Privacy Policy

Auto Spare Hub (ASH.LK), operating at ash.lk, is a Sri Lanka-based online retail business dealing in automotive spare parts. We are the sole merchant in every sale concluded through this website. This Privacy Policy applies to information collected through our website, checkout flow, customer support channels, and related services.

We may collect the following categories of information:

• account information such as name, phone number, email address, and login credentials;
• order and delivery information such as delivery address, city, postal code, vehicle information provided for compatibility checks, and order notes;
• transaction information such as order amount, payment status, masked payment reference, and invoice records;
• communications you send to us through contact forms, email, chat, or phone calls, including recordings or transcripts where lawfully retained;
• identity-verification information requested for fraud prevention or high-value orders; and
• technical data such as IP address, browser type, device information, cookies, session identifiers, and usage logs.

All online payments on ash.lk are processed by our authorized internet payment gateway partner acting on behalf of Auto Spare Hub. The payment gateway, not Auto Spare Hub, captures and stores full card numbers and card security codes in accordance with PCI DSS requirements. We do not store full card numbers or card security codes on our website servers.

We receive only limited transaction information from the payment gateway, such as payment status, transaction reference, masked card details, and the amount paid, for the purposes of order processing, reconciliation, accounting, tax compliance, and fraud prevention.

All payment flows on ash.lk settle exclusively to Auto Spare Hub. We do not facilitate any third-party seller payment, split payment, escrow, or marketplace settlement.

We use personal information to:

• create and manage customer accounts and verify identity at checkout;
• process orders, arrange packing, dispatch, and delivery, and coordinate with our suppliers and logistics partners where necessary;
• communicate order updates, payment confirmations, invoices, and support responses;
• detect, prevent, and investigate fraud, chargebacks, abuse, and unauthorized activity;
• maintain transaction records, accounts, audits, and tax filings;
• improve the performance, security, and usability of our website; and
• comply with legal, regulatory, accounting, and law-enforcement obligations in Sri Lanka.

We do not sell or rent personal information. We share only the minimum information needed with:

• our authorized internet payment gateway partner, for payment authorization, settlement, and chargeback handling;
• courier and logistics partners, for the sole purpose of delivering your order;
• our suppliers, only where we need to procure or verify a specific part for your order, and only with the minimum information required;
• hosting, infrastructure, communications, analytics, and customer-support service providers acting on our instructions;
• professional advisers, accountants, and auditors where reasonably required;
• law enforcement, regulators, tax authorities, or courts when disclosure is required by Sri Lankan law or a valid legal process; and
• a successor entity in connection with a merger, acquisition, restructuring, or sale of business assets.

None of these recipients is a third-party seller, and no transfer of customer payments to any third-party seller takes place at any time.

We use cookies, local storage, and similar technologies to keep you signed in, maintain shopping cart state, remember preferences, measure website performance, support security monitoring, and understand aggregated usage patterns.

You can manage cookie preferences through your browser settings. Disabling cookies may impair website features including login, checkout, and order tracking.

We apply reasonable administrative, technical, and organizational safeguards to protect personal information against unauthorized access, alteration, disclosure, or destruction. Despite these measures, no method of internet transmission or electronic storage is fully secure, and Auto Spare Hub cannot and does not guarantee absolute security.

We retain personal information for as long as reasonably necessary to provide our services, maintain transaction and accounting records, respond to disputes and chargebacks, enforce our agreements, and meet legal, tax, and regulatory obligations in Sri Lanka. When information is no longer required, we will delete it or anonymize it where reasonably practicable.

You may contact us to request access to, correction of, or deletion of personal information that we hold about you. We will respond to such requests within a reasonable time and to the extent required by applicable law, subject to verification of your identity and to any legitimate business, accounting, or legal reason that requires us to retain the information.

You may also contact us to update your account, withdraw consent to marketing communications, or close your account.

By providing your contact details and placing an order, you consent to receiving transactional messages relating to your order. We may also send promotional messages from time to time; you may opt out of promotional messages at any time using the unsubscribe link in those messages or by contacting [email protected]. Opting out of promotional messages does not affect transactional and service messages.

Our website may contain links to third-party websites or use third-party infrastructure. Auto Spare Hub is not responsible for the content, security, or privacy practices of any third-party service that we do not control.

The website is not intended for use by persons under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact [email protected] so we can take appropriate action.

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. Your continued use of the website after the updated effective date constitutes acceptance of the revised Privacy Policy.

This Privacy Policy is governed by the laws of the Democratic Socialist Republic of Sri Lanka. Any dispute arising in connection with it shall be subject to the exclusive jurisdiction of the competent courts of Colombo.

For privacy-related questions or requests, contact Auto Spare Hub at [email protected], +94 76 553 5322, or Maharagama, Sri Lanka.