Privacy Policy

Sanmali Beach Hotel ("we", "us", "our", or the "Hotel") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, make a reservation, contact us or use our hotel services.

By using our website or providing your personal information to us, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

We may collect personal information that you voluntarily provide to us when you use our website, make a reservation, contact the hotel or stay with us.

This information may include:

• Full name
• Email address
• Telephone or mobile number
• Postal or billing address
• Passport or identification details where required
• Check-in and check-out dates
• Number of guests
• Room preferences and special requests
• Payment and transaction information.
• Information provided when contacting customer support
• Any other information you voluntarily provide to us

We may also collect certain technical information automatically when you use our website.

This may include:

• IP address
• Browser type and version
• Device type
• Operating system
• Pages visited
• Date and time of visits
• Referring website or source
• General website usage information

2. How We Collect Information

We may collect information through:

• Our website
• Online reservation forms
• Direct bookings
• Email communications
• Telephone communications
• In-person interactions at the hotel
• Third-party booking platforms
• Payment providers
• Cookies and similar technologies

Information provided through third-party booking platforms may also be subject to the privacy policy of the relevant third party.

3. How We Use Your Information

We may use personal information for legitimate business and service-related purposes, including:

• Processing and managing reservations.
• Providing accommodation and hotel services.
• Confirming bookings.
• Processing payments.
• Communicating with guests about reservations.
• Responding to questions, requests and complaints.
• Providing requested services and facilities.
• Managing check-in and check-out.
• Improving our hotel services and website.
• Maintaining website security.
• Detecting and preventing fraud or misuse.
• Complying with legal and regulatory obligations.
• Sending promotional communications where permitted and where appropriate consent has been provided.

4. Reservation Information

When you make a reservation, we may collect information necessary to process and manage your booking.

This may include your name, contact details, reservation dates, room information, number of guests, special requests and payment-related information.

We use this information to:

• Confirm your reservation
• Provide your requested accommodation
• Contact you regarding your booking
• Process payments and charges
• Provide relevant services during your stay
• Manage cancellations, changes and refunds

5. Payment Information

Payments may be processed through third-party payment providers or financial institutions.

Where payment processing is handled by a third party, your payment information may be subject to that provider's own privacy policy and terms.

Sanmali Beach Hotel does not intend to store full payment card details unless necessary and permitted for legitimate business purposes and applicable legal requirements.

6. Cookies and Similar Technologies

Our website may use cookies and similar technologies to improve your browsing experience and understand how visitors use our website.

Cookies may be used to:

• Remember preferences
• Maintain website functionality
• Improve website performance
• Understand website traffic and usage
• Provide security features
• Support analytics and other website services

You can control or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality of parts of our website.

Where required by applicable law, we will obtain appropriate consent before using non-essential cookies or similar technologies.

7. Analytics

We may use analytics services to understand how visitors interact with our website.

Analytics information may include pages visited, approximate location, device information, browser information and general usage patterns.

This information helps us improve our website, services and user experience.

If third-party analytics services are used, their own privacy policies may also apply.

8. Marketing Communications

Where permitted by applicable law, we may use your contact information to send information about:

• Special offers
• Promotions
• Hotel services
• Events
• Packages
• Other relevant hotel-related information

You may unsubscribe from promotional emails at any time by following the unsubscribe instructions provided in the relevant communication or by contacting us directly.

We will not use your personal information for unrelated marketing purposes without an appropriate legal basis or consent where required.

9. Sharing of Personal Information

We may share personal information where reasonably necessary to provide our services or fulfill legitimate business and legal purposes.

This may include sharing information with:

• Payment processors.
• Online booking platforms.
• Technology and website service providers.
• Email and communication service providers.
• IT and security service providers.
• Professional advisers.
• Government authorities or law enforcement agencies where legally required.
• Other service providers assisting us in operating the hotel.

We do not sell your personal information as a business practice.

Third-party service providers are expected to handle personal information in accordance with applicable privacy and data-protection requirements.

10. Third-Party Websites

Our website may contain links to third-party websites, including booking platforms, payment providers, travel services, social media platforms and other external websites.

These websites are operated independently from Sanmali Beach Hotel.

We are not responsible for the privacy practices, content, security or policies of third-party websites.

We encourage you to review the privacy policy of any third-party website before providing personal information.

11. Data Security

We take reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration, disclosure or destruction.

However, no website, electronic transmission or storage system can be guaranteed to be completely secure.

You should also take reasonable precautions when providing personal information online.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

The length of time we retain information may depend on:

• The nature of the information.
• The purpose for which it was collected.
• Our relationship with you.
• Legal and regulatory requirements.
• Accounting and financial requirements.
• The resolution of disputes or complaints.
• Security and fraud-prevention requirements.

When personal information is no longer required, we may securely delete, anonymize or otherwise dispose of it in accordance with applicable requirements.

13. Your Privacy Rights

Depending on applicable law, you may have certain rights regarding your personal information.

These may include the right to:

• Request access to personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of personal information where legally applicable.
• Request restriction of certain processing.
• Object to certain uses of your personal information.
• Withdraw consent where processing is based on consent.
• Request information about how your personal information is processed.

Some rights may be subject to legal limitations or exceptions.

To exercise an applicable privacy right, please contact us using the contact details provided below.

14. Children's Privacy

Our website and services are not specifically directed at children.

We do not knowingly collect unnecessary personal information from children.

Where information about a child is required for a hotel reservation or stay, it should be provided by a parent, guardian or another person legally authorized to provide that information.

15. International Data Transfers

Some of our service providers may process information in countries outside Sri Lanka.

Where personal information is transferred internationally, we will take reasonable steps to ensure that the information is handled in accordance with applicable privacy and data-protection requirements.

16. Social Media

Our website may include links or features connected to social media platforms.

If you interact with these features, the relevant social media provider may collect information about your interaction according to its own privacy policy.

Sanmali Beach Hotel does not control the privacy practices of external social media platforms.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, website functionality, legal requirements or privacy practices.

When we make changes, we will update the Last Updated date at the top of this Privacy Policy.

We encourage you to review this page periodically to stay informed about how we handle personal information.

18. Contact Us

If you have questions, concerns or requests regarding this Privacy Policy or your personal information, please contact us.