Last updated: 27 August 2026
At Nutsontop.lk, we are committed to protecting the privacy and security of our customers' personal information. This Privacy Policy outlines how we collect, use and safeguard your information when you visit or make a purchase on our website. By using our website, you consent to the practices described in this policy.
This policy should be read alongside our Terms and Conditions and our Refund Policy.
The controller of your personal information is:
Nutsontop (Pvt) Ltd 9/5 Station Road Colombo 4 Sri Lanka
Email: nutsontopdesserts@gmail.com
When you visit our website or place an order, we may collect:
a. Identity and contact information that you provide during checkout, including your name, email address and phone number.
b. Delivery information, including the delivery address and any delivery instructions you provide.
c. Order information, including your order and purchase history and payment confirmation details.
d. Payment information. Card payments are processed by PayHere, and payments through Koko and Mintpay are processed by those providers. We receive confirmation that a payment has succeeded. We do not collect, store or have access to your full card details.
e. Browsing information, such as your IP address, browser type, device information and pages visited, collected automatically using cookies and similar technologies.
f. Communications, including messages you send us by email, phone or WhatsApp, and our replies.
We do not operate customer accounts. You are not asked to create a username or password to place an order.
We use the information we collect to:
We do not sell, trade or rent your personal information.
We share your information only in the following circumstances:
a. Delivery partners. Your name, delivery address and phone number are shared with our courier partners so that your order can be delivered.
b. Payment service providers. PayHere, Koko and Mintpay process payments on our behalf and handle your payment information under their own privacy policies.
c. Service providers. Third parties who help us operate our website and communicate with customers. These providers are required to handle your data securely and to use it only for the purposes we specify.
d. Analytics and advertising providers. Google, through Google Analytics, and Meta Platforms, through the Meta Pixel, receive information about your visit to our website as described in section 6.
e. Legal authorities. Where we are required to disclose information by law, or in response to a valid legal request or order.
Some of the providers we use store and process data outside Sri Lanka. This includes Vercel, which hosts our website using global infrastructure, Google and Meta Platforms, which process analytics and advertising data on servers located in other countries.
We do not currently use an email marketing provider to store contact data.
Where your information is transferred outside Sri Lanka, we take reasonable steps to ensure it continues to be protected to the standard described in this policy.
We use cookies and similar technologies to keep your basket working, enhance your browsing experience, analyse website traffic and understand how visitors interact with our website.
The cookies we use fall into three categories:
a. Strictly necessary cookies. These are required for the website to function, including keeping items in your basket and completing checkout. These cannot be disabled.
b. Analytics cookies. We use Google Analytics to understand how visitors find and use our website, which pages are viewed and how our site performs. This helps us improve the site.
c. Marketing and advertising cookies. We use the Meta Pixel, provided by Meta Platforms, to measure the performance of our advertising, understand which visits result in an order, and show relevant advertising to you on Facebook and Instagram.
Google and Meta process this information under their own privacy policies, and both may combine it with other information they hold about you.
You can disable cookies through your browser settings. Please note that disabling strictly necessary cookies may prevent you from completing a purchase.
We take reasonable measures and apply appropriate technical and organisational safeguards to protect your personal information from unauthorised access, alteration, disclosure, loss or misuse.
Please be aware that no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
You may:
We keep your personal information only for as long as we need it for the purposes set out in this policy.
Our products and website are intended for individuals aged 18 and above. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected information from a person under 18, we will delete it.
If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal information, please contact us:
We may update or modify this Privacy Policy at any time. Any changes will be posted on this page with a revised last updated date. We encourage you to review this policy periodically to stay informed about how we collect, use and protect your information.
