Privacy Policy – Blush by Rash

Who We Are

Our website address is: https://blushbyrash.lk.
At Blush by Rash, your privacy and trust are important to us. We are committed to protecting your personal information while providing you with a safe and seamless online shopping experience for authentic makeup and skincare in Sri Lanka.

Comments

When visitors leave comments or reviews on our site, we collect the data shown in the comments form, along with the visitor’s IP address and browser user agent string to help with spam detection.

An anonymized string (hash) created from your email address may be provided to the Gravatar service to check if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. Once your comment is approved, your profile picture may be visible in the context of your comment.

Media

If you upload images (e.g., product reviews or testimonials), avoid uploading images with embedded location data (EXIF GPS) as visitors to the website can download and extract such data.

Cookies

  • If you leave a comment or review, you may opt-in to saving your name, email, and website in cookies. This is for your convenience so you don’t have to re-enter your details again. These cookies last for one year.

  • If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

  • When you log in, cookies will be set to save your login information and display preferences. Login cookies last for 2 days, display option cookies last for 1 year. Selecting “Remember Me” keeps your login for 2 weeks. Logging out removes these cookies.

  • If you edit or publish an article, an additional cookie is stored in your browser, which contains no personal data and simply indicates the post ID of the edited article.

Embedded Content from Other Websites

Our site may include embedded content (e.g., product videos, images, or brand content). Embedded content from other websites behaves in the same way as if the visitor has visited that website directly.

These external sites may collect data about you, use cookies, or include additional third-party tracking. We are not responsible for the privacy practices of these external websites.

Who We Share Your Data With

If you request a password reset, your IP address will be included in the reset email. We do not sell, rent, or trade your personal data with third parties. Data is shared only when necessary for order fulfillment, shipping, and payment processing.

How Long We Retain Your Data

  • Comments and their metadata are retained indefinitely to help us recognize and approve follow-up comments automatically.

  • For users that register on our website, we store the personal information provided in their user profile. All users can view, edit, or delete their information at any time (except username changes). Site administrators can also view and edit this information.

What Rights You Have Over Your Data

If you have an account on our site or have left comments, you may request an exported file of the personal data we hold about you, including any information you have provided. You can also request that we erase any personal data we hold about you, except where we are legally obliged to retain it (e.g., accounting, legal, or fraud-prevention purposes).

Where Your Data is Sent

Visitor comments and reviews may be checked through an automated spam detection service. Payment information is securely processed through trusted third-party providers and is never stored on our servers.