5. International transfers
CeyQuills operates directly from Sri Lanka. Personal data collected via this site may be stored and processed on servers situated in Sri Lanka. Sri Lanka has enacted the Personal Data Protection Act (PDPA) No. 9 of 2022, securing data safety equivalents to GDPR parameters. Cross-border transfers to processors outside Sri Lanka are protected under strict standard contractual clauses.
6. How long we keep your data
- Wholesale Inquiry Records: Maintained for 7 years to align with corporate audit and taxation requirements in Sri Lanka.
- Newsletter Subscribers: Saved until you opt-out or unsubscribe.
- General Contact Inquiries: Deleted after 2 years from date of resolution.
7. Your rights
Depending on your physical location, you hold the following rights:
All Global Buyers (Sri Lanka PDPA 2022):
- Right of access — request a copy of personal information collected.
- Right to rectification — request corrections to inaccurate personal records.
- Right to erasure — request data deletion (subject to our legal audit requirements).
- Right to withdraw consent — revoke permission for updates or newsletter processing.
EU/UK Buyers (GDPR & UK GDPR):
- Right to data portability.
- Right to object to legitimate-interests processing.
- Right to lodge complaints with local data protection authorities (such as the ICO).
California Buyers (CCPA):
- Right to know what data categories are collected.
- Right to deletion.
- Right to opt-out of data sales (we do not participate in data sales).
- Right to non-discrimination for exercising privacy choices.
To submit an information access request, please contact our data team at privacy@ceyquills.com. We respond to verified requests within 21 business days in compliance with PDPA guidelines.
8. Security
We run SSL (HTTPS) encryption globally. Stored databases utilize encrypted data-at-rest keys and restricted access credentials.
9. Children
Our wholesale trade services are not designed for children under 13. We do not knowingly record data from children.
10. Changes to this policy
We update this page when operational or regulatory details change. Major updates will be broadcasted to existing trade clients.
11. Contact and complaints
Email: privacy@ceyquills.com
Post: NO:215/3, MIHINDU MAWATHA, WARAHANTHUDUWA, MAHARA, KADAWATHA