Privacy Policy

Last updated: September 2026

This Privacy Policy explains how Sulanga Luxury Chalets ("we", "us", "our") collects, uses, discloses and safeguards your information when you visit our website, make an enquiry, or complete a booking and payment with us. By using our website and services you agree to the practices described below.

1. Information We Collect

We collect information you provide directly to us, including:

• Identity & contact details — name, email address, phone number and postal address.
• Booking details — check-in/check-out dates, number of guests, room preferences and special requests.
• Payment information — details required to process your payment such as cardholder name and the transaction amount and currency.
• Technical data — IP address, browser type, device information and cookies collected automatically as you browse.

2. Payments & Payment Gateways

Online payments are processed securely through trusted third-party payment gateways and processors. When you make a payment:

• Your full card number, expiry date and CVV are entered directly on the secure, encrypted (SSL/TLS) checkout of the payment provider — we never see or store your complete card details on our own servers.
• Payment providers are certified to industry standards (such as PCI-DSS) and handle your card data under their own privacy policies.
• We receive only a confirmation of the transaction (success/failure, amount, currency and a reference number) so we can confirm your booking.

We encourage you to review the privacy policy of the relevant payment provider used at checkout for details on how they handle your payment data.

3. How We Use Your Information

• To process, confirm and manage your reservation and payment.
• To communicate with you about your booking, enquiries or special requests.
• To provide customer support before, during and after your stay.
• To send you offers and villa updates where you have subscribed or consented.
• To comply with legal, tax and accounting obligations, and to prevent fraud.

4. Sharing Your Information

We do not sell your personal information. We share it only with:

• Payment gateways and financial institutions to process transactions.
• Service providers who help us operate the website and manage bookings.
• Authorities or regulators where required by law.

5. Cookies

Our website uses cookies and similar technologies to remember your preferences, keep your session secure and understand how the site is used. You can control cookies through your browser settings, though some features may not function correctly if disabled.

6. Data Security

We use appropriate technical and organisational measures — including encryption of payment pages and restricted access to booking records — to protect your information. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We keep your booking and transaction records for as long as necessary to fulfil the purposes described in this policy and to meet legal and accounting requirements, after which they are securely deleted or anonymised.

8. Your Rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and withdraw consent to marketing communications at any time by contacting us.

9. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us:

• Sulanga Luxury Chalets
• 100, Ambewella Road, 4th step, Nuwara Eliya.
• Phone: +94 77 248 7000
• Email: rtissera@hotmail.com