Last updated: 27 October 2026
This policy explains how Sudda's Beach Restaurant, 47/B Initium Rd, Dehiwala-Mount Lavinia, Sri Lanka (“we”, “us”) handles personal information when you visit this website, place an order, book a table or contact us. We follow the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka.
What we collect
- Orders and bookings: your name, phone number, email address (if you give it), delivery address, the dishes you order and any notes.
- Messages: what you send through the contact form, the chat or WhatsApp.
- Newsletter: your email address, if you choose to join our list.
- Payments: card payments are handled by our payment provider, Stripe. We never see or store your full card number.
We do not use analytics, advertising or tracking cookies on this website.
Why we use it
- To prepare, confirm and deliver your order, and to contact you about it.
- To hold your table booking and reply to your questions.
- To send you our newsletter, only if you asked for it. Every email has an unsubscribe link.
- To meet our legal and accounting obligations.
Who we share it with
We share information only with services that help us run the website and orders: our hosting provider (Cloudflare), our payment provider (Stripe), our email provider for order confirmations and newsletters, and WhatsApp (Meta) when you choose to message us there. We never sell your information.
How long we keep it
Order records are kept for as long as accounting rules require. Messages are kept for up to 12 months. Newsletter details are kept until you unsubscribe.
Your rights
You can ask to see, correct or delete the personal information we hold about you, or object to how we use it. Call us on 072 292 9874 or write to us at the address above.
Changes
We may update this policy. The date at the top shows when it last changed.