Privacy Policy
Last updated: 10 November 2026
TENORA ("we", "us") respects your privacy. This page explains what personal data we collect when you use our website and place an order, why we collect it, and your rights. We handle your data in line with Sri Lanka's Personal Data Protection Act, No. 9 of 2022.
What we collect
- When you place an order: your name, phone number (WhatsApp), optional email address, delivery address, the items you ordered, and your chosen payment method (cash on delivery or bank transfer).
- When you write a review: your name, rating and comment.
- On your device: we save your cart, favourites and the numbers and dates of up to 20 recent orders in your browser. You can clear saved order numbers on the tracking page or clear all site data in your browser settings. Enter your phone number each time you check an order.
We do not collect or store card numbers. Card payment is not offered at the moment. If we add it later, payments will be handled by a licensed payment provider and we will update this page.
Why we use it
- To process, deliver and confirm your order, and to contact you about it (usually on WhatsApp).
- To keep records of sales and stock, and to meet tax and legal obligations.
- To show approved reviews on the website.
- If you accept visit counting, to measure visits using a browser-generated ID, the page visited, device type and referring site. Your browser stores your consent choice.
We do not sell your data. We will not send you promotional emails or messages unless you clearly agree to receive them.
Who can see it
The TENORA team accesses your order to process it. Tracking shows limited order details after you enter the order number and phone number. To run the shop we use service providers that process data for us: Supabase (database and website backend), an email delivery service (to send order emails), our web hosting provider, and WhatsApp (when you open the chat with us to confirm your order). Some of these providers store data on servers outside Sri Lanka. We share only what is needed for them to do their job. We may also share delivery details (name, phone, address) with the courier delivering your order, and we may disclose data if the law requires it.
How long we keep it
We keep order records for as long as needed to deliver your order, handle returns and complaints, and meet accounting and tax requirements (normally up to 6 years). After that we delete or anonymise them. Reviews stay on the website until you ask us to remove them.
How we protect it
Our database is protected by access rules so that only the shop admin can view orders, and the website connects over HTTPS. No online system is completely risk free, but we take reasonable steps to keep your data safe and limit access to the people who need it.
Your rights
You may ask us to: see the personal data we hold about you; correct it; delete it (where we are not required to keep it); or stop using it for a purpose you did not agree to. You can also withdraw any consent you gave. Contact us using the details below and we will reply within a reasonable time.
Children
Our products are for children, but our website is meant for adults buying on their behalf. We do not knowingly collect personal data from children.
Changes
We may update this policy. The date at the top shows the latest version.