Privacy Policy

Upali's by Nawaloka · last updated 6 June 2026

This policy explains what personal information Upali's by Nawaloka collects when you order with us, and how we use and protect it, in line with Sri Lanka's Personal Data Protection Act.

What we collect

To take and deliver your order we collect your name, phone number, delivery address and order details, plus your email if you provide one. If you chat with us, we keep the messages so we can help you. We also collect basic technical data (such as your IP address) to keep the service secure and working.

How we use it

We use your information only to prepare and deliver your order, contact you about it, provide support, prevent fraud and abuse, and keep proper business records. We do not sell your data, and we do not send marketing unless you ask us to.

Payments

We take payment on delivery or collection — cash, or card on the rider's machine. We do not take card payments on this website and we never receive or store your card details.

Sharing

We share information only as needed to fulfil your order — for example with our delivery rider — and where required by law. We do not share your details with anyone else.

Cookies

We use a small number of cookies and similar local storage to remember your cart, your light/dark theme preference and your order so the site works smoothly. These are essential to the ordering experience.

Retention

We keep order and contact records for as long as needed to serve you and to meet our legal and accounting obligations, then delete or anonymise them.

Your rights

You can ask us to access, correct or delete your personal information. Contact us using the details below and we will respond.

Questions? Call 011 269 5812, WhatsApp 077 738 7339, or email orders@upalis.com.

← Back to menu