Last updated: December 09, 2025

Welcome to White Secret. This Privacy Policy describes how we — White Secret (“the Company”, “We”, “Us”, or “Our”) — collect, use, disclose, and safeguard Your information when You visit or use our website https://thewhitesecret.com/

(the “Service”). By accessing or using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

1. Interpretation and Definitions

Interpretation

Words beginning with a capital letter have defined meanings. Those definitions apply whether the term appears in singular or plural form.

Definitions

For the purposes of this Policy:

  • Account – a unique account created for You to access parts of the Service.
  • Company – White Secret (thewhitesecret.com).
  • Cookies – small files placed on Your device by a website, containing details of Your browsing history on that site among other uses.
  • Country – refers to Sri Lanka (or adapt to your country if different).
  • Device – any device capable of accessing the Service (e.g. computer, smartphone, tablet).
  • Personal Data – any information that identifies or can identify an individual.
  • Service – the website thewhitesecret.com.
  • Service Provider – third-party companies or individuals employed by or contracted with the Company to facilitate the Service, perform Service-related tasks, or help analyze how the Service is used.
  • Third-Party Social Media Service – any social media network or platform used to sign in or create an account to use the Service (e.g. Google, Facebook, others).
  • Usage Data – data collected automatically when using the Service or from the infrastructure of the Service (e.g. IP address, browser type, visited pages, visit times).
  • You – the individual or entity accessing or using the Service.

2. What Data We Collect

Personal Data

When You use our Service or create an Account, we may collect personally identifiable data, such as:

  • Your first name and last name
  • Email address
  • Phone number
  • Billing/shipping address (city, state/province, postal code, country)
  • Other information you provide voluntarily (e.g., contact form, purchase details)

Usage Data & Automatically Collected Information

When You use the Service, we may automatically collect:

  • Your IP address
  • Browser type, version, and settings
  • The pages you visit on our site
  • Dates and times of your visits
  • Time spent on pages
  • Device type, operating system, unique device identifiers (if using a mobile device)
  • Other diagnostic and analytics data

Social Login & Third-Party Data

If You choose to register or log in via a Third-Party Social Media Service, we may collect information from that account — such as name, email address, profile picture, or other data depending on your permission settings.

3. How We Use Your Data

We may use Personal Data and Usage Data for:

  • Providing and maintaining the Service, including user account management
  • Processing and fulfilling orders, payments, shipping, and related customer support
  • Communicating with You via email, phone, SMS, or other methods about order status, updates, promotions, security alerts, or general customer service
  • Personalizing your experience, e.g., remembering preferences, language, or login info
  • Marketing and promotional communications, if You have opted in
  • Analyzing usage trends and Service performance, to improve our website, services, and offerings
  • Business operations, including fraud prevention, legal compliance, and record keeping
  • Business transfers, such as mergers or acquisitions — Your data may be among the transferred assets (if applicable)

4. Sharing Your Data

We may share Your data under limited circumstances:

  • With Service Providers — third-party companies or individuals who assist us in operating the website, handling payments, shipping orders, or performing analytics and marketing services.
  • With Affiliates or Partners — if we collaborate with other companies to offer products, promotions, or services; provided they comply with this Privacy Policy.
  • With Business Successors — in the event of a merger, acquisition, restructuring, or sale of assets. We will notify you if your data is transferred.
  • With Your Consent — whenever You give explicit permission for additional sharing.
  • If Required by Law or Legal Process — to comply with legal obligations, protect rights, investigate fraud or illegal activity, or respond to government requests.
  • For Safety and Protection — to protect the rights, property, or safety of Company, users, or the public.

We do not sell or rent your Personal Data to third parties for their marketing purposes without your explicit consent.

5. Cookies and Tracking Technologies

We use Cookies and similar technologies (e.g. web beacons, pixel tags) to:

  • Authenticate and manage user sessions
  • Remember user preferences and settings (e.g. language, login status)
  • Analyze site usage and performance
  • Provide personalized content or marketing

You can configure Your browser to reject Cookies or to alert You when Cookies are being sent. However, some parts of the Service may not function properly if Cookies are disabled.

6. Data Retention

We will retain Your Personal Data only as long as necessary to:

  • Fulfill the purposes described in this Privacy Policy
  • Comply with legal obligations (e.g. tax, accounting, consumer protection laws)
  • Resolve disputes and enforce our agreements

Usage Data may be retained longer for analysis, security, or technical purposes, unless anonymized.

7. Data Transfer & Security

Although we operate from Sri Lanka (or the country of our establishment), data may be processed or stored on servers located in other jurisdictions.
We implement appropriate technical and organizational measures to protect Your data against unauthorized access, disclosure, loss, or alteration.
However, no method of electronic transmission or storage is completely secure — absolute security cannot be guaranteed.

8. Your Rights & Choices

Depending on your location and applicable laws, You may have the right to:

  • Access the Personal Data we have about You
  • Request correction of inaccurate or incomplete data
  • Request deletion of Your Personal Data (subject to legal obligations)
  • Withdraw consent where processing is based on consent
  • Opt-out of marketing communications

To exercise these rights or for any privacy-related request, please contact us (see Contact Us section below).

9. Children’s Privacy

Our Service is not intended for individuals under the age of 13.
We do not knowingly collect or solicit personal data from anyone under 13.
If you believe that a child under 13 has provided data, please contact us for removal.

10. External Links

Our Service may contain links to external websites operated by third parties.
We are not responsible for the content, privacy practices, or data collection of those sites.
We strongly encourage you to review the privacy policies of any linked site before providing your personal information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.
When we do, we will revise the “Last updated” date accordingly.
We may notify You via email or website notice if the changes are material.
We encourage You to review this Privacy Policy periodically.

12. Contact Information

If You have any questions about this Privacy Policy or want to exercise your data rights, please contact us:

Contact Page: https://thewhitesecret.com/contact-us/

  • Phone: +94 77 762 4189‬
  • Address: No 81/1/1, Colombo, Sri Lanka 11000

By using or accessing our website, you accept and agree to the practices described in this Privacy Policy.