Privacy Policy
1. Introduction
Round Island Barramundi (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you visit our website at https://www.roundisland.lk/, interact with our services, or engage with us online or offline. By using our website, you agree to the terms outlined in this Privacy Policy.
2. Who we are
Round Island Barramundi is a premium seafood brand operated in Sri Lanka (a subsidiary of OceanPick). We sell ocean-farmed barramundi directly to customers and primarily communicate with them over WhatsApp.
3. Information we collect
We collect information in the ordinary course of serving you:
- Contact details — your phone number and the profile name you use on WhatsApp.
- Messages — the content of the conversations you have with us on WhatsApp, whether answered by our team or by our automated assistant.
- Order information — the products you ask about or order, and the details needed to fulfil an order, such as your name, delivery address, and preferred delivery time.
- Website basics — if you browse our website, standard technical information such as pages visited may be recorded by our hosting provider for security and performance.
We do not ask for, and you should not send us, sensitive information such as identity documents, financial account details, or health information over WhatsApp.
4. Our WhatsApp assistant
Part of our WhatsApp customer service is automated. When you message us, an AI-powered assistant may respond first, helping you browse products, answering cooking and storage questions, and taking down order requests.
What the assistant does with your messages:
- Your message is processed by our systems to understand what you need and to generate a reply. We use Anthropic’s Claude language model, via its API, as part of this processing.
- Recent messages in your conversation may be used to keep context, so you don’t have to repeat yourself.
- Order requests you make are recorded so our team can confirm and fulfil them.
What the assistant will not do:
- It does not finalise orders, payments, or deliveries on its own; a member of our team always confirms these with you.
- It does not answer questions about allergens, health, or food-safety concerns. Messages on these topics are routed directly to our team, and a member will respond.
You can always ask to speak with a person, and our team can join or take over any conversation at any time.
5. How we use your information
- To respond to your questions and messages.
- To take, confirm, and deliver your orders.
- To route safety, quality, or allergen-related messages to our staff for personal handling.
- To keep basic records of conversations and orders so we can serve you consistently.
- To meet our legal obligations and protect our services from misuse.
We do not use your information for third-party advertising, and we do not sell it to anyone.
5. Who we share it with
We share personal data only with the service providers that make our customer service work:
- Meta (WhatsApp) — carries your messages, as it does for all WhatsApp conversations. Meta’s own privacy policy applies to your use of WhatsApp.
- Anthropic — processes message content through the Claude API so our assistant can understand and reply to you.
- Infrastructure and records providers — we run our systems on reputable cloud hosting and keep structured records (such as orders and product information) with established software providers.
These providers process data on our behalf to deliver the service. We may also disclose information if required by law or to protect our legal rights.
6. Where it is stored and how long we keep it
Our systems are hosted on cloud infrastructure located outside Sri Lanka (currently in the Asia-Pacific region), and some of our service providers process data in other countries. Wherever data is processed, we apply the protections described in this policy.
We keep conversation and order records for as long as needed to serve you and to keep reasonable business records, after which they are deleted or anonymised. You can ask us to delete your data earlier, see Your rights below.
7. Your rights
Subject to applicable law, including Sri Lanka’s Personal Data Protection Act, you can ask us to:
- Access — tell you what personal data we hold about you.
- Correct — fix information that is inaccurate or incomplete.
- Delete — erase your personal data, where we have no lawful reason to keep it.
- Object or withdraw consent — where our processing relies on your consent.
To exercise any of these rights, contact us using the details in Section 11. We will respond within a reasonable time and in line with applicable law.
8. Security
We protect your data with appropriate technical and organisational measures: encrypted connections to our systems, access limited to the people who need it to serve you, and reputable providers for hosting and records. No system is perfectly secure, but we work to keep risks low and to respond quickly if something goes wrong.
9. Children
Our products and services are intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us, and we will delete it.
10. Changes to this policy
We may update this policy as our services evolve, for example, if we add new tools or providers. When we do, we will update the “Last updated” date at the top of this page. Significant changes will be flagged on our website or in our WhatsApp channel.
11. Contact us
For any questions about this policy or your personal data:
- Email: [email protected]
- WhatsApp: message us on our customer service number and ask for a member of the team.
- Post: Oceanpick (Pvt) Ltd, 532/4F, Sirikotha Lane, Colombo 03, Sri Lanka.
