Privacy Policy

Who we are

This website, brewbot.lk, is run by Bean & Beyond Co. (Pvt) Ltd. (“BrewBot”, “we”, “us”), a company registered in Sri Lanka (Reg. No. PV00302318), based in Mount Lavinia. We decide how and why the personal information described on this page is used, so we are the “controller” of it.

This policy explains what we collect, why, who sees it, how long we keep it, and the choices you have. We write it in line with the principles of Sri Lanka’s Personal Data Protection Act, No. 9 of 2022 (as amended).

What we collect

Information you give us

When you contact us through WhatsApp, email, phone or an enquiry form on this website, we receive what you choose to share, such as:

• Your name, phone number and email address
• Your business or organisation and the location you are asking about
• Whether you are interested in owning or hosting a BrewBot
• The content of your messages and any files you send

Information collected automatically

When you visit the site, your browser sends us technical information such as your IP address, device and browser type, the pages you view, and which buttons you click (for example “Talk to us” or “Download brochure”). We use this to understand how the site is used and to measure which pages bring enquiries. This analytics is only active when the relevant tools are installed on the site.

What we do not collect here

This website does not take payments and we do not collect card details through it. Payments made at a BrewBot machine are handled by the payment providers used on that machine and are not covered by this policy.

How we use your information

• To reply to your enquiry and give you the brochure or information you asked for
• To assess whether a location is suitable, arrange a site survey, and discuss an ownership or hosting arrangement
• To keep a record of enquiries and follow up
• To improve the website and measure how our marketing performs
• To meet legal, tax and regulatory requirements

We use your details to send promotional messages only if you have asked for them or agreed to them. You can stop at any time.

WhatsApp and other messaging

Buttons on this site open WhatsApp with a ready-written message to our number. Once you send it, we can see your WhatsApp number, profile name and message. WhatsApp is run by Meta and handles your message under its own privacy policy, which we do not control. If you prefer not to use WhatsApp, email or call us instead.

Cookies and similar technologies

We keep this to a minimum.

• Intro film flag. Your browser stores a small note for the current visit so the intro film plays only once. It holds no personal information and is cleared when you close the tab.
• Analytics and advertising measurement. If we enable tools such as Google Analytics or the Meta Pixel, they may set cookies or similar identifiers to count visits and measure advertising. We will ask for your consent where required, and you can block or delete cookies in your browser settings.
• Fonts. The site loads its fonts from Google Fonts, so Google receives your IP address when the page loads.

Who we share it with

We do not sell your personal information. We share it only with:

• Service providers who help us run the website and business, such as hosting, analytics, email, spreadsheet or CRM tools, and messaging platforms, who may only use it for our purposes
• Professional advisers, such as accountants and lawyers
• Public authorities, courts or regulators when the law requires it
• A buyer or successor, if the business is ever sold or restructured, under the same protections

Transfers outside Sri Lanka

Some of our providers, such as Google and Meta, store or process information on servers outside Sri Lanka. Where this happens, we use providers that apply appropriate protections to your information and we follow the rules that apply to cross-border transfers.

How long we keep it

We keep personal information only as long as we need it for the purposes above, including any legal, accounting or reporting requirement. When we no longer need it, we delete or anonymise it.

How we protect it

We use reasonable technical and organisational measures, such as secure (HTTPS) hosting, restricted access to enquiry records, and trusted providers. No online system is completely secure, so please do not send sensitive information such as bank or card details by message.

Your choices and rights

You can ask us to:

• Tell you what personal information we hold about you and give you a copy
• Correct information that is wrong or out of date
• Delete your information, or stop using it, where we no longer need it
• Stop sending you marketing messages
• Withdraw consent you gave earlier

Email hello@brewbot.lk and we will reply within a reasonable time. We may need to confirm who you are first. Some legal rights under the Personal Data Protection Act are being brought into force in stages, and we will honour the rights that apply to us as they take effect.

Children

This website is meant for businesses and adults. We do not knowingly collect personal information from children under 18. If you think a child has sent us information, contact us and we will delete it.

Changes to this policy

We may update this policy, for example when we add a new tool to the site. The “Last updated” date at the top shows the latest version. Significant changes will be highlighted on this page.

Contact and complaints

Questions or requests about your information:

If you are not happy with how we handle your information, please tell us first so we can put it right. You may also contact the Data Protection Authority of Sri Lanka.