Legal

Privacy Policy

Last updated: March 2026

Brux Waffles (“we”, “us”, or “our”) is committed to protecting your privacy. This policy explains what personal information we collect, how we use it, and how we keep it safe when you use our website or place an order with us.

1. Information We Collect

When you create an account or place an order, we collect the following:

  • Full name — to personalise your order and account.
  • Email address — for order confirmations and account access.
  • Phone number — for delivery coordination and order updates.
  • Delivery address — to fulfil your delivery.
  • Order history — items ordered, dates, and order totals.

We do not collect or store any payment card details. All payment processing is handled securely by PayHere (payhere.lk), a licensed payment gateway in Sri Lanka. Please refer to PayHere’s privacy policy for details on how your payment data is handled.

2. How We Use Your Information

We use your personal information solely to:

  • Process and fulfil your food delivery orders.
  • Contact you regarding your order status or delivery.
  • Maintain your account and saved address for future orders.
  • Send order confirmation and receipt emails.
  • Improve our service and resolve customer support issues.

We do not use your information for unsolicited marketing without your explicit consent, and we do not sell or share your personal data with third parties for advertising purposes.

3. Data Storage

Your account data is stored securely on our backend infrastructure powered by Medusa, an open-source commerce platform. Data is stored on servers accessible only to authorised personnel. We take reasonable technical and organisational measures to protect your information from unauthorised access, loss, or disclosure.

Certain preferences (such as your saved delivery address) may also be stored locally in your browser’s localStorage for convenience. This data does not leave your device except when used to pre-fill checkout forms.

4. Third-Party Services

We use the following third-party services that may process your data:

  • PayHere — payment gateway for processing online payments. Your card details are entered directly on PayHere’s secure platform and are never transmitted to or stored by Brux Waffles.
  • Google Maps — used to display our delivery radius map. Your location is not collected or stored by us when viewing the map.

5. Your Rights

You have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate information via your Account Settings page.
  • Request deletion of your account and associated data by contacting us.

To exercise these rights, email us at admin@brux.lk.

6. Cookies

Our website uses essential browser storage (localStorage) to maintain your cart and login session. We do not currently use tracking cookies or third-party analytics cookies.

7. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, the “Last updated” date at the top of this page will be revised. Continued use of our service after changes constitutes acceptance of the updated policy.

8. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact:

Brux Waffles30/36 Malasekera Mawatha, Colombo 7, Sri LankaEmail: admin@brux.lk