Privacy Policy

Last updated: 10 October 2026

Lowcart helps people find the cheapest total price for beauty and skincare products. Lowcart is run by Rumesh Wanigasooriya, an independent founder based in Sri Lanka ("Lowcart", "we", "us"). We decide how your information is used, and you can reach us at hello@getlowcart.com.

This policy explains what we collect, why, how long we keep it and the choices you have. Lowcart is in beta, and we will update this policy as the service changes.

Information we collect

When you search: what you searched for (a product name or a link), your delivery country, your US state if you choose one, the time, and your email address with whether you asked for deals or price alert emails.
When an AI assistant asks Lowcart for prices: the product and country it sends. We do not receive an email address this way.
When you click through to a store: which store and product you opened from your results.
For security: a scrambled, one way version of your IP address (a hash) so we can stop spam and abuse. We cannot turn it back into your IP address. Our hosting provider also processes IP addresses to deliver and protect the website.
In your browser: your cookie choices and, if you allow it, your delivery country. See our Cookie Policy.
Messages you send us, for example by email.

We do not ask for payment details. You buy products directly from the stores, not from us.

How we use it

To check prices and show your results.
To follow up on your search, for example to email you if we add a product we could not find.
To send price drops and deals, but only if you ticked the box.
To improve Lowcart, for example by seeing which products and countries people search for and which stores they choose.
To keep the site secure and to prevent spam and abuse.
To meet our legal obligations.

To check prices, our server sends the product you searched for and your delivery country to stores and to Shopify's product catalog. We never send them your email address or other personal information.

Legal bases

If you are in the European Economic Area, the United Kingdom or another place with similar laws, we rely on these legal bases:

Providing the service you asked for: running your search and following up on it.
Your consent: deals emails and remembering your country in your browser. You can withdraw consent at any time.
Our legitimate interests: improving Lowcart and keeping it secure, balanced against your rights.
Legal obligations, where the law requires us to keep or share information.

Who we share it with

We do not sell your personal information, and we do not share it for targeted advertising. We share it only with:

Cloudflare, which hosts the website, runs our server and stores our database. Cloudflare may only use the information to provide its service to us.
Our email provider, when we send you an email.
Authorities, when the law requires it.
A buyer or successor, if Lowcart is sold or merged. This policy would keep protecting your information.

When you click a link to a store, you leave Lowcart. The store, and any affiliate network that records the referral, handle your visit under their own privacy policies.

International transfers

We are based in Sri Lanka, and Cloudflare processes information in data centers around the world, including the United States. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses.

How long we keep it

Your email and preferences: until you ask us to delete them, or 24 months after your last search.
Your searches: 12 months.
The scrambled version of your IP address: 30 days.
Store clicks: 12 months.
Saved price results (not linked to you): up to 2 days.

Your rights

Depending on where you live, you can ask us to give you a copy of your information, correct it, delete it, or send it to you in a portable format. You can also object to or limit how we use it, and withdraw your consent at any time. Every deals email has an unsubscribe link.

If you live in California or another US state with a privacy law, you can ask what information we collect and ask us to delete it. We will not treat you differently for using your rights. We do not sell or share personal information as those laws define it.

To use any of these rights, email hello@getlowcart.com. We reply within 30 days. You can also complain to your local data protection authority.

Children

Lowcart is not meant for children under 16, and we do not knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.

Security

We protect your information with encrypted connections, limited access and a private admin key. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Changes to this policy

We will post any changes on this page and update the date at the top. If a change is significant, we will also tell people on our email list.

Contact

Rumesh Wanigasooriya, an independent founder based in Sri Lanka. Email: hello@getlowcart.com