Lanka Food Source | Authentic Sri Lankan Food, Spices & Goods Online

1. Introduction & Overview

At LankaFoodSource, we take your privacy extremely seriously. We are committed to transparency regarding the collection, processing, and handling of your personal data when you visit our website, use our storefront, or make commercial export inquiries.

This Privacy Policy outlines how your personal information is collected, used, and shared when you visit or make a purchase from lankafoodsource.com. By accessing our services, you consent to the data practices described in this document.

LankaFoodSource operates in accordance with standard international data protection principles, including general guidelines similar to GDPR and regional e-commerce policies.

2. Information We Collect

To complete your orders and provide a premium shopping experience, we require certain items of personal data. Specifically, we collect:

Account & Profile Information: Your name, email address, password hash (securely encrypted), and profile picture (if updated).
Billing & Shipping Address: Details required to deliver physical Sri Lankan food items to your door safely (street, city, state, postal code, and country).
Contact Details: Your active phone number, which is necessary for delivery agents (DHL/Express Cargo) to reach out during delivery.
Automatic Device Diagnostics: Your IP address, browser type, referral link, operating system, and pages visited, captured to prevent fraudulent checkout attempts.

No Raw Payment Details Saved

Your payments are processed directly through secured gateways (e.g., PayHere) via cryptographic tokens. LankaFoodSource does not touch, store, or transmit raw credit/debit card numbers.

3. How We Use Your Information

We rely on your processing data for legitimate business reasons and matching legal contracts, including:

Order Fulfillment: Processing payments, preparing shipping manifests, handling custom declarations, and updating you about delivery states.
Localized Invoice & Status Emails: We dynamically detect your country timezone to dispatch localized order transactional status invoices (e.g. tracking information and invoice breakdowns with complete pricing integrity).
Customer Support: Answering inquiries filed under our Contact Form, updating address details, and handling custom sourcing requests.
Security & Abuse: Detecting malicious requests, screening bad transaction rates, and preventing double-spend exploits.

4. Data Security & Retention

Your personal profile, order catalog summaries, and shipping addresses are stored within our secure, managed SQL database instances orchestrated through modern API backend systems.

We employ industry-leading SSL/TLS encryption for all data transport. Backends communicate over private subnets, ensuring unauthorized public access is blocklisted.

Data Retention: We keep your personal identification data for as long as your account remains active. Invoice transactions and historic billing lines are archived to satisfy state auditing and taxation requirements.

5. Sharing with Third Parties

LankaFoodSource will never sell or rent your personal user directories. We restrict data sharing strictly to partners that facilitate our operational logistics:

Logistics & Freight Forwarders: Sharing name, address, and phone number with international couriers (DHL, FedEx, Sri Lanka Post) to locate your address.
Transactional Mail Delivery: Email relays (using Resend or Gmail secure SMTP channels) to safely dispatch order status events.
Secure Payment Processors: Redirect links and encrypted status callbacks with PayHere to safely capture credit cards.

6. Your Rights & Control

We believe in complete client authority over private files. You have the right to claim the following operations:

Request a full export of personal profile files we currently store.
Modify or rectify current active addresses inside your Dashboard.
Request complete account erasure. Note that completed transaction billing lines will be kept for accounting history.