Privacy Policy
At the restaurant, your privacy and personal data security are of utmost importance to us. This policy explains how we collect, handle, and protect your information when you use our ordering platform.
Payment Card Security & PCI-DSS Compliance
We do not collect or store your payment card numbers or CVV codes. All online credit/debit card transactions are securely directed to and processed by PayHere (payhere.lk), certified under PCI-DSS (Payment Card Industry Data Security Standard) Level 1 with industry-standard 256-bit SSL encryption.
1. Our Commitment to Your Privacy
the restaurant ("we", "our", or "us") operates the online restaurant and food ordering service. We respect your confidentiality and are committed to complying with recognized data protection principles and the Personal Data Protection Act No. 9 of 2022 (PDPA) of Sri Lanka.
2. Information We Collect
We only collect data strictly necessary to fulfill your food orders, authenticate your session, and provide support:
- •Contact Information: Your full name, mobile telephone number, and optional email address.
- •Delivery Details: Physical delivery address, street name, building/apartment number, landmarks, and geographic map coordinates (latitude/longitude) pinned during checkout.
- •Order History: Specific food items, quantity, customizations, special kitchen instructions, order totals, and fulfillment type (delivery or pickup).
- •Technical & Session Data: IP address, device browser type, and local storage tokens required to maintain your active cart and login state.
3. Online Payment & Cardholder Data
When you choose to pay online using Visa, MasterCard, or other supported payment channels:
- •You are securely redirected to the payment interface managed by PayHere (Private) Limited, a Central Bank of Sri Lanka (CBSL) approved payment aggregator.
- •Zero Card Storage: Our servers never store, process, or view your sensitive payment credentials (such as 16-digit card numbers, expiration dates, CVV/CVC security codes, or card PINs).
- •PayHere performs real-time bank authorization and transmits back an encrypted, signed confirmation code indicating payment status (such as
PAIDorFAILED).
4. How We Use Your Information
The information you provide is utilized exclusively for:
- •Cooking, preparing, and packaging your food order according to your instructions.
- •Dispatching our delivery riders to your doorstep and enabling rider navigation via map coordinates.
- •Sending essential One-Time Passwords (OTPs) and transactional order status SMS updates (Order Confirmed, Preparing, Out for Delivery, Delivered).
- •Customer support, complaint resolution, and payment refund processing.
- •Preventing fraudulent orders and maintaining system integrity.
Third-Party Service Providers
We only share pertinent details with trusted technical and operational partners strictly to provide our service:
PayHere (payhere.lk)
Authorized payment gateway aggregator for secure card processing.
SMS Gateway (SMSLenz)
Telecommunication gateway for SMS OTP logins and live order updates.
Delivery Fleet
Assigned riders receive your name, address, and phone number to execute delivery.
Cookies & Browser Storage
Our application uses local storage and cookies to maintain essential web functions, such as keeping items in your shopping cart, preserving your delivery preferences, and keeping you authenticated between visits. You may disable cookies in your browser settings, though doing so may limit your ability to place orders smoothly.
Your Rights & Data Control
You have the right to inspect, update, or request the deletion of your account and personal details held on our systems. If you wish to update your details or request data removal, please contact our support desk at our support team.
Inquiries & Privacy Officer
If you have questions regarding this Privacy Policy or how your information is handled, please contact our team: