This policy explains how The Octa (“we”, “us”) handles personal data when you use this website, order from us, book a table or contact us. We follow Sri Lanka’s Personal Data Protection Act, No. 9 of 2022.
Who we are
The Octa, 08 Pietersz Pl, Nugegoda, Sri Lanka. Email theoctalk@gmail.com, phone 076 622 4545.
What we collect and why
- Takeaway orders: your name, mobile number, the dishes you choose, your collection time and any notes. We use them to prepare your order and contact you about it.
- Card payments: if you pay online, your card is processed by Stripe. We never see or store your full card number. We receive your email address and payment status so we can match the payment to your order.
- Contact form: your name, email, optional phone number and message, so we can reply.
- Email list: your email address and the date you agreed, so we can send occasional news and offers. You can unsubscribe at any time using the link in every email or by emailing us.
- WhatsApp: if you choose to message us on WhatsApp, WhatsApp’s own privacy policy applies to that conversation.
Our legal grounds
We process order and enquiry details because you asked us to (to take your order or answer you), and email list details because you gave consent. We may keep records where the law requires it.
Who processes data for us
This website is hosted by Cloudflare. Online card payments are handled by Stripe. Emails may be delivered by an email service provider acting on our instructions. These providers may process data outside Sri Lanka with appropriate safeguards. We do not sell your data.
How long we keep it
We keep order records for up to 24 months, messages for up to 12 months, and email list details until you unsubscribe. Then we delete them, unless the law requires us to keep them longer.
Your rights
You can ask to see, correct or delete the personal data we hold about you, withdraw consent, or object to how we use it. Email theoctalk@gmail.com and we will reply within a reasonable time. You may also complain to the Data Protection Authority of Sri Lanka.
Cookies
We do not use tracking or advertising cookies. See our cookie notice.
Changes
We will post any changes to this policy on this page with a new date.