1. Who we are
Mist & Ember Exports is a Sri Lankan export company specializing in authentic Ceylon tea, cinnamon, coconut, and other local products. References to “Services” include our website, contact forms, and related communications.
2. Information we collect
Information you provide
- Contact details (name, email, phone, company, country).
- Enquiry data (product interest, quantity, specifications, attachments).
- Communications with our team (emails, messages, call notes).
Information we collect automatically
- Usage data (pages visited, referring/exit pages, timestamps, clickstream).
- Device/technical data (IP address, browser type, language, screen size).
- Approximate location based on IP.
- Cookies and similar technologies (see Section 5).
Information from third parties
- Analytics providers and ad networks (aggregated usage insights).
- Logistics partners (shipment and compliance information).
3. How we use information
- Respond to enquiries and provide quotations or proposals.
- Process, fulfill, and manage export orders and customer relationships.
- Operate, maintain, and improve the website and Services.
- Ensure quality, safety, compliance, and traceability.
- Communicate updates, notices, or changes to our Services or policies.
- Detect, prevent, and address fraud, security, or technical issues.
4. Legal bases for processing (GDPR)
- Consent (e.g., marketing emails).
- Contract (to respond to enquiries or deliver requested Services).
- Legitimate Interests (website operations, analytics, security).
- Legal Obligations (tax, customs, compliance).
7. Data retention
We keep personal data only as long as necessary for the purposes described in this policy, to comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and context (e.g., enquiry records vs. compliance documentation).
8. International transfers
We operate globally. When transferring personal data internationally, we use appropriate safeguards (such as contractual clauses) in accordance with applicable laws.
9. Your rights
Subject to local laws, you may have rights to access, correct, delete, or restrict the processing of your personal information; to object to processing; to data portability; and to withdraw consent at any time.
To exercise these rights, contact us at privacy@mistandember.com. We may need to verify your identity before responding.
10. Security
We implement administrative, technical, and physical safeguards designed to protect personal data. However, no method of transmission or storage is completely secure.
11. Children’s privacy
Our website and Services are not directed to children under the age of 16, and we do not knowingly collect personal information from children.
12. Third-party links
Our website may contain links to third-party sites or services that we do not control. We are not responsible for their content or privacy practices.
13. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top indicates the latest revision. Significant changes will be communicated where required by law.
14. Contact us
If you have questions about this policy or our privacy practices, please contact:
For general site information, see our Terms of Use.