Privacy Policy

1. Introduction

Allora ("we", "us", "our") is committed to protecting the privacy and security of our customers' personal information. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website, mobile apps, or vending machines. By using our Services, you consent to the practices described in this policy.

2. Information We Collect

• Personal identification information (name, email address, phone number) provided during registration, checkout, or wallet sign-up.
• Payment and billing information necessary to process your orders and top-ups, including card details, which are securely handled by our payment partner, PayHere, and their card processors.
• Transaction and usage data, such as machine ID, purchase history, wallet balance, and dispense records.
• Device and browsing information, such as IP address, browser type, and cookies, collected automatically when you use our website or app.

3. How We Use Your Information

• To process and fulfill your orders, top-ups, and subscriptions.
• To communicate with you about your purchases, provide customer support, and respond to inquiries.
• To operate, maintain, and improve our machines, website, and apps.
• To detect and prevent fraud, unauthorized activity, and abuse of our Services.

4. Payment Information

Card and mobile wallet payments are processed through PayHere and other licensed payment partners. We do not store your full card details on our servers — payment data is handled directly by our PCI-DSS compliant payment processors.

5. Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties, except:

• To trusted service providers (such as payment processors, SMS/email providers, and hosting providers) who help us operate our Services and are contractually bound to keep your data secure.
• When required by law or in response to a valid legal request.

6. Data Security

We use industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Cookies

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how our website is used. You can disable cookies in your browser settings, though this may limit some features.

8. Your Rights

You may request access to, correction of, or deletion of your personal information by contacting us using the details below, subject to any legal or contractual retention requirements.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "last updated" date.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, contact us at support@allora.lk.