Data & Account Deletion Policy
Procedures and timelines for business account owners and dining guests to request account deactivation, personal data erasure, and handling of statutory retention exceptions.
1. Overview & Deletion Principles
WSNexa is committed to supporting data subject rights and transparency regarding data erasure under the Personal Data Protection Act No. 9 of 2022 of Sri Lanka.
This policy outlines how business account owners, staff members, and dining guests can request account deactivation or the permanent erasure of their personal information.
2. Account Deactivation vs. Permanent Erasure
Account Deactivation: Temporarily revokes login access, halts customer-facing QR menu discovery, and freezes billing while preserving historical records for potential reactivation.
Permanent Deletion: Irreversibly purges business configuration, branch outlets, dining area layouts, menu items, product photos, and staff memberships from our active databases.
3. How Business Owners Request Account Deletion
To request the permanent deletion of a business account:
1. Submit a written deletion request to wsnexaofficial@gmail.com from the primary email address registered as the Business Owner.
2. Verification: Our security team will conduct mandatory identity verification to ensure the request originates from the authorized owner.
3. Settlement: Ensure all outstanding subscription invoices or merchant disputes are settled.
4. Execution: Upon verification, active databases will purge the business workspace within fourteen (14) business days.
4. Statutory Retention Exceptions
Under Sri Lankan revenue, commercial, and financial accounting laws, certain transaction records cannot be immediately erased:
- Financial & Tax Audit Logs: Completed invoice records, payment receipt references, and statutory tax calculations must be retained for required statutory audit periods.
- Dispute & Fraud Records: Logs relating to active payment chargebacks, fraud investigations, or legal proceedings are preserved until formal case closure.
- Backup Archival Rotation: Encrypted disaster-recovery database backups rotate and purge on a rolling 30-to-90 day lifecycle.
5. Dining Guest / Customer Data Deletion
Unregistered Guests: Dine-in guests who place orders via table QR code without creating an account leave no persistent customer profile. Session cookies expire automatically.
Registered Diners: Customers who created a guest account or enrolled in a venue loyalty program may request deletion of their profile, phone number, and loyalty balance by emailing wsnexaofficial@gmail.com or contacting the venue directly.