Privacy Policy

Energywise (Pvt) Ltd (“we”, “us”, “our”) operates CHiQ (www.chiq.lk). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, purchase our goods or services, or otherwise interact with us, in compliance with applicable laws including the Personal Data Protection Act No. 9 of 2022 of Sri Lanka.

1. Corporate Information

Trading name / Business name: CHiQ, imported and supplied by Energywise (Pvt) Ltd.
Address: No 1/B/2, Horana Road, Kahathuduwa, Sri Lanka.
Telephone numbers: +94 11 260 6858; +94 70 790 9070
Email address: info@chiq.lk
Country of domicile: Sri Lanka

2. What Personal Data We Collect

We collect various types of personal data from you through your interactions with us, including but not limited to:

Identity data: name, date of birth, national identity number or other government ID (if required).
Contact data: postal address, email address, telephone/mobile number.
Payment data: credit/debit card details, banking information, or other payment method details.
Transaction data: details about purchases of goods or services.
Technical & usage data: IP address, device information, browser type, operating system, pages visited, date/time of visit, referral source.
Service request or maintenance data: when you request installation, service, or maintenance, we may collect location of installation, model, serial number, etc.

3. Purpose of Collecting Personal Data & Legal Basis

We use your personal data for the following purposes:

To process and fulfil your purchases, including payment, delivery, installation and any after-sales service.
To provide customer support and respond to your inquiries or service requests.
To send you updates about order status, warranty, recall or safety notices.
To send marketing communications (only with your consent, where required).
To improve our products, services, website, and promotional offers.
To maintain records for legal, regulatory, or tax purposes.
To protect our business and prevent fraud, misuse, or breach of security.

Where required by law, we will obtain your consent for processing. In other cases, processing is necessary for contract performance, legal compliance, or our legitimate interests (such as improving our services, safeguarding security).

4. How We Collect Data

When you place an order or make a purchase.
When you register an account or request a service/installation.
When you contact us via email, telephone, service request form, or in person.
Through your use of our website (cookies, log files, analytics).

5. Sharing / Disclosure of Personal Data

We may share your personal data with:

Our employees, contractors and service providers (for example, delivery, installation, payment processing, customer support).
Third parties as required by law (e.g. government authorities) or court orders.
Business partners with your consent or where required to fulfill a contract.
In the event of merger, acquisition, or sale of company assets, personal data may be one of the transferred assets (subject to confidentiality).

We do not sell your personal data to unrelated third parties for their own marketing use.

6. Data Retention

We will retain your personal data only as long as necessary for the purposes set out above, unless a longer period is required by law (for example for tax, warranty or record-keeping). After that, we will securely delete or anonymize your data.

7. Security of Data / Transaction Security

We implement reasonable physical, technical, and organizational measures to protect your personal data, including:

Use of secure server connections (SSL / TLS) for transmission of sensitive data including payment information.
Encryption of stored sensitive data where applicable.
Access controls: only authorized personnel may access your personal data, and only when necessary.
Regular security audits and maintenance of systems.

Though we strive to protect your data, no system is completely foolproof. We cannot guarantee absolute security of data transmitted over the internet.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Enable and improve functionality of our website.
Analyze usage, for site performance, improvement, and diagnostics.
Serve personalized content or marketing, if permitted.

You may manage or disable cookies via your browser settings, though disabling may affect how parts of the site function.

9. Your Rights

Under the PDPA of Sri Lanka and general data protection best practice, you have rights including:

Access: request a copy of personal data we hold about you.
Correction: request correction of inaccurate or incomplete data.
Deletion: request erasure of your personal data (subject to legal obligations).
Restriction: request restriction of certain processing.
Objection: object to processing for marketing or direct-marketing.
Withdraw consent: where processing is based on consent, you may withdraw it.

To exercise any of these rights, contact us at info@chiq.lk or via the contact details above. We may require verification of your identity before acting on any request.

10. International Transfer

While our operations are primarily in Sri Lanka, some of your data may be transferred to or stored in servers or systems located in other jurisdictions (for example our service providers) which may have different data protection laws. We will ensure that such transfers are protected by appropriate safeguards.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on our website and change the “Last updated” date. We encourage you to check periodically. Changes will take effect once posted.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact:

Energywise (Pvt) Ltd
Address: No 1/B/2, Horana Road, Kahathuduwa, Sri Lanka
Telephone: +94 11 260 6858; +94 70 790 9070
Email: info@chiq.lk