Privacy Policy

Last updated: 28 July 2026

Maharani Indian Restaurant ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard data when you use our online ordering platform at https://maharani.lk.

1. Information We Collect

Account details: Full name, email address, and phone number when you register.
Delivery addresses: Street address and area for delivery purposes.
Order data: Items ordered, payment method, and order history.
Device & usage data: Browser type, IP address, and pages visited (for security and analytics only).

2. How We Use Your Information

To process and fulfil your food orders.
To send order confirmations and status updates via email or SMS.
To verify your identity via OTP (one-time password) during registration or login.
To improve our menu, service, and app experience.
To comply with legal obligations under Sri Lanka law.

3. Payment Processing

We do not store your card details. Online payments are processed securely through PayHere (payhere.lk) and LankaQR, which are PCI-DSS compliant third-party payment gateways. Their own privacy policies apply to payment data.

4. Data Sharing

We do not sell or share your personal data with third parties for marketing purposes. We only share data as needed to:

Deliver your order (name, address, phone shared with our delivery personnel).
Process payments (order details shared with PayHere / LankaQR).
Comply with a legal obligation or court order.

5. Data Retention

We retain your account and order data for up to 5 years for legal and accounting purposes, or until you request deletion. OTP codes are deleted immediately after use or expiry.

6. Your Rights

Under Sri Lanka's data protection principles, you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your account and associated data.

To exercise these rights, contact us at +94-701003001.

7. Cookies

We use session cookies to keep you logged in and maintain your cart. No third-party advertising cookies are used.

8. Security

All data is transmitted over HTTPS. Passwords are stored as bcrypt hashes and never in plain text.

9. Changes to This Policy

We may update this policy from time to time. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related enquiries, contact us via the Contact page or call +94-701003001.