Privacy & Data Protection Policy
At Double XL Sri Lanka, protecting your personal data and safeguarding your digital confidentiality is fundamental to the luxury bespoke service we deliver.
01
Data Controller & Enterprise Identity
This Privacy Policy explains how Double XL (Pvt) Ltd (“Double XL”, “we”, “our”, or “us”) collects, processes, and safeguards personal information when you visit doublexl.lk, interact with our digital atelier, make purchases, or visit our flagship boutique in Colombo.
Flagship Boutique & Atelier:
No. 106, Reid Avenue, Colombo 04, Western Province, Sri Lanka.
02
Categories of Personal Information Collected
We collect only the personal information strictly required to deliver bespoke plus-size garments, process transactions seamlessly, and guarantee exceptional aftercare.
A. Identity & Contact Information
Full name, billing and physical delivery addresses, personal phone number, and verified email address provided during checkout or account registration.
B. Proportions, Sizing & Custom Atelier Preferences
Selected plus-size profiles (2XL to 8XL), custom measurements, fit preferences, and purchase history to provide accurate size recommendations across Double XL collections.
C. Transaction & Order Details
Records of garments ordered, date and timestamp, payment method chosen, delivery courier tracking IDs, and customer service correspondence regarding exchanges or alterations.
D. Technical & Browsing Telemetry
IP address, approximate geographic location, browser type and version, operating system, and pages viewed, captured via encrypted cookies to optimize catalog rendering speeds.
03
Payment Security & Buy-Now-Pay-Later (BNPL) Protocols
Double XL does NOT store or process raw credit/debit card numbers or CVV security codes on our servers.
Licensed and regulated by the Central Bank of Sri Lanka (CBSL). Fully compliant with global PCI-DSS Level 1 security standards for Visa, Mastercard, and Amex transactions.
Split into 3 interest-free payments. Personal installment verification and payment schedules are governed under Mintpay’s encrypted consumer privacy framework.
Enables flexible payments across debit/credit cards. Verification and authorization occur directly through Koko’s secure hosted portal.
04
How We Utilize & Process Your Information
• Order Fulfillment & Islandwide Dispatch: To package your selected items, generate shipping waybills, dispatch with vetted courier partners, and communicate live delivery status updates.
• Size Concierge & Fit Consultation: To assist you with size evaluations, fabric drape inquiries, and hassle-free 7-day exchanges.
• Security & Anti-Fraud Monitoring: To detect, prevent, and protect against fraudulent checkout attempts and unauthorized account access.
• Curated Editorial Updates (Privilege Club): With your consent, we send curated notifications regarding new collection drops, seasonal atelier previews, and VIP events. You may opt out anytime via the one-click unsubscribe link in every email.
•
Our Absolute Guarantee: We never sell, monetize, rent, or trade your personal information to third-party marketing brokers.
05
Cookies & Web Telemetry
We utilize necessary cookies to ensure the website functions correctly, such as maintaining items inside your active shopping bag, remembering currency preferences (LKR), and preserving user login sessions.
Essential Session Cookies: Required for the mini-cart drawer, cart checkout, and account authorization.
Performance & Analytics: Aggregated anonymous metrics (Google Analytics, Microsoft Clarity) to optimize loading times and product navigation.
You can disable non-essential cookies through your browser settings without affecting core browsing capabilities.
06
Your Rights & Data Governance
In compliance with applicable privacy principles and the Sri Lankan Personal Data Protection framework, you maintain complete sovereignty over your information:
Right to Access & Rectify
Request a complete copy of personal records held by Double XL or update your saved delivery coordinates via your account dashboard.
Right to Erasure (“Be Forgotten”)
Request complete deletion of your customer profile, subject to statutory retention requirements for tax and audit compliance.
Questions Regarding Your Personal Data?
Our Data Governance & Customer Concierge team is here to assist with any questions regarding our privacy practices, data deletion requests, or order security.
