COOKIE POLICY

Last Updated: 02nd of March 2026

At MCDOLY.LK, we are committed to transparency and respecting your privacy. This Cookie Policy explains what cookies and similar tracking technologies we use on our website (mcdoly.lk), why we use them, and how you can manage them. It applies worldwide and aligns with applicable data protection laws, including:

•  Sri Lanka’s Personal Data Protection Act No. 9 of 2022 (PDPA) (as amended), which governs the processing of personal data, including data collected via cookies and tracking technologies.

•  International standards such as the General Data Protection Regulation (GDPR) for EEA/UK users (requiring consent for non-essential cookies).

•  Other relevant laws (e.g., CCPA/CPRA principles for California residents regarding opt-out of targeted advertising).

What Are Cookies and Similar Technologies?

Cookies are small text files placed on your device (computer, phone, tablet) when you visit a website. They help the site remember information about your visit, such as preferences or login details, making your experience more efficient and personalized.

We also use similar technologies, including:

•  Pixels / web beacons

•  Local storage

•  Device identifiers

•  Server logs

These technologies may collect or store personal data (e.g., IP address, browsing behavior) under the PDPA and other laws.

Why Do We Use Cookies?

We use cookies and tracking technologies for the following purposes:

1.  Strictly Necessary / Essential Cookies
These are required for the website to function properly (e.g., session management, security, shopping cart, fraud prevention).
Legal basis: Necessary for the performance of our contract with you or our legitimate interests (PDPA Schedule I).
Consent: Not required — these cannot be disabled without breaking site functionality.

2.  Functional / Preference Cookies
These remember choices you make (e.g., language, region, currency, login “remember me”).
Legal basis: Legitimate interests or consent (where non-essential).
Consent: Optional.

3.  Performance / Analytics Cookies
These help us understand how visitors use the site (e.g., pages visited, time spent, errors) to improve performance and user experience. We use first-party and third-party tools (e.g., Google Analytics).
Legal basis: Legitimate interests (improving our services) or consent.
Consent: Required for non-essential analytics.

4.  Advertising / Marketing Cookies
These track your browsing to show relevant ads on our site and third-party sites (retargeting). They may involve third parties (e.g., Google Ads, Facebook Pixel).
Legal basis: Consent (PDPA requires freely given, specific, informed consent for such processing).
Consent: Strictly required.

5.  Social Media & Content Cookies
These enable social features (e.g., share buttons, embedded videos) and may track behavior for advertising or analytics.
Legal basis: Consent.

Our Cookie List

We use the following categories (examples; actual cookies may vary):

•  Essential — Session cookies, security tokens, anti-fraud checks (no opt-out possible).

•  Functional — Preference storage (e.g., language, dark mode).

•  Analytics — Google Analytics, internal site analytics (anonymized where possible).

•  Advertising — Google Ads, Meta Pixel, retargeting pixels.

•  Third Parties — Social plugins (Facebook, Instagram, etc.), embedded content providers.

For a detailed, up-to-date list of cookies (including names, providers, purposes, and durations), see our cookie consent banner/manager on the website (if implemented) or contact us.

How We Obtain Consent

•  We use a cookie consent banner on first visit (or when required).

•  It allows you to accept allreject all, or customize preferences.

•  Consent is freely given, specific, informed, and unambiguous (PDPA Schedule III / GDPR standard).

•  You can withdraw or change consent at any time via the banner (usually in the footer as “Cookie Settings”) or browser controls.

•  For EEA/UK users: We follow GDPR opt-in standards for non-essential cookies.

•  We honor Global Privacy Control (GPC) signals as an opt-out from targeted advertising/sharing (where technically feasible).

How to Manage Cookies

•  Via our banner: Access settings anytime (footer link: “Cookie Preferences”).

•  Browser settings: Block or delete cookies in your browser (e.g., Chrome, Firefox, Safari). Note: Blocking essential cookies may prevent site use.

•  Third-party opt-outs: Visit provider sites (e.g., Google Analytics opt-out: https://tools.google.com/dlpage/gaoptout; Your Online Choices: http://www.youronlinechoices.com).

•  Do Not Track: We do not currently respond to general DNT signals (except GPC where supported).

Disabling cookies may limit functionality (e.g., no saved cart, personalized recommendations).

International Transfers & Third Parties

Some cookies involve third parties outside Sri Lanka (e.g., US-based Google, Meta). We use safeguards (e.g., Standard Contractual Clauses, adequacy decisions) to protect data under PDPA and GDPR rules.

Updates to This Policy

We may update this Cookie Policy to reflect changes in technology, law, or practices. Check back periodically; material changes will be notified via the banner or site notice.

Contact Us

Questions about cookies or privacy?

Email: info@mcdoly.lk

Mobile/WhatsApp: +94777461918

Address: N0.17 Anil Munasinghe Pura, Horawala, Walipenna, 12108, Sri Lanka

Thank you for trusting MCDOLY.LK with your experience. We value your privacy and strive for a secure, exclusive shopping journey