Consumer Privacy Requests

Subject to applicable law, you may request:

• Access: a summary of personal information we hold about you.
• Correction: update inaccurate account or order contact details.
• Deletion: removal of personal information not required for legal or operational purposes.
• Portability: a copy of certain information in a usable format where technically feasible.
• Marketing opt-out: unsubscribe from promotional emails (also available via newsletter links).

Email privacy@wenger.lk with the subject line "Privacy Request" and include your full name, email address associated with your account or orders, and the type of request you are making.

For security, we may ask you to verify your identity—for example, by confirming details of a recent order or responding from your registered email address—before fulfilling a request.

If you use an authorized agent to submit a request on your behalf, we may require written permission from you and verification of the agent's identity.

We aim to acknowledge requests within 10 business days and to complete verified requests within 30 days, unless an extension is permitted by law. We will explain if we need more time or if we cannot fulfill a request.

We will not deny goods, charge different prices, or provide a different level of service because you exercised a privacy right, except where permitted by law.

If you disagree with our response, reply to our message explaining your concern. You may also lodge a complaint with the relevant data protection authority in Sri Lanka if applicable.