Privacy Policy

Last updated: September 2026

The protection of your personal data is important to us. This Privacy Policy explains what personal data may be processed when you visit soulandspicy.com, when you contact us, and for what purposes such data is used.

We process personal data in accordance with the data protection laws applicable to us, in particular the Personal Data Protection Act No. 9 of 2022 (PDPA) of Sri Lanka and, where applicable to the respective processing activities, relevant data protection laws of Switzerland and the European Union.

The controller responsible for the processing of personal data through this website is:

Sarah Salman (Pvt) Ltd
29/6, St. Anthony's Road, 2nd Lane, Periyamulla
11500
Negombo
Sri Lanka

Email: sarahsalman.pvtlimited@gmail.com

Website: soulandspicy.com

We process personal data only to the extent necessary to operate our website, communicate with you and provide our services.

Depending on how you use our website, this may include:

• your name and email address
• the content of your message or enquiry
• the name and location of your business if provided through our Marketing Studio contact form
• information about the services you are interested in
• information you provide about your project
• technical information such as your IP address, browser information, access time and pages accessed
• information relating to your cookie and privacy preferences

Our website is hosted by Namecheap, Inc.

When you access our website, the web server may automatically process technical information in server log files. This may include your IP address, date and time of access, requested resources, HTTP status code, referrer and information about your browser and operating system.

This information is primarily processed to technically provide our website and to maintain its stability and security.

Namecheap may process personal data on our behalf in connection with the hosting of our website. Further information about Namecheap's processing of personal data can be found in Namecheap's privacy documentation.

You can contact us through the contact forms available on our website.

Through our general contact form, we process in particular:

Name, email address and message.

Through our Marketing Studio contact form, we may additionally process:

Your business name, the location of your business, the services you are interested in and information about your planned project.

We use this information to respond to your enquiry, communicate with you and, where applicable, provide information about our services or prepare an appropriate offer.

The information you submit will only be retained for as long as necessary to process your enquiry, manage any resulting business relationship or comply with applicable legal retention obligations.

Please do not submit confidential or particularly sensitive personal data through our contact forms unless it is necessary for your enquiry.

For business communication, we use email addresses under the soulandspicy.com domain, including hello@soulandspicy.com and marketing@soulandspicy.com. The associated email services are provided through Namecheap.

When you contact us by email, we process your email address and any information you voluntarily provide in order to respond to your enquiry and communicate with you.

We also use a Gmail address for certain business communications. If you communicate with us through this address, personal data may be processed through services provided by Google. Google's privacy terms apply additionally to such processing.

Our website provides an option to contact us directly through WhatsApp using Joinchat.

If you use the WhatsApp button, you will be redirected to WhatsApp or the WhatsApp application on your device will be opened. By using this function, data may be transmitted to WhatsApp and the relevant operating companies.

The use of WhatsApp is voluntary. Any further processing of personal data by WhatsApp is subject to the privacy terms of the respective provider.

Our website uses cookies and similar technologies where necessary for the technical operation of the website and the management of your privacy preferences.

We use CookieAdmin for consent management.

Based on our current technical setup, the necessary cookie cookieadmin_consent is used in particular. This cookie is used to store your cookie and consent preferences.

Technically necessary cookies may be required to ensure that the website and its privacy functions operate correctly.

Based on our current setup and the cookie scan performed through our consent management system, we currently do not use analytics or marketing cookies.

If we introduce additional cookies or services in the future, we will update this Privacy Policy and our consent management settings accordingly.

You can manage and change your cookie preferences through the consent management function provided on our website.

Our website contains links to our profiles on social media platforms, particularly Instagram and Facebook.

These are currently standard external links and not embedded social media feeds. Simply visiting our website therefore does not cause social media content to be loaded through these links.

If you click on one of these links, you will leave our website and be redirected to the respective provider. From that point onwards, the provider may process personal data in accordance with its own privacy policy.

We do not sell or rent your personal data.

Personal data is disclosed to or processed by third parties only where necessary for the operation of our website, communication with you, provision of our services or compliance with legal obligations.

This may include, in particular, our hosting and email service providers as well as communication services that you voluntarily choose to use.

As we are a company based in Sri Lanka and use certain international service providers, personal data may be processed outside your country of residence.

This applies in particular to technical service providers such as Namecheap and, where relevant, Google or WhatsApp.

Where required under applicable data protection laws, appropriate measures are taken to protect personal data in connection with international data transfers.

We retain personal data only for as long as necessary for the purpose for which it was collected or as required by applicable legal retention obligations.

Enquiries submitted through contact forms or email may, for example, be retained for a longer period if they result in a business relationship or if the communication remains necessary for business or legal purposes.

Technical data and server logs are retained in accordance with the technical and organisational practices of the service providers we use.

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.

Our website uses an encrypted HTTPS connection (SSL/TLS) to protect data transmitted between your browser and our server.

Despite appropriate security measures, absolute security of data transmitted over the internet cannot be guaranteed.

Depending on your place of residence and the data protection laws applicable to the respective processing activity, you may have various rights regarding your personal data.

These may include, in particular, rights to access your personal data, request correction or deletion, request restriction of certain processing and, where applicable, object to processing or withdraw previously given consent.

If you wish to exercise any of your data protection rights, please contact us at:

sarahsalman.pvtlimited@gmail.com

Our website may contain links to third-party websites. The respective operators are responsible for the content and privacy practices of those external websites.

Please review the privacy policies of the relevant providers before submitting personal data to them.

We may update this Privacy Policy if our website, services, technologies or applicable legal requirements change.

The current version published on this website applies.

Last updated: September 2026