Partner Privacy Agreement: This policy explains how takeaway.lk safeguards merchant information, and defines the strict customer data protection and confidentiality rules that every registered restaurant and food business must follow under our platform-only model.
1. Scope & Applicability
This Merchant Partner Privacy Policy applies to all commercial restaurants, cafés, home-based food sellers, bakeries, and beverage businesses registered on the takeaway.lk platform across Sri Lanka.
We protect your commercial operations, menu pricing, and banking records. In turn, merchant partners agree to uphold rigorous customer data protection standards in compliance with the Sri Lanka Personal Data Protection Act No. 9 of 2022 (PDPA).
2. Merchant Information We Collect
During registration, verification, onboarding, and ongoing operations, we collect the following business information:
2.1 Business & Registration Details
Registered business name, trade name, kitchen or storefront address, business registration (BR) certificate, and applicable public health or food hygiene permits.
2.2 Owner & Authorized Contact Details
Names of authorized representatives, National Identity Card (NIC) details, official phone numbers, WhatsApp numbers, and email addresses.
2.3 Financial & Bank Settlement Details
Bank account title, bank name, branch code, and account number required for weekly or monthly earnings disbursement and commission reconciliations.
2.4 Menu & Operational Metrics
Dish descriptions, pricing, ingredient or allergen disclosures, dish photographs, operating hours, preparation duration estimates, and order history.
3. How takeaway.lk Uses Merchant Information
We process merchant business information strictly for verified operational needs:
- Digital Menu Listing: Publishing approved menus, dishes, prices, and operating hours on the customer-facing website and mobile app.
- Order Dispatch: Delivering incoming customer orders to your merchant system and coordinating rider pickup times.
- Financial Settlement: Preparing transparent merchant statements, deducting agreed commissions if applicable, and remitting net earnings.
- Marketing & Promotions: Managing agreed featured listings, promotional spotlights, or social media campaigns with your written consent.
- Merchant Support: Providing on-the-ground operational assistance and dispute handling.
4. Strict Merchant Obligations Regarding Customer Privacy
To maintain customer trust and comply with Sri Lankan data protection laws, merchants must strictly observe the following rules:
No Access to Contact Details: Merchants see only the order reference ID, items ordered, status, and culinary notes. Merchants do not receive customer phone numbers or delivery addresses.
No Data Harvesting: Merchants must not ask customers or delivery riders for customer phone numbers, full addresses, or social media profiles.
No Direct Customer Contact: Merchants must never contact customers directly regarding an order. All questions, substitutions, delays, and complaints must be directed through takeaway.lk support.
No Unsolicited Marketing: Merchants must never record customer notes or details for off-platform marketing, direct SMS, WhatsApp broadcasting, or third-party mailing lists.
No Off-Platform Bypass: Merchants must not encourage platform customers to place future orders outside the platform to avoid fees.
Any unauthorized harvesting of customer data or breach of customer privacy constitutes grounds for immediate suspension or permanent removal from the takeaway.lk marketplace.
5. Data Security & Storage Controls
takeaway.lk implements secure server infrastructure, role-based employee access, and encrypted communications to safeguard merchant banking details and commercial records.
Merchant account credentials must be kept confidential by the merchant. You must notify takeaway.lk immediately if you suspect unauthorized access to your merchant portal account.
6. Third-Party Disclosures
Merchant data is shared only under strict operational necessity:
- Public Marketplace: Restaurant name, menu, prices, and food photos are displayed publicly to customers ordering online on the platform.
- Banking Partners: Settlement records are shared with regulated financial institutions to execute direct bank remittances.
- Statutory Authorities: Disclosed where required by the Inland Revenue Department (IRD), Sri Lankan courts, or law enforcement.
7. Merchant Rights & Account Management
Merchant partners have the right to inspect their registered business details, update menu items, correct bank details, and request account statements.
Upon termination of merchant partnership, store listings are removed from public view. Financial settlement records are archived as required by Sri Lankan commercial and tax law.
8. Merchant Support & Contact
For merchant privacy inquiries, data updates, or partnership questions, contact our merchant desk:
Merchant Operations: takeaway.lk Partner Desk
Service Area: Sri Lanka
Email: merchants@takeaway.lk
Direct Line: Available via Merchant WhatsApp Desk