Privacy Policy

Last updated 2026-07-22

1. Introduction

This Privacy Policy explains how Edvance Technologies ("we", "us", "our") collects, uses, and protects information about visitors and customers of https://www.edvance.dev/.

This policy applies to anyone who interacts with https://www.edvance.dev/, including customers in US.

2. Who we are

Edvance Technologies operates from Sri Lanka. You can reach us at mush@edvance.dev.

3. Information we collect

We collect the following categories of information:

  • Your name
  • Email address
  • Phone number
  • Postal / shipping address
  • Payment data (handled by our payment processors — see section 7)
  • Cookie identifiers and device data
  • Analytics data about how you use our site

4. How we collect information

We collect information directly when you place an order, create an account, contact support, or sign up for our newsletter. Some information is collected automatically through cookies and analytics tools while you use the site.

5. How we use information

We use the information we collect to:

  • Fulfil your orders and deliver the products or services you purchase
  • Provide customer support and respond to your queries
  • Detect and prevent fraud, abuse, and unauthorised access
  • Comply with our legal and accounting obligations
  • Understand how visitors use our site so we can improve it

6. Legal basis for processing (EU / UK customers)

For visitors and customers in the European Economic Area and the United Kingdom, our legal bases for processing your personal data are:

  • Contract — to process your order, deliver your purchase, and provide customer support.
  • Legitimate interest — to operate, secure, and improve our store and prevent fraud.
  • Consent — for marketing communications and non-essential cookies. You may withdraw consent at any time.
  • Legal obligation — to keep records required by tax, accounting, and consumer-protection law.

7. Payment processing

  • Stripe — We use Stripe to process card and bank payments. We do not store full card numbers on our servers. Stripe is responsible for card data under its PCI-DSS certification. Stripe may collect additional information from you for fraud prevention, identity verification, and regulatory compliance. Stripe's privacy policy is available at https://stripe.com/privacy.
  • Wise — We use Wise to receive certain payments and pay-outs. Wise transactions may be subject to additional verification, limits, exchange-rate adjustments, and processing times set by Wise. Wise's privacy policy is available at https://wise.com/privacy.

By placing an order, you agree to the terms of the payment processor used.

8. Cookies and analytics

We use analytics cookies to understand how visitors use the site. Categories of cookies we use:

  • Strictly necessary — required for the site to function. These do not track you and are set without consent.
  • Analytics — to measure site usage. We use Google Analytics (GA4), which sets cookies such as _ga and _gid.

Analytics cookies are not set until you accept them via our cookie banner. If you decline, Google Analytics is never loaded and no analytics cookies are placed. You can withdraw consent at any time by clearing your browser cookies for this site, which will show the banner again.

9. Sharing with service providers

We share personal information with the following categories of service providers, only as needed to operate our business:

  • Stripe — payment processing
  • Wise — international payments and pay-outs
  • Google Analytics — site analytics
  • Hosting / cloud providers — to operate the website and store data securely

We do not sell your personal data.

10. International transfers

Because we serve customers in multiple countries, your personal data may be transferred outside your country of residence. Where this happens, we rely on contractual safeguards (such as Standard Contractual Clauses) and our payment processors' regulatory frameworks to keep your data protected.

11. Data retention

We keep your personal data only for as long as we need it:

  • Order records — at least the period required by our local accounting and tax law (typically 5–7 years).
  • Marketing preferences — until you unsubscribe.
  • Analytics data — usually 14–26 months, depending on the analytics provider.
  • Support tickets — up to 3 years after the issue is resolved.

12. Your rights

Subject to local law, you may exercise the following rights with respect to your personal data:

  • Access a copy of the data we hold
  • Correct or update inaccurate data
  • Delete your data, where there is no overriding legal reason to keep it
  • Restrict or object to certain types of processing
  • Receive a portable copy of your data
  • Withdraw consent, where processing relies on consent

To exercise any of these rights, email mush@edvance.dev. We may need to verify your identity before responding.

13. Security

We use industry-standard measures to protect personal data, including TLS encryption in transit, access controls, and reliance on payment processors that are PCI-DSS certified for card data. No system is perfectly secure, however, and we encourage you to use strong, unique passwords.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The "Last updated" date at the top of this page shows when the policy was last changed. Material changes will be communicated via a notice on the site or by email.

15. Contact us

For privacy questions or to exercise any of the rights above, contact us at mush@edvance.dev.

GDPR / UK GDPR appendix (EEA and UK customers)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation gives you specific rights regarding your personal data.

  • Legal basis — We process personal data on the basis of contract (to fulfil your order), legitimate interest (to operate, secure and improve our services), and consent (for marketing and non-essential cookies).
  • Your rights — You may request access, rectification, erasure, restriction of processing, portability, or object to processing. Where processing relies on consent, you may withdraw it at any time.
  • Data transfers — Where personal data is transferred outside the EEA / UK, we rely on the European Commission's Standard Contractual Clauses or other appropriate safeguards as published by the relevant data-protection authority.
  • Supervisory authority — You have the right to lodge a complaint with the data-protection authority in your country.
  • Contact — Send privacy requests to mush@edvance.dev. We will respond within 30 days as required by GDPR.