Privacy Policy

Who we are

True Natura is a natural-products e-commerce store operated by Harker International (Private) Limited (Registration No. PV 00338032), based in Kandy, Sri Lanka. Customer-service correspondence may be addressed to PO Box 90, Elmendorf, TX 78112, USA. For privacy and data-protection inquiries, contact info@harker.international. For shop and order inquiries, contact info@truenatura.com. Our website address is truenatura.com.

What data we collect

When you use True Natura we collect only the information needed to fulfil your order, run our store, and improve your shopping experience:

• Account data — name, email address, billing and shipping address, phone number when you create an account or place an order.
• Order data — products purchased, order history, gift messages, and any notes you add at checkout.
• Payment data — handled directly by Stripe; we never see or store your full card number. We only receive the last four digits and an authorisation token to reference the order.
• Comments & reviews — if you leave a review, we record the text, your display name, and the IP address and browser user agent used to submit it (to help detect spam).
• Technical data — IP address, browser type, device information, referring page, and pages visited, collected via standard server logs and cookies.
• Marketing preferences — if you subscribe to our newsletter, we store your email address and the topics you’ve opted into.
• Waitlist signups — if you sign up to be notified when a product is restocked, we store your email, the product you’re waiting for, the timestamp, and the IP address used to submit the form. We use this only to email you when that product becomes available, and to size demand for sourcing decisions. You can request removal at any time by emailing info@truenatura.com.

How we use your data

• To fulfil orders, including processing payments, arranging shipping, and providing tracking information.
• To respond to your questions, complaints, and refund or return requests.
• To send you transactional emails (order confirmation, shipping notifications, refund confirmations).
• To send marketing emails about new arrivals, sales, and brand stories — only if you have opted in. You can unsubscribe at any time using the link at the bottom of any marketing email.
• To improve the website, analyse traffic patterns, and detect fraud or abuse.
• To comply with our legal and tax obligations.

Cookies

We use cookies to remember the items in your cart, keep you logged in, and (with your consent) measure how visitors use the site. Analytics cookies load only after you click “Accept All” on the cookie banner. See our Cookie Policy for the full list of cookies, what each one does, and how long it lasts.

To change your choice at any time, click the Cookie preferences link in the footer of any page — the banner will re-open and you can pick a new option. We also honor the Global Privacy Control (GPC) browser signal: if your browser sends GPC and you have not yet chosen, we treat that as “Essential Only”.

Who we share your data with

We do not sell your personal data. We share data only with the third parties needed to operate the store:

• Stripe (payments) — handles card details and processes payments. Stripe’s privacy policy.
• Shipping partners — courier and postal services receive your shipping address and contact details so they can deliver your order.
• Hostinger (hosting) — our website and databases run on Hostinger servers; standard server logs apply.
• Google Analytics (analytics) — measures aggregate site usage. IP addresses are anonymised. Google’s privacy policy.
• Email delivery — transactional emails are sent through authenticated SMTP via our hosting provider.
• Legal authorities — when required by law, court order, or to protect our legal rights.

How long we retain your data

For customers with an account, we retain your profile and order history until you close the account or request deletion, subject to the legal exceptions below.

Order, invoice, and tax records are retained for at least seven (7) years as required by Sri Lankan and US tax law.

Marketing list subscriptions are retained until you unsubscribe; unsubscribe records are kept indefinitely so we can honour your opt-out.

Comments and reviews are retained indefinitely so we can recognise and approve follow-up content automatically.

Your rights over your data

You have the right to:

• Receive a copy of the personal data we hold about you (data portability).
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data, subject to the retention exceptions above (we cannot delete tax records before the 7-year minimum).
• Object to processing for direct marketing at any time.
• Restrict or limit processing while a dispute is resolved.
• Lodge a complaint with your local data protection authority (UK ICO, EU member-state DPA, California Attorney General, etc.).

EU and UK customers should also read our GDPR & Data Subject Rights Notice for the full statutory framework. To exercise any of these rights, email info@harker.international with the subject “Data request”. We respond within 30 days.

How we secure your data

Our site runs on HTTPS with TLS 1.3, payment information is tokenised through Stripe and never stored on our servers, admin and account passwords are hashed using industry-standard algorithms, and we keep our software up to date to patch security vulnerabilities. No method of online transmission is 100% secure, but we use commercially reasonable means to protect your information.

International transfers

True Natura operates between Sri Lanka and the United States. Your personal data is hosted on servers located in the United States (Hostinger International Limited), with customer-service and order-fulfilment processing also taking place in Sri Lanka. Payment processing is handled by Stripe (US), and analytics by Google (US). Shipping partners may receive your address in either country.

For visitors in the European Economic Area or United Kingdom, transfers of personal data from the EEA/UK to the United States are made under the EU–US Data Privacy Framework and Standard Contractual Clauses (SCCs) approved by the European Commission, with supplementary measures where required by the Schrems II decision. Transfers from the EEA/UK to Sri Lanka are made under SCCs; Sri Lanka is not the subject of a current EU adequacy decision.

If you have questions about the safeguards applied to your data, email info@harker.international and we’ll provide the relevant contractual documentation on request.

California residents — your CCPA rights

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) gives you additional rights, including the right to opt out of any “sale” or “sharing” of your personal information. True Natura does not sell or share personal information as those terms are defined under CCPA/CPRA. Our full California-specific notice — including categories collected, recipient disclosures, and how to submit a verifiable request — is at California Privacy Notice.

Children’s privacy

True Natura is intended for customers aged 16 or older. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. We’ll update the “Last updated” date at the top of the page when we do. Material changes (for example, new categories of data sharing) will be announced via email to registered customers and on the site for at least 14 days before they take effect.

Contact us

For privacy and data-protection questions, contact:

Harker International (Private) Limited
Kandy, Sri Lanka
Email: info@harker.international

For order and shop questions, contact info@truenatura.com or use the contact form.