1. Commitment to Customer Privacy
OVR90 SPORTSWEAR (“we”, “us”, “our”) is committed to honoring your fundamental right to personal privacy. This Privacy Policy outlines our standards for collecting, holding, processing, and safeguarding your personal information across our website (inovr90.com), our mobile experiences, and direct WhatsApp customer channels.
Our data management practices operate in strict compliance with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka (PDPA) alongside modern international digital encryption and consumer security benchmarks.
2. Information We Collect
When you browse our storefront, register your concierge profile, configure customized football kits in The Lab, or submit an order, we may collect the following data categories:
- Identity & Contact Details: Full customer name, mobile telephone number, delivery street address, postal district, city, and email address.
- Order & Customization Specifications: Items purchased, sizes, jersey customizer specifications (personalized player name, squad number, typography font choice), invoice totals, and selected payment method.
- Bank Deposit / Transfer Verifications: Uploaded payment deposit slips or transaction screenshots (used exclusively by our finance desk to authenticate genuine bank payments).
- Device & Session Analytics: IP address, device operating system, browser configuration, and localized currency selection (e.g. LKR, USD, EUR, GBP) to ensure rapid responsive storefront rendering.
3. Lawful Purpose of Data Processing
We process your personal information strictly for legitimate operational purposes directly linked to your orders:
- Fulfilling, bespoke printing, packaging, and dispatching your sportswear orders to your designated shipping destination.
- Communicating real-time order confirmation receipts, courier consignment tracking codes, and dispatch alerts via SMS, WhatsApp, and Email.
- Facilitating seamless size exchanges, returns, and customer care inquiries through our dedicated concierge desk.
- Detecting fraudulent card transactions, counterfeit bank receipts, or malicious automated activity.
4. Trusted Logistics & Technology Partners
To deliver a premium end-to-end matchday retail experience, OVR90 collaborates with established logistics and infrastructure partners bound by rigorous confidentiality agreements:
- Domestic Courier Networks: Tier-1 domestic logistics partners (including Koombiyo Delivery and registered Sri Lankan couriers) for prompt islandwide doorstep delivery across all 25 districts within 5 to 7 business days.
- Banking & Payment Verification: Commercial Bank of Ceylon for verified direct business account deposits, alongside 256-bit SSL encrypted international card processing.
- Transactional Messaging: Secure WhatsApp Business API infrastructure for instant receipt verification and order tracking notifications.
5. Data Security & Retention Policy
We employ enterprise-grade SSL/TLS 256-bit encryption for all web communications. Customer payment transfer receipts and order records are stored within isolated cloud environments with restricted, role-based administrative access.
We retain billing and order fulfillment data solely for the period mandatory under Sri Lankan commercial taxation, financial reporting, and warranty liability obligations, after which records are securely archived or expunged.
6. Your Statutory Rights Under Sri Lanka PDPA
Under the Sri Lanka Personal Data Protection Act No. 9 of 2022, every customer retains enforceable statutory rights:
- Right of Access: You may request an itemized transcript of the personal data we hold about your account.
- Right to Rectification: You may request the immediate correction of any inaccurate or outdated contact information.
- Right to Erasure (“Right to Be Forgotten”): You may request the deletion of your customer account and contact records, subject to completed order delivery and statutory fiscal requirements.
- Right to Withdraw Consent: You may opt-out from our VIP newsletter and promotional broadcasts at any time.
7. Data Protection Officer & Inquiries
For any questions, requests for data rectification, or privacy concerns, please contact our Data Protection Concierge:
