PRIVACY POLICY

PRIVACY & COOKIES POLICY

At Cafe Bistro (Pvt) Ltd, accessible via www.cafebistro.lk, your privacy is extremely important to us. This Privacy & Cookies Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, use our services, register an account, or make purchases through our online platforms.

We value the trust you place in us and are committed to protecting your personal data in accordance with applicable data protection laws and best industry practices. This policy may be updated from time to time to reflect changes in technology, legal requirements, or our business operations. Any updates will be published on this page.

Scope of This Policy

This Privacy Policy applies to all platforms operated by Cafe Bistro (Pvt) Ltd, including:

Our official website: www.cafebistro.lk
Mobile-friendly web applications
Online ordering systems
Partner websites and official social media platforms where our products or services are offered

If you do not agree with the collection or use of your personal data as described in this policy, you may object at any time by contacting us using the details below.

Contact Information

If you have any questions, concerns, or objections regarding this Privacy Policy or your personal data, please contact us:

Email: info@cafebistro.lk

Postal Address:
Cafe Bistro (Pvt) Ltd
No. 71, Andadola Mawatha,
Wathugedara, 80340,
Sri Lanka

Personal Data We Collect

You may browse our website without providing any personal information. In such cases, we may collect non-personally identifiable data such as:

Browser type
Internet service provider
Referring website
Pages visited on our site

This information is used solely to improve website performance and user experience.

We collect personal data voluntarily provided by you, including but not limited to:

Full name
Email address
Contact number
Billing and delivery address
Payment-related details
Account login credentials

When We Collect Personal Data

We may collect personal information when you:

Create or use a customer account
Place an order through our website
Subscribe to newsletters or marketing communications
Contact us via email, forms, or phone
Participate in promotions, contests, or sweepstakes

When placing an order, certain information is mandatory to process and fulfill your purchase.

Use of Personal Data

Your personal data is used strictly for legitimate business purposes, including:

Processing and fulfilling orders
Confirming payments and deliveries
Managing customer accounts
Sending order confirmations and service-related communications
Providing customer support
Improving our products, services, and website experience

We do not sell or rent your personal data to third parties for marketing purposes without your explicit consent.

Data Retention & Deletion

We retain your personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by law. You may request deletion of your personal data at any time, subject to legal or contractual obligations.

Customer Accounts

Registered users receive password-protected access to their personal accounts. Through the “My Account” section, you can:

View order history
Update personal and delivery details
Manage newsletter subscriptions

You are responsible for maintaining the confidentiality of your login credentials. Cafe Bistro (Pvt) Ltd is not liable for unauthorized access caused by user negligence. Accounts may be deleted upon request.

Newsletters & Marketing Communications

If you subscribe to our newsletter, you will receive updates about promotions, products, and company news. You may unsubscribe at any time via the link provided in every email or through your customer account settings.

For existing customers, we may send product recommendations or special offers related to previous purchases. You can opt out of these communications at any time.

Disclosure of Personal Data

Your personal data may be shared only when necessary, including:

Delivery partners – for shipping and logistics
Banks and payment gateways – for payment processing

All third parties are required to protect your data and use it solely for the intended purpose.

Secure Data Transmission

All personal and payment-related data submitted through our website is protected using SSL (Secure Socket Layer) encryption, ensuring secure transmission over the internet.

Cookies

We use cookies to enhance website functionality, improve user experience, and analyze site traffic.

Cookies may include:

Session cookies (deleted when the browser is closed)
Persistent cookies (stored for future visits)

You can control or disable cookies through your browser settings. Please note that disabling cookies may limit certain website features.

Third-Party Services

Some services on our website are provided by third-party partners (e.g., payment gateways, analytics providers). These providers have their own privacy policies, and we encourage you to review them. Once you leave our website or are redirected to a third-party platform, this Privacy Policy no longer applies.

Agents & Service Providers

We may engage trusted vendors to support internal operations such as order fulfillment, data analysis, marketing, payment processing, and customer service. These parties are granted access only to the data necessary to perform their services and are contractually bound to maintain confidentiality.

Retargeting & Advertising

We may use retargeting technologies to display relevant advertisements to users who have previously visited our website. These advertisements are displayed via cookies and do not involve the storage of personally identifiable information.

Web Analytics (Google Analytics)

Our website uses Google Analytics to analyze visitor behavior and improve our services. Google Analytics uses cookies to collect usage data, which may be processed on servers outside Sri Lanka. IP anonymization may be enabled where applicable. You can disable cookies via your browser settings if you prefer.