Privacy Policy

1. Who we are

Aaseek Multi Shop Online Store (“we”, “us”, “our”) is a small online shop that sells and delivers goods through this app and website. When you place an order, the shop is the organisation that handles your information.

Our contact details are at the end of this policy.

2. There are no customer accounts

This is worth explaining first, because it changes everything else in this policy.

You do not create an account, and you do not sign in. We have no password, no profile, and no login for shoppers. You order as a guest.

That means we cannot show you a dashboard of your order history automatically, and it also means we hold less information about you than a typical shop. To look up an order later you need both your order number and either the mobile number you ordered with or a one-time order token shown on your confirmation screen. Any one of those alone is not enough.

3. What we collect

3.1 Information you type in

We ask only for the details needed to fulfil a delivery:

• Your name
• Your mobile number, and optionally a second contact number
• Your delivery address: province, district, town, street, house or building number, and any landmark or delivery instructions you choose to add
• Anything you type into the order notes box
• If you pay by bank transfer, the transfer reference you enter

We do not ask for your location or GPS coordinates, and we do not scan your device for a device identifier. Delivery pricing is worked out from the district and town you select, not from where your phone physically is.

3.2 Information that comes with your order

• Your order number and the date and time you placed it
• The products, quantities, and prices you ordered
• The order status and its history, such as confirmed or delivered
• The payment method you chose and its status

3.3 Payment information

We record which payment method you chose and, for a bank transfer, the reference you gave us. That is all. We never ask for, receive, or store a card number, expiry date, security code, or PIN. See section 5.

3.4 Staff-only notes

Our staff can attach private operational notes to an order. These are for our internal use only, are never shown to you, and are never included in what the app returns when you look up your own order.

4. Why we use it

We use your information for these purposes and no others:

• To process and deliver your order. Your address and mobile number go to whoever prepares and delivers your delivery.
• To contact you about that order. If the shop is closed, an item is unavailable, or we need to clarify the address, we call or message the number you gave us.
• To send you order status updates, if you have turned notifications on. See section 6.
• To keep our business records. Invoices and order records are financial records we are required to keep.
• To understand how the shop is doing. We produce internal reports such as total sales, best-selling products, and which districts orders come from. These reports are built inside our own system from order records.
• To prevent fraud and abuse, including attempts to place orders using other people’s numbers.

We do not use your information for advertising. We do not build advertising profiles, and we do not sell or rent your data to anyone.

5. Payments: we never see card details

This shop does not process card payments through our systems. There is no card form in the app, and no card number, expiry date, or security code is ever transmitted to us or written to our records.

The payment methods offered are:

• Cash on delivery — you pay the person who delivers your order.
• Bank transfer — you transfer to the shop’s bank account, which we display in the app at checkout, and enter the reference so we can match it. We then confirm receipt manually.

Our staff record whether money has been received. Until we confirm it, an order is marked as awaiting verification rather than paid. We do not claim a payment has succeeded when it has not.

6. Push notifications

The app can send you notifications about your own orders. This is entirely optional, and here is exactly how it works:

• We never ask for notification permission the first time the app opens. You will only be asked after you have done something that clearly benefits from it, such as following an order.
• If you decline, we do not ask again and nothing else changes.
• What a notification contains is deliberately limited. It names your order number and its status — for example “AAS-2026-000123 — confirmed”. It does not contain your address, your phone number, or your list of items. Notifications are often read on a lock screen, and your order contains your home address.
• Notifications are only sent to the device that placed that order. If you clear your browser data, switch phone, or reinstall the app, updates will stop until you opt in again.
• We send service messages about your order only. We do not send marketing or promotional messages by push notification.

You can turn notifications off at any time in your device settings.

7. Data stored on your device

Some information is kept in your browser or on your phone so the app can work properly. It stays on your device unless you place an order.

Two points of honesty about this:

• Your basket is stored only on your device and is never uploaded until you check out. Because checkout is guest-based, we have no basket to restore for you later.
• We only save your address if you tick the box asking us to. If you did not save it, it exists in our records only on the orders you placed with it.

We set no cookies, and the app uses no advertising or analytics cookies, because there is no tracking technology running on it.

8. Who can see your information

This is the part worth reading carefully.

• Other customers cannot see your order. There is no way for one shopper to view another shopper’s details.
• You can see your own order using your order number together with your mobile number or order token.
• Our staff can see your name, mobile numbers, and delivery address, along with what you ordered. There is no way to deliver an order without this, so it is not restricted to a single named person.
• Private internal notes about your order are not shared with you, and only the most senior staff member can delete order data in bulk.
• The delivery service receives what it needs to complete the handover, typically your name, address, and mobile number.
• Our hosting and messaging provider, Google, stores the data on our behalf as described in section 9.

9. Third parties we use

We use a small number of outside services. Here is the complete list.

9.1 Google Firebase

Our app, website, and backend are built on Google Firebase. Google stores your order records, product catalogue, and images on our behalf. The services used are Cloud Firestore (records), Cloud Storage (product and banner images), Cloud Functions (our backend code), Firebase Authentication (used only for staff accounts), and Firebase Cloud Messaging (order status notifications).

Google acts as our processor and stores this data inside our own project, which only our staff can access.

9.2 Google Fonts

Our pages load our typeface from Google Fonts. As with any web page, your browser’s network request to Google necessarily reveals your IP address and browser details to Google at the moment the page loads.

9.3 Payment arrangements

For cash on delivery, none. For bank transfer we publish our own bank details at checkout; we do not pass your details to a payment processor.

9.4 What we do not use

We do not use advertising networks, tracking pixels, marketing analytics tools, session-recording software, or third-party chat widgets. We do not sell, rent, or trade your information.

10. Where your data is processed

Our systems are hosted by Google in the region Asia South (Sri Lanka). Because Google is a global company, technical processing — for example, a delivery notification routed through Google’s messaging network — can involve facilities outside Sri Lanka. Those providers are bound to process the data only on our instructions.

11. How long we keep it

Order records are kept for as long as we need them. An order is a financial record, so we do not delete it just because a customer asks us to; we are obliged to keep it for accounting, tax, and dispute purposes.

Some things are removed automatically:

• Temporary duplicate-submission prevention records are deleted within about two days.
• Push notification tokens that Google reports as permanently invalid are deleted as soon as we notice.

Everything else — orders, and the customer summaries derived from them — stays until we deliberately remove it. Product stock levels and billing counters are deliberately preserved even after an order-data deletion, because a delivered item cannot be un-delivered and an order number already printed on a receipt must keep meaning the same order forever.

12. Your rights

Sri Lankan law, and the law we apply to you, gives you rights over your personal information. In summary you may ask us to:

• Confirm what we hold about you and give you a copy
• Correct anything inaccurate — for example an old address on a past order
• Ask us to delete information where we are not legally required to keep it
• Object to, or restrict, how we use it
• Withdraw a consent you previously gave, for example by turning notifications off

We will respond, free of charge, within a reasonable time. Note that because we do not operate customer accounts, we can only identify an order — and anything about you — if you can give us the order number together with the mobile number used, or the order token.

13. Asking us to delete your data

There is no self-service “delete my account” button, because there is no account to delete. To make a request:

1. Contact us using the details in section 17.
2. Give us the order number and the mobile number you used, or your order token, so we can find the right records.
3. Tell us what you would like removed — for example the saved address on your device, your contact details on past orders, or all order history.

What happens next depends on what you ask for:

• Saved address on your device. You can remove this yourself right now by clearing the app’s site data or using your browser’s “clear browsing data”. We have no copy of it unless you placed an order with it.
• Contact details on past orders. We will normally agree, where we are not required to keep the record.
• All order history. Our shop’s records are financial records, and a deletion request is assessed by our most senior staff member against our legal retention duties. Where we must retain an order, we will tell you plainly rather than pretend it has been removed.

14. How we protect it

• Your order records are not readable from the app or browser by anyone. The database enforces this, so a bug or a tampered device cannot expose your order to other customers.
• Staff accounts require a password and are deactivated individually when someone leaves. Only a superadmin can remove order data in bulk, and that action requires a typed confirmation.
• Order lookups require two matching pieces of information, so guessing a phone number cannot reveal someone else’s order.
• Only the oldest permitted version of Android is supported, and the app is delivered over an encrypted connection.
• A small number of key staff actions are recorded in an internal activity log.

No system is perfectly secure. If you believe your information has been misused, please contact us straight away using section 17.

15. Children

This app is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has given us personal information, contact us and we will remove it.

16. Changes to this policy

We may update this policy as the app changes or the law does. The effective date at the top always shows the current version. If a change materially affects how we use your information, we will make that clear in the app.

17. Contact us

If you have any question about this policy, or wish to exercise any of the rights in section 12, please reach us:

When contacting us about an order, please include your order number. It is on your confirmation screen and in any message about that order, and it lets us answer you far faster.