Loader

Privacy Policy

Athwela Marketplace (athwelamarket.com) Operated by The Grassrooted Trust (Guarantee) Limited 365/1C Bataketiya Road, Udumulla, Mulleriyawa 10620, Sri Lanka hello@athwelamarket.com · WhatsApp +94 76 387 7250

Last updated: 10/07/2026

1. Who We Are

Athwela Marketplace is operated by The Grassrooted Trust (Guarantee) Limited (“Grassrooted,” “we,” “us,” “our”), a registered organization based in Sri Lanka. Athwela Marketplace is Grassrooted’s economic-independence initiative, connecting Sri Lankan artisans and community members with buyers locally and internationally.

For the purposes of this policy, The Grassrooted Trust (Guarantee) Limited is the data controller responsible for the personal information collected through athwelamarket.com.

2. Information We Collect

We collect the following categories of information:

  1. Information you give us directly
  • Name, delivery address, phone number, and email address, provided when you place an order or contact us
  • Order details and purchase history
  • Messages you send us via WhatsApp (+94 76 387 7250) or email (hello@athwelamarket.com)
  1. Payment information We do not store your full payment card details on our servers. Depending on how you pay, information is handled as follows:
  • Cash on delivery: collected in person by our third-party logistics/delivery partner at the time of delivery.
  • Direct bank transfer: you provide payment confirmation directly to us; we retain transaction references for order matching, not your banking credentials.
  • PayPal: your payment is processed directly by PayPal. We receive confirmation of payment and your PayPal-registered name/email, but not your card or bank details. PayPal’s own privacy policy governs how they handle your data.
  • KokoPay (not yet live): when enabled, payments will be processed by KokoPay under their own privacy and security terms; we will update this policy before that option goes live.
  1. Information collected automatically
  • Our store runs on WooCommerce, and we use the analytics tools built into that platform to understand site traffic – such as pages visited, products viewed, and general visitor activity – so we can improve the store. This data is processed within our own store platform rather than shared with an external advertising network.
  • If you interact with us via WhatsApp, your phone number and message content are also subject to WhatsApp’s (Meta’s) own privacy policy, as messages are transmitted through their platform.

3. Cookies

Our website uses cookies for:

  • Essential functions: keeping your cart working and the site operating correctly.
  • Analytics: WooCommerce’s built-in analytics tools, to understand how visitors use the site.

You can control or disable cookies through your browser settings. Disabling cookies may affect site functionality, such as your cart or checkout.

4. How We Use Your Information

We use the information we collect to:

  • Process, fulfil, and deliver your order
  • Communicate with you about your order (confirmations, shipping updates, delivery issues)
  • Respond to enquiries and provide customer support
  • Improve our website and products based on aggregate traffic and engagement data
  • Meet legal, tax, and accounting obligations in Sri Lanka

We do not sell your personal information to third parties, and we do not send marketing communications.

5. Who We Share Information With

We share information only as necessary to operate the business:

  • Delivery/logistics partners, to fulfil and deliver your order (including collecting cash-on-delivery payments where applicable)
  • Payment processors (PayPal, and KokoPay once live), to process payment
  • Professional advisors (e.g. accountants, legal counsel), where necessary for our operations
  • Authorities, where required by Sri Lankan law or a valid legal request

We do not share your data with third parties for their own independent marketing purposes.

6. International Visitors and Orders

Athwela Marketplace ships apparel, mugs, and decoration items internationally (food items are restricted to delivery within Sri Lanka – see our Return & Refund Policy). If you are ordering from outside Sri Lanka, your personal information will be transferred to and processed in Sri Lanka, where our servers, logistics partners, and business operations are based, as well as by international payment processors (PayPal), which may process data in other countries including the United States.

By using our site and placing an order, you consent to this transfer and processing. If you are located in the European Economic Area, United Kingdom, or another jurisdiction with its own data protection framework, you may have additional rights under that jurisdiction’s law; please refer to your jurisdiction’s law, though our primary compliance framework is Sri Lankan law (see Section 8).

7. Data Retention

We retain order and customer information for as long as necessary to fulfil the purposes described in this policy, including meeting tax, accounting, and legal record-keeping obligations under Sri Lankan law, after which it is deleted or anonymised.

8. Your Rights

Sri Lanka’s Personal Data Protection Act, No. 9 of 2022 (as amended) establishes rights for individuals regarding their personal data, with provisions coming into effect in phases (with substantive obligations expected to take full effect during 2027 and 2028, overseen by Sri Lanka’s Data Protection Authority). Subject to that framework, you may contact us to:

  • Ask what personal information we hold about you
  • Ask us to correct inaccurate information
  • Ask us to delete your information, where we are not required to retain it for legal or accounting reasons

To exercise any of these rights, email hello@athwelamarket.com. We will respond within a reasonable time.

9. Children’s Privacy

Athwela Marketplace is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Changes to This Policy

We may update this policy from time to time, including as Sri Lanka’s Personal Data Protection Act provisions come into force and as our payment options (e.g. KokoPay) go live. We will post the updated policy on this page with a new “Last updated” date. Continued use of the site after changes are posted constitutes acceptance of the revised policy.

11. Contact Us

Questions about this policy or your personal information: The Grassrooted Trust (Guarantee) Limited 365/1C Bataketiya Road, Udumulla, Mulleriyawa 10620, Sri Lanka Email: hello@athwelamarket.com WhatsApp: +94 76 387 7250