Privacy Policy
www.ceximc.com website is owned by Ceylon Exim Corporation , which is a data controller of your personal data.
We have adopted this Privacy Policy, which determines how we are processing the information collected by www.ceximc.com, which also provides the reasons why we must collect certain personal data about you. Therefore, you must read this Privacy Policy before using www.ceximc.com website.
We take care of your personal data and undertake to guarantee its confidentiality and security.Ceylon Exim
Corporation, trading as CEXIMC, operates www.ceximc.com and the CXC Sale Assistant messaging service. This notice explains how we handle information when you contact us through WhatsApp, Facebook Messenger, or Instagram and when we assist with enquiries and orders.
Business address: 210/60, Kandy Road, Gampola
Privacy contact: ceximc@gmail.com
Personal information we collect:
When you visit the www.ceximc.com, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the installed cookies on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products you view, what websites or search terms referred you to the Site, and how you interact with the Site. We refer to this automatically-collected information as “Device Information.” Moreover, we might collect the personal data you provide to us (including but not limited to Name, Surname, Address, payment information, etc.) during registration to be able to fulfill the agreement.
Why do we process your data?
Our top priority is customer data security, and, as such, we may process only minimal user data, only as much as it is absolutely necessary to maintain the website. Information collected automatically is used only to identify potential cases of abuse and establish statistical information regarding website usage. This statistical information is not otherwise aggregated in such a way that it would identify any particular user of the system.
You can visit the website without telling us who you are or revealing any information, by which someone could identify you as a specific, identifiable individual. If, however, you wish to use some of the website’s features, or you wish to receive our newsletter or provide other details by filling a form, you may provide personal data to us, such as your email, first name, last name, city of residence, organization, telephone number. You can choose not to provide us with your personal data, but then you may not be able to take advantage of some of the website’s features. For example, you won’t be able to receive our Newsletter or contact us directly from the website. Users who are uncertain about what information is mandatory are welcome to contact us via adhilmusthafaa@gmail.com.
Your rights:
If you are a European resident, you have the following rights related to your personal data:
The right to be informed.
The right of access.
The right to rectification.
The right to erasure.
The right to restrict processing.
The right to data portability.
The right to object.
Rights in relation to automated decision-making and profiling.
If you would like to exercise this right, please contact us through the contact information below.
Additionally, if you are a European resident, we note that we are processing your information in order to fulfill contracts we might have with you (for example, if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information might be transferred outside of Europe, including Canada and the United States.
Links to other websites:
Our website may contain links to other websites that are not owned or controlled by us. Please be aware that we are not responsible for such other websites or third parties' privacy practices. We encourage you to be aware when you leave our website and read the privacy statements of each website that may collect personal information.
Information security:
We secure information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We keep reasonable administrative, technical, and physical safeguards to protect against unauthorized access, use, modification, and personal data disclosure in its control and custody. However, no data transmission over the Internet or wireless network can be guaranteed.
Legal disclosure:
We will disclose any information we collect, use or receive if required or permitted by law, such as to comply with a subpoena or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
Contact information:
If you would like to contact us to understand more about this Policy or wish to contact us concerning any matter relating to individual rights and your Personal Information, you may send an email to adhilmusthafaa@gmail.com.
Before publication, replace all bracketed fields and confirm that the practices described below match the business. This draft covers the messaging and order service discussed; the website's cookies, analytics, checkout, and other integrations have not been inspected.
Effective date: [05/09/2026]
Information we handle
Depending on what you share and the messaging platform, we receive your name, profile details, phone number or platform user identifier, messages, attachments such as photos and voice messages, and message timestamps and delivery information. If you place an order, we may also handle delivery addresses, location information you provide, product selections, quantities, and order, invoice, payment-status, return, and refund records.
Our inbox records customer messages, AI-generated replies, and replies written by staff so our team can follow the conversation and provide support.
Why we use information
We use this information to answer enquiries, identify requested products, assist with orders and delivery, manage returns and customer support, maintain conversation and transaction records, and investigate service failures or misuse. [Confirm any additional uses, including marketing, and explain the applicable choices before publication.]
AI-assisted replies and staff access
Our service uses AI to help interpret enquiries and prepare replies. Relevant conversation content and order context may be processed by our AI service provider, currently OpenAI, as part of this service. Authorized staff can view customer conversations and AI and staff replies, and can take over customer support. You can ask to speak with a staff member. Please avoid sending passwords or unnecessary sensitive information in chat.
Service providers and sharing
The service uses Meta's messaging platforms, hosted workflow and database infrastructure, OpenAI for AI processing, and Zoho for inventory and order-related operations. Relevant information may also be shared with delivery or other fulfilment providers when needed for your order. [Confirm the actual providers, hosting arrangements, payment services, and any other recipients.]
These providers may process information in countries outside your country. [Confirm processing locations and any safeguards required for the business's actual operations.] Information may also be disclosed where required by applicable law or to address fraud, security incidents, or legal claims.
Retention and protection
[Specify the actual retention periods or criteria for conversations, attachments, customer records, transaction records, execution logs, and backups. State applicable accounting or other legal retention requirements only after confirmation.
[Describe implemented access controls and security measures accurately. Do not promise encryption, deletion schedules, or restricted access that has not been implemented.
Privacy requests and deletion instructions
To ask about your information, request a correction, or request deletion, email ceximc@gmail.com with the subject Privacy request — CEXIMC. Provide the phone number or messaging account used to contact us and describe your request. Do not send passwords or identity documents unless we separately explain why specific verification is necessary.
We may ask for information needed to verify that the request relates to your account. We will explain any information that must be retained for applicable legal obligations or unresolved transactions. Deletion from our systems does not automatically delete copies held separately by Meta or other independent services.
[Confirm who handles requests, the response process and timing, backup deletion handling, and the rights applicable in the business's and customers' locations.]
Website technologies
[Add an accurate description of cookies, analytics, advertising pixels, forms, account features, and checkout services used on www.ceximc.com, with relevant choices. The website could not be verified during preparation of this draft.]
Changes and contact
We will publish updates to this notice on our website and update its effective date. Questions can be sent to ceximc@gmail.com.