Privacy Policy
Qwik Brew Cafe Pvt Ltd (“Qwik Brew”, “we”) collects personal data through this site, our cafes and the Qwik Brew ordering app on iOS and Android. This policy explains what we collect, why, and your choices.
What we collect. Account data (name, email, phone, hashed password); order data (items, customisations, prices, outlet, collection time, pickup codes, status history); payment data limited to card brand, last four digits and the transaction result, our payment provider handles the rest and we never store full card numbers or CVV; enquiry details you submit here; device and usage data (device model, OS and app version, crash logs, in-app events); your push token if you allow notifications; and CCTV in our cafes, signposted on site.
Why we use it. To create and secure your account, take and hand over orders, process payments and refunds, send order-status notifications, answer enquiries, provide support, detect fraud, keep required financial records, and understand aggregate usage. We do not sell your personal data and do not use it for third-party advertising.
Who we share it with. Only where necessary: the outlet you order from (first name, order contents, pickup code), including franchisee-operated outlets bound to our standards; our payment provider; hosting, crash-reporting and notification providers acting as processors under contract; and authorities where the law requires. Processors may store data outside Sri Lanka; where they do, we require appropriate safeguards.
How long we keep it. Account data while your account is open, then up to 90 days in backups. Order and transaction records up to six years where tax and accounting law requires. Crash and usage logs up to 12 months. CCTV up to 30 days unless needed for an incident.
Your rights. You can access, correct or download your data, turn off notifications, and request deletion of your account and personal data at any time, in the app under Profile → Account, or by emailing hello@concon.group. We respond within 30 days. Deletion removes your profile and personal identifiers; anonymised transaction totals may be retained for accounting.
Children. The app is intended for users aged 13 and over. We do not knowingly collect data from children under 13; contact us and we will delete it.
Security. Data is encrypted in transit (TLS) and at rest. Access to production data is restricted to authorised staff and logged. No system is perfectly secure, please use a strong, unique password and keep your device locked.
Changes and contact. We will post material changes here and notify you in the app before they take effect. Qwik Brew Cafe Pvt Ltd, 49, Thalawathugoda Road, Pitakotte, Sri Lanka, hello@concon.group.