Thilaka’s FoodsYour privacy
Website privacy notice
Who this notice covers
Thilaka’s Foods is responsible for personal information submitted through this website. Use secure Storefront support for privacy questions.
Information we collect
Depending on what you use, this may include your name, email address, optional marketing choice and consent record, support message, order reference, checkout contact details, verified-purchase review and technical security logs. We also keep first-party counts of successful website page loads and a privacy-minimised daily visitor estimate. The daily estimate uses a one-way code made from limited request information; raw IP addresses are not stored in the visitor-count records, the code changes each day and no analytics cookie is placed. For tasting campaigns, we also record the chosen taster, claim reference, taster confirmation, spin result and discount-code status. First Batch eligibility is recorded separately from optional marketing consent. Secure review access stores a token digest rather than the raw access token.
Why we use it
We use information to provide support, keep the First Batch eligibility list, operate tasting promotions, prevent duplicate spins, store and provide rewards, record discount redemption and operate the website securely. A tasting-campaign reward email is transactional and does not add you to marketing. Only where you actively consent may we add you to the Thilaka’s list, issue and email your unique welcome code, and send product news and offers. Relevant information may also process orders and invite eligible customers to leave an optional honest review.
Service providers
If ordering is later activated, Stripe may process checkout and payment data. Only if a separately controlled email integration is enabled may it send consented marketing or non-promotional review invitations. Ask Thilaka may use a separately enabled drafting provider with sanitized public authority; it is not given payment-card details or private recipes.
Retention and your rights
Records are kept only as long as needed for their purpose, legal obligations, fraud prevention or resolving disputes. Daily visitor codes are kept for no more than 35 days; aggregated page-view totals do not identify individual visitors. Eligibility, promotion entry, reward, redemption, consent and review records may be retained to prevent duplicate issue or submission and provide an audit trail. You may ask for access, correction, deletion, restriction or objection where applicable, and may complain to the UK Information Commissioner’s Office.
Important
Do not submit payment-card details, passwords or unnecessary sensitive information through Ask Thilaka or support.