Privacy Policy

Last updated: 25 July 2026

GR Plaza ("we," "us," "our") operates the GR Delivery mobile and web application (the "App"), a platform for ordering groceries and food from participating supermarkets and restaurants in Sri Lanka. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By creating an account or placing an order on the App, you agree to the practices described here.

1.Information We Collect

Account information. When you sign up or place an order, we collect your name, mobile number, and (optionally) email address. Your mobile number is verified via a one-time password (OTP) and is the primary way we identify you on the App — you do not need to set a password to place an order as a guest, and returning to the App with the same verified number links you to your previous orders.

Delivery information. Delivery addresses you save (label, recipient name, address line, city, district, and optional postal code), and, where you allow it, approximate location to help you find nearby stores/restaurants and set a delivery pin.

Order information. Items ordered, order value, delivery or takeaway preference, applied coupons/discounts, order status and history, and any special instructions you add.

Payment information. Your chosen payment method (cash on delivery, card, or online payment). If you pay online, your card/payment details are collected and processed directly by our licensed third-party payment gateway — we do not store your full card number on our servers.

Reviews and feedback. Ratings and comments you leave for products or menu items you have actually received (delivered orders).

Communications preferences. Your choices about order-update notifications, promotional messages, SMS, and email digests.

Technical information. Device type, app version, IP address, and general usage data, collected automatically to keep the App working reliably and to detect fraud or abuse.

2.How We Use Your Information

We use your information to:

  • Create and manage your account and verify your identity via OTP
  • Process, fulfill, and deliver your orders (including routing the relevant order details internally to the specific GR Plaza outlet you ordered from)
  • Show you order status updates and order history
  • Apply and validate coupons/promotions you use
  • Respond to customer support requests and resolve disputes (including reviewing order/delivery issues)
  • Send order-related notifications, and promotional messages only if you have opted in
  • Improve the App, troubleshoot issues, and prevent fraud or misuse
  • Meet our legal and regulatory obligations, including those related to payment processing

3.Who We Share Information With

GR Delivery is owned and operated entirely by GR Plaza — we do not share your information with independent third-party sellers, because there are none on the App. We do not sell your personal information. Within GR Plaza, and with the limited outside parties below, we share information only as needed to run the service:

  • Relevant GR Plaza outlet staff (kitchen/store staff) receive the order details needed to prepare and fulfil your order, as part of our own internal operations.
  • Delivery personnel receive your name, contact number, and delivery address for the order they are delivering.
  • Payment processors receive the information needed to process your payment securely.
  • Service providers who help us with things like SMS/OTP delivery, hosting, and analytics, under confidentiality obligations.
  • Legal authorities, if required by law, regulation, or a valid legal request.

4.Data Retention

We retain your account and order information for as long as your account is active and for a reasonable period afterward to meet accounting, tax, dispute-resolution, and legal obligations. You may request deletion of your account as described in Section 7, subject to records we are legally required to keep.

5.Data Security

We use reasonable technical and organizational measures — including access controls and encrypted connections — to protect your information. No system is completely secure, and we cannot guarantee absolute security of information transmitted over the internet.

6.Cookies and Similar Technologies

Our website/app may use cookies or local storage to keep you signed in, remember your cart and preferences, and understand how the App is used. You can control cookies through your browser settings; disabling them may limit some features.

7.Your Choices and Rights

You can:

  • View and update your profile, addresses, and notification preferences at any time in the App
  • Opt out of promotional notifications while continuing to receive essential order updates
  • Request a copy of, correction to, or deletion of your personal information by contacting us at supermarket@grplaza.com (supermarket orders) or salemrr@grplaza.com (restaurant orders)

We will respond to reasonable requests within [X] business days, subject to any information we are required to retain by law.

8.Children's Privacy

The App is not directed at children, and you must be at least 16 years old to create an account or place an order.

9.Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised version in the App with an updated "Last updated" date, and where changes are material, we will notify you through the App or by SMS/email.

10.Contact Us

If you have questions about this Privacy Policy or how we handle your information, contact us at:

GR Plaza

No. 406 Main Street, Trincomalee, Sri Lanka

Supermarket orders: supermarket@grplaza.com

Restaurant orders: salemrr@grplaza.com