Privacy notice

Who we are

This website, terranature.lk, is run by Terra Nature (Pvt) Ltd ("Terra Nature", "we", "us"), the company behind the Necsi range of kithul foods. We decide how the personal data described here is used, which makes us its controller under the Personal Data Protection Act, No. 9 of 2022 (PDPA).

What we collect

We only collect what you choose to send us, plus the basic records any website keeps.

• Bulk order form. Your name or business name, where you want us to deliver, your phone number and/or email address, the products and quantities you ask about, and any notes you add.
• Contact form. Your name, email address, phone number (if you give one), the topic you pick and your message.
• WhatsApp, phone and email. If you call us, or message us on WhatsApp or by email, we receive your number or address, your name as it appears in the app, and whatever you write or attach. WhatsApp is run by Meta, and its own privacy policy covers messages sent through it.
• Hosting logs. Our hosting provider, Netlify, automatically records technical details of each visit (such as your IP address, browser type, the page requested and the time) to run the site and keep it secure. To block spam, our form server also checks your IP address against recent submissions for a few minutes; it is not stored with your enquiry.

No cookies or tracking. This site does not set cookies, does not use advertising or analytics trackers, and loads its fonts from our own server.

Map on the outlets page. The map on our outlets page loads map tiles from OpenStreetMap, so your browser shares your IP address with OpenStreetMap’s tile servers when the map appears. No other page loads the map. Links to Google Maps and our social media pages (Facebook, Instagram, TikTok, Pinterest and X (Twitter)) take you to those sites, where their own privacy policies apply.

Why we use it

• To reply to your questions and messages.
• To prepare quotes, confirm orders and arrange delivery for bulk and wholesale requests.
• To keep the website and our forms working, secure and free of spam.

We use your details on the basis that you asked us to get in touch, or to take steps before a possible order. We do not sell your data, use it for advertising, or add you to a mailing list.

Who else handles it

Two service providers process data for us, only on our instructions:

• Netlify hosts this website and runs the form server.
• Resend delivers the emails our forms send to our inbox.

Both are based outside Sri Lanka, so your data may be processed abroad. We rely on their contractual data protection commitments to keep it safe. We share nothing else, unless the law requires us to.

How long we keep it

We keep enquiries and the replies to them for 24 months after our last contact with you, then delete them. If an enquiry becomes an order, we keep what we need for our accounts for as long as the law requires. Hosting logs are kept by Netlify for a short period only.

Your rights

Under the PDPA you can ask us to:

• give you a copy of the personal data we hold about you (access);
• correct anything that is wrong or out of date (correction);
• delete your data when we no longer need it (erasure);
• stop using your data where you gave consent (withdraw consent).

We may need to confirm who you are before acting on a request. If you are unhappy with how we have handled your data, please tell us first so we can put it right. You can also complain to the Data Protection Authority of Sri Lanka.

How to contact us

For any privacy question or request, email hello@terranature.lk, call us on +94 71 606 7486 or write to us at the address above. You can also use our contact form.

We may update this notice when the website changes. The date at the top shows when it was last revised.