Website privacy notice

Who this notice covers

Thilaka’s Foods is responsible for personal information submitted through this website. Use secure Storefront support for privacy questions.

Information we collect

Depending on what you use, this may include your name, email address, optional marketing choice and consent record, support message, order reference, checkout contact details, verified-purchase review and technical security logs. We also keep first-party counts of successful website page loads and a privacy-minimised daily visitor estimate. The daily estimate uses a one-way code made from limited request information; raw IP addresses are not stored in the visitor-count records, the code changes each day and no analytics cookie is placed. For tasting campaigns, we also record the chosen taster, claim reference, taster confirmation, spin result and discount-code status. First Batch eligibility is recorded separately from optional marketing consent. Secure review access stores a token digest rather than the raw access token.

Why we use it

We use information to provide support, keep the First Batch eligibility list, operate tasting promotions, prevent duplicate spins, store and provide rewards, record discount redemption and operate the website securely. A tasting-campaign reward email is transactional and does not add you to marketing. Only where you actively consent may we add you to the Thilaka’s list, issue and email your unique welcome code, and send product news and offers. Relevant information may also process orders and invite eligible customers to leave an optional honest review.

Service providers

If ordering is later activated, Stripe may process checkout and payment data. Only if a separately controlled email integration is enabled may it send consented marketing or non-promotional review invitations. Ask Thilaka may use a separately enabled drafting provider with sanitized public authority; it is not given payment-card details or private recipes.

Retention and your rights

Records are kept only as long as needed for their purpose, legal obligations, fraud prevention or resolving disputes. Daily visitor codes are kept for no more than 35 days; aggregated page-view totals do not identify individual visitors. Eligibility, promotion entry, reward, redemption, consent and review records may be retained to prevent duplicate issue or submission and provide an audit trail. You may ask for access, correction, deletion, restriction or objection where applicable, and may complain to the UK Information Commissioner’s Office.

Optional advertising cookies

With your consent, we use the Meta Pixel to measure visits, product views, basket additions, checkout starts and purchases from Facebook and Instagram adverts, and to build audiences for relevant adverts. Meta may receive the page address, product identifiers, purchase value and currency, advertising click and cookie identifiers, and technical browser information. We do not add your name, email address, delivery postcode, card details or checkout confirmation tokens to Pixel events. Automatic advanced matching and automatic event configuration are disabled. Advertising cookies are not loaded before you accept. You can reject them and still shop normally, or change your choice using Cookie preferences.

Meta may set _fbp and _fbc advertising cookies, typically lasting up to 90 days. We remember your choice for up to 180 days and keep a limited browser record of counted purchases for up to 180 days to avoid duplicate measurement. Meta handles this information under its own privacy policy, including processing outside the UK where applicable. Pixel measurement depends on your consent and browser settings; it is not a complete record of every order.

Important

Do not submit payment-card details, passwords or unnecessary sensitive information through Ask Thilaka or support.