Data Privacy Policy (SLASL)

Effective Date: 01 August 2024

1. Introduction

At Small Luxury Accommodation Sri Lanka, we are committed to protecting your privacy and ensuring the security of your personal information. This Data Privacy Policy outlines how we collect, use, store, and share your data. By using our website, you agree to the terms and conditions described in this policy.

2. Data Collection

2.1 Types of Data Collected

Personal Information: Name, email address, phone number, passport details, travel preferences, and payment information.

Usage Data: IP address, browser type, operating system, pages visited, and time spent on our site.

Cookies and Tracking Technologies: We use cookies and other tracking technologies to enhance user experience and analyze website performance.

2.2 Methods of Collection Direct Collection

Information you provide when booking travel, creating an account, or contacting us.

Automated Collection: Data collected through cookies, web beacons, and similar technologies.

3. Data Usage

3.1 Purpose of Use

Booking and Reservations: To process and manage your travel bookings and reservations.

Customer Service: To respond to inquiries, provide support, and improve our services.

Personalization: To offer tailored travel recommendations and promotions based on your preferences.

Marketing: To share promotional materials and updates about our services, if you choose to receive them.

3.2 Data Access

Internal Access: Access to your data is limited to authorized personnel who require it to perform their duties.

Third-Party Services: We may share your data with third-party service providers (e.g. payment processors) to facilitate bookings and secure financial transactions.

4. Data Storage

4.1 Security Measures

Encryption: We use encryption to protect sensitive data during transmission and storage.

Access Controls: We have Implemented strict access controls to ensure only authorized personnel can access your data.

4.2 Retention Period

Retention: We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law.

Disposal: Data that is no longer needed will be securely deleted or anonymized.

5. Data Sharing

5.1 Third-Party Sharing

Service Providers: Our trusted service providers who assist us in operating our website will have access to your data

Legal Requirements: We may disclose your data if required by law or to protect our rights or the rights of others.

5.2 International Date Transfers

Data Transfers: Your data may be transferred to and stored in countries outside your jurisdiction. We ensure that such transfers comply with applicable data protection laws.

6. Data Access and Control

5.1 Third-Party Sharing

Service Providers: Our trusted service providers who assist us in operating our website will have access to your data

Legal Requirements: We may disclose your data if required by law or to protect our rights or the rights of others.

5.2 International Date Transfers

Data Transfers: Your data may be transferred to and stored in countries outside your jurisdiction. We ensure that such transfers comply with applicable data protection laws.

7. Data Breach Response

7.1 Incident Reporting

Protection for Data Breaches: We adhere to ISO 27001, the international standard for information security management.
Notification: In the event of a data breach, we will notify affected individuals as required by law and take steps to mitigate the impact.

7.2 Response Plan

Actions: In the unlikely event of a data breach, we will immediately inform you and we will investigate the breach, implement corrective measures, and review our security controls to prevent future incidents.

8. Compliance

8.1 Legal Requirements

Data Protection Laws: We comply with all applicable data protection laws and regulations, including Sri Lanka’s Personal Data Protection Act, No. 9 of 2022. Any legal action will be governed by Sri Lankan law.

8.2 Policy Updates

Review: This policy may be updated periodically. We will notify you of significant changes by posting the updated policy on our website.

9. Contact Information

For questions or concerns about this Data Privacy Policy or our data practices, please contact us at:

https://www.srilankasla.com/
Email: support@srilankasla.com
Phone: +94743337333 (Mobile and WhatsApp)

Explore Sri Lanka's hidden wonders.

Find stays and curated itineraries here.