Legal
Privacy Policy
Last updated: May 2026
Who we are
Chandayu Ayurveda is a Ceylon herbal wellness brand. Our website is chandayu.com. We can be reached at hello@chandayu.com or via WhatsApp at +94 70 523 9414.
What data we collect
When you use our website, we may collect:
- Contact details (name, email, phone/WhatsApp number) when you make a purchase, book a consultation, or sign up for our newsletter
- Shipping address for product orders
- Health and wellness information you voluntarily share during the dosha quiz or consultation booking (your dosha type, health concerns, products you have used)
- Payment information — processed directly by PayPal or PayHere; we do not store card details
- Basic usage data (pages visited, browser type) via cookies
Health data — special notice for EU customers
Health-related information (dosha type, medical concerns, symptoms) is considered special category data under GDPR Article 9. By submitting this information during a consultation booking, you explicitly consent to Dr. Perera and the Chandayu team using it solely to provide your Ayurvedic consultation and follow-up recommendations. This data is not shared with third parties and is retained only for the duration of your wellness relationship with us.
Why we use your data
- To process and ship your order
- To confirm and deliver your consultation with Dr. Perera
- To send you the wellness content you requested (ritual plan, dosha report)
- To send post-consultation prescription emails
- To comply with legal obligations
Your rights (EU/UK customers)
Under GDPR and UK GDPR, you have the right to: access your data, correct inaccurate data, request deletion ("right to be forgotten"), restrict processing, and data portability. To exercise any of these rights, email hello@chandayu.com with the subject line "Data Request." We will respond within 30 days.
Data retention
Order records are kept for 7 years (tax compliance). Consultation records are kept for 3 years unless you request deletion. Newsletter subscribers are kept until they unsubscribe.
Third-party services
We use the following third-party services that may process your data:
- PayPal — international payment processing (their privacy policy applies)
- PayHere — Sri Lanka payment processing (their privacy policy applies)
- Resend — transactional email delivery
Cookies
We use essential cookies for cart functionality and session management. We do not use tracking or advertising cookies. You can disable cookies in your browser settings; this may affect cart functionality.
Contact
For any privacy questions: hello@chandayu.com
