Privacy
Plainly: we collect what is needed to get a parcel to you, and nothing that is not.
What we collect
- Your name, email and phone number, so we can confirm the order and reach you.
- The delivery address, which goes to the courier.
- What you ordered, the sizes, and what it cost.
- A bank transfer slip, if you upload one, so we can match the payment.
- If you make an account, your email and a password we never see in plain text.
We never see card details. The site takes no card payments at all, so there is nothing of that kind to store or leak.
Where it lives
Orders are stored in our own database, hosted by Supabase. Receipt images go to private storage that is not publicly linkable. The only way to view one is a short-lived signed link generated for us. Accounts and passwords are handled by Supabase Auth; passwords are hashed, and nobody at Surf Monkey can read yours.
Who else sees it
- The courier gets your name, address and phone, which is all they need.
- Our email provider handles the order notification that goes to us.
- Nobody else. We do not sell, rent or share customer data, and we never will.
How long we keep it
Order records are kept as long as we need them for accounts and for handling exchanges. Ask us to delete your account and personal details and we will, keeping only what the law requires us to hold for a sale that has happened.
Cookies
Your cart is kept in your own browser, not on our servers. If you sign in, one cookie holds your session so you stay signed in. There is no advertising or tracking cookie on this site.
Asking us anything about this
Email lithanabeywardena6@gmail.com, or reach us any of the ways on the contact page. You can ask for a copy of what we hold on you, or ask us to correct or delete it.
