Legal
Privacy Policy
Last updated: 1 July 2026
1. Introduction
Our boutique (operated by NIOLLA (Pvt) Ltd, referred to as "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or make a purchase from us. By using our website and services you agree to the practices described here.
2. Information We Collect
We collect information you provide directly — your name, email address, phone number, delivery address, and payment details when you create an account or place an order. We also automatically collect usage data including your IP address, browser type, pages visited, device identifiers, and referring URLs through cookies and similar technologies when you browse the site.
3. How We Use Your Information
We use your information to process and fulfil your orders; send order confirmations, shipping updates, and delivery notifications by email and push notification; manage your account, wishlist, and loyalty points; personalise your experience with product recommendations; respond to customer support queries; detect and prevent fraud; and, where you have consented, send marketing communications about new arrivals, private sales, and member benefits.
4. Cookies & Tracking
We use first-party cookies to keep you signed in, remember your shopping bag and theme preference, and analyse site performance. Third-party analytics and advertising cookies are only placed with your consent. You may manage cookie preferences at any time via our Cookie Policy page or through your browser settings.
5. Data Sharing
We share your data only as necessary: with delivery partners and courier services to fulfil your orders; with payment processors Stripe and PayHere under their respective privacy policies; with cloud infrastructure providers (Amazon Web Services) under strict data-processing agreements; and when required by Sri Lankan law or to protect our legal rights. We do not sell your personal data to third parties, ever.
6. Data Retention
We retain your account and transaction records for seven years to comply with Sri Lankan financial and tax regulations. Inactive accounts with no transaction history may be deleted after three years of inactivity following advance notice to you. You may request deletion of non-statutory data at any time by contacting us.
7. Your Rights
Subject to applicable law, you have the right to access the personal data we hold about you; request correction of inaccurate information; request deletion of your data where we have no legal basis for retention; object to or restrict certain processing; and withdraw marketing consent at any time via your account preferences or the unsubscribe link in any email. To exercise any of these rights, contact us at privacy@sola.lk.
8. International Transfers
Your data may be processed in countries outside Sri Lanka, including the United States where our cloud infrastructure (AWS) operates. We ensure all such transfers are protected by appropriate safeguards including standard contractual clauses and the data protection commitments of our sub-processors.
9. Security
We implement industry-standard security measures including TLS/SSL encryption in transit, database encryption at rest, and role-based access controls. Payment card data is never stored on our servers — it is processed entirely by our PCI-compliant payment providers.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and, where required, by email. The "Last updated" date at the top of this page always reflects the most recent revision.
11. Contact Us
For questions or concerns about this Privacy Policy, contact our Data Protection team at privacy@sola.lk or write to NIOLLA (Pvt) Ltd, Colombo, Sri Lanka. For urgent matters, our customer care team is available via the Style Assistant on this website or by phone at +94 77 665 1638.