Business details and policy decisions are awaiting owner confirmation. Marked placeholders must be completed before publication or PayHere review.
Information you share
When you book a surprise, we receive your name, phone number, optional email, surprise location, date and time, occasion, recipient name and optional phone number, relationship, and special instructions. Cake customisation may include weight, topper and wording. Please share only information needed to fulfil the order and ensure you are entitled to provide recipient details. Do not include sensitive personal information in free-text notes.
Accounts and order records
If you create an account, we process account and contact details, saved addresses, authentication information and order history. Supabase provides authentication and database infrastructure. We retain order references, purchased services, prices and necessary payment metadata to manage your booking and resolve payment enquiries.
How information is used
We use information to process orders, coordinate scheduled surprises and fulfilment, contact you about availability or changes, provide customer support, maintain account access, prevent misuse and fraud, and improve our services. We do not use recipient details to send unrelated marketing without an appropriate basis.
Payments
When online payment is enabled, PayHere processes payment credentials on its hosted checkout. Surprisewala does not collect or store complete card numbers or CVV. We store necessary transaction identifiers, amount, currency, method and verified payment status. Payment processing is also subject to PayHere’s own privacy and security practices.
Sharing and third parties
We share only relevant details with people and partners coordinating delivery, cakes, gifts, flowers or booked services, and with infrastructure and payment providers. We may disclose information when legally required or necessary to address fraud or protect rights. WhatsApp, social media and external links operate under their own policies; information sent through them is handled by those providers.
Cookies and device information
Authentication uses cookies to maintain sessions. The storefront uses browser local storage for cart and checkout details, and session storage for interface preferences. Infrastructure may process technical request information such as IP address and browser details to operate and secure the service. No advertising-cookie or analytics programme is asserted by this policy. Clearing browser storage removes locally saved details and may sign you out.
Retention and security
We keep information for the time needed for booking fulfilment, support, dispute handling and applicable record-keeping obligations. Retention periods must be confirmed by the business before publication. Access controls and server-side payment verification help protect records, but no internet service can guarantee absolute security. Avoid sharing card credentials with our team.
Your choices and rights
Contact us to request access, correction or deletion of your personal information, or to raise a privacy concern. We may verify your identity and retain records required for legitimate operational or legal purposes. Available rights depend on applicable law. You can manage saved account addresses and clear your browser storage.
Children and policy changes
Bookings should be placed by an adult authorised to enter the transaction. Information about a child recipient should be limited to what is necessary and supplied by an authorised adult. Contact us if information has been submitted inappropriately. Material changes will be reflected on this page with an updated date.
Contact and business details
For privacy enquiries, contact Surprisewala using the support details below. Outstanding legal identity, email, address and retention decisions must be completed before merchant review.
Here to help
Surprisewala · [BUSINESS LEGAL NAME]
WhatsApp: +94 76 050 5866
[SUPPORT EMAIL]
[BUSINESS ADDRESS]
Retention decision: [DATA RETENTION PERIOD]
Contact our team →