Last updated: 09/10/2026
This policy explains what personal information Primal Gear collects, why we collect it, and what control you have over it.
Who we are
Primal Gear is a Sri Lankan gym and powerlifting apparel and accessories brand, operated by PRIMAL GEAR (PVT) LTD (PV 00351801), 20A, Nanda Mawatha, Nugegoda, 10250.
Under Sri Lanka’s Personal Data Protection Act, No. 9 of 2022, we are the controller of the personal data described below. You can reach us at theprimalgear@gmail.com or +94 783 374 904.
What we collect
When you order: your name, delivery and billing address, email address, phone number, and the details of what you bought.
We never see or store your card number. Payments are handled by [PAYMENT GATEWAY], who process your card details on their own systems. We receive only confirmation of whether the payment succeeded and a transaction reference.
If you create an account: your login details (your password is stored encrypted), saved addresses, and order history. You can view and edit these any time by logging in.
If you contact us: the messages you send us by email, WhatsApp or social media, so we can reply and follow up.
When you browse: your IP address, device and browser type, and the pages you visit. This is collected through cookies.
If you subscribe to emails: your email address and a record of your consent.
Why we use it
- To process, pack and deliver your orders, and handle returns or exchanges
- To answer your questions and resolve problems with an order
- To keep the site secure and prevent fraud
- To meet tax and record-keeping obligations under Sri Lankan law
- To send you marketing emails, if you have opted in
- To measure and improve our advertising, if you have accepted advertising cookies
Advertising and the Meta Pixel
We advertise on Facebook and Instagram. Our site uses the Meta Pixel and Meta’s Conversions API, which record actions such as viewing a product, adding to cart or completing a purchase, and send them to Meta Platforms, Inc.
The information sent may include the action taken, product details, order value, your IP address and browser information, and a scrambled (hashed) version of your email address or phone number. Meta may match this against its own records to report how our ads perform, and to show our ads to you or to people similar to you.
Primal Gear and Meta act as joint controllers for this collection. Meta’s own later use of the data is governed by its privacy policy at facebook.com/privacy/policy.
These tools run only if you accept advertising cookies. You can change your choice at any time at [COOKIE SETTINGS LINK], and you can control how Meta uses your data in your Facebook or Instagram ad settings.
Cookies
Some cookies are essential: they remember what’s in your cart, keep you logged in, and secure the checkout. These cannot be turned off.
Others are optional: cookies that help us understand how the site is used, and the advertising cookies described above. You choose these when you first visit, and you can change your choice any time at [COOKIE SETTINGS LINK].
Who we share your information with
We do not sell your personal data. We share it only with:
- [PAYMENT GATEWAY] — to take payment
- Citypak – IML Delivery Systems (Pvt) Ltd — your name, address and phone number, so they can deliver your order
- Hostinger — our website and database run on their servers
- Meta Platforms, Inc. — advertising data, where you have consented
- theprimalgear@gmail.com — to send marketing emails you have opted in to
- Our accountants, and government authorities where the law requires it
Information leaving Sri Lanka
We ship within Sri Lanka only, but some of the services above store data abroad. Meta processes data in the United States, and our hosting and email providers may use servers outside Sri Lanka. Where that happens, we rely on the contractual and security safeguards those providers offer.
How long we keep it
- Order and payment records: 5 years, as required for tax purposes
- Account details: until you ask us to close your account
- Messages to us: 5 years from your last contact
- Marketing contacts: until you unsubscribe, after which we keep a record of your opt-out so we don’t email you again
Keeping it safe
The site runs over an encrypted connection, administrative access is restricted, and card data never reaches our servers. No system is completely secure. If a breach occurs that is likely to affect you, we will tell you and notify the Data Protection Authority.
Your rights
You can ask us to:
- Give you a copy of the personal data we hold about you
- Correct anything that is wrong or incomplete
- Delete your data, where we are not legally required to keep it
- Stop or limit how we use it
- Withdraw your consent for marketing or advertising cookies at any time
Email theprimalgear@gmail.com and we will respond within the period the law allows. We may ask you to confirm your identity first, so we don’t give your information to someone else. If you are unhappy with how we have handled your data, you can complain to the Data Protection Authority of Sri Lanka.
Marketing emails
Every marketing email includes an unsubscribe link, and clicking it stops them immediately. You will still receive order confirmations and delivery updates, because those are part of completing your purchase.
Children
Our store is not aimed at children, and we do not knowingly collect personal data from anyone under 18.
Changes to this policy
We will update this page when our store or the law changes. The date at the top shows when it was last revised.