Data Protection & Privacy Policy

At Clara Villas, we respect your privacy and are committed to protecting the personal information you choose to share with us.

This Data Protection & Privacy Policy explains what information we may collect when you visit our website, how we use it, when it may be shared, how we protect it, and the choices you may have regarding your personal information.

By using our website or contacting us through it, you acknowledge the practices described in this policy.

Depending on how you interact with our website, we may collect information such as:

• Contact Information: Your name, email address, telephone number, and other contact details that you voluntarily provide when making an enquiry.
• Booking Information: Information you provide when enquiring about or arranging a stay, such as preferred dates, number of guests, and other information relevant to your request.
• Communication Information: Information contained in messages, enquiries, or other communications that you send to us.
• Website Information: Certain technical information may be collected automatically when you visit our website, including your IP address, browser type, device information, pages visited, and general website usage information.
• Cookies and Similar Technologies: We may use cookies or similar technologies to help our website function properly, understand how visitors use our website, and improve your experience.

We aim to collect only information that is reasonably necessary for the purposes described in this policy.

We may use the information we collect to:

• Respond to your enquiries and requests.
• Communicate with you regarding your stay or services you have requested.
• Process and manage booking enquiries.
• Provide and improve our services.
• Maintain and improve the functionality and security of our website.
• Understand how visitors use our website and improve its content and user experience.
• Send information or promotional communications where you have requested or consented to receive them.
• Comply with applicable legal and regulatory requirements.

We do not use your personal information for purposes unrelated to the reasons for which it was collected unless permitted or required by applicable law.

Our website may use cookies and similar technologies. Cookies are small files stored on your device that can help websites remember information and understand how visitors interact with them.

We may use cookies to:

• Ensure that the website functions properly.
• Remember certain preferences.
• Understand website traffic and usage.
• Improve website performance and user experience.

You can adjust your browser settings to refuse or delete cookies. However, disabling certain cookies may affect some website functionality.

We do not sell, rent, or trade your personal information.

We may share information where reasonably necessary with trusted service providers who help us operate our website or provide services to you. These may include website hosting, website technology, communication, analytics, booking, or other service providers.

We may also disclose personal information where required by law, legal proceedings, or a lawful request from an appropriate authority.

Where we use third-party service providers, we take reasonable steps to ensure that personal information is handled appropriately.

Our website may contain links to third-party websites or services.

These third-party websites operate independently from Clara Villas and may have their own privacy policies and terms. We encourage you to review their privacy policies before providing them with personal information.

Clara Villas is not responsible for the privacy practices, content, or security of third-party websites.

We take the security of your personal information seriously and use appropriate technical and organisational measures to help protect it from unauthorised access, disclosure, alteration, misuse, or loss.

• Password Security: Where our website provides user account functionality, passwords are not stored in plain text. User passwords are securely hashed before being stored, helping protect account credentials from unauthorised access.
• Secure Data Transmission: Information transmitted between your browser and our website is protected using HTTPS, helping prevent unauthorised interception while information is being transmitted.
• Access Controls: Access to personal information and website systems is restricted to authorised access where reasonably necessary to operate and maintain our services.
• Data Protection: We use appropriate security measures for the systems and services used to store and process personal information.

Although we take reasonable steps to protect your information, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

Some of the technology and service providers used to operate our website may process information in countries outside Sri Lanka.

Where personal information is transferred or processed outside Sri Lanka, we take reasonable steps to ensure that the information is handled in accordance with applicable data protection requirements.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing services, responding to enquiries, maintaining appropriate business records, and complying with legal obligations.

When personal information is no longer reasonably required, we will take appropriate steps to delete it or otherwise dispose of it securely, subject to any legal or legitimate business requirements to retain it.

Depending on applicable law, you may have rights relating to your personal information, including the right to:

• Request access to personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information where there is no legitimate reason for us to continue retaining it.
• Withdraw consent where processing is based on your consent.
• Object to or request restriction of certain processing activities where applicable.
• Raise a concern about how your personal information is handled.

To exercise a privacy right or ask a question about your personal information, please contact us using the details provided below.

We may need to verify your identity before responding to certain requests.

Our website is not specifically directed toward children.

We do not knowingly seek to collect personal information from children without appropriate consent or where otherwise permitted by applicable law.

If you believe that a child has provided personal information to us inappropriately, please contact us so that we can review the matter and take appropriate action.

We may update this Privacy Policy from time to time to reflect changes to our services, website, legal requirements, or privacy practices.

When we make changes, we will update the Effective Date shown at the top of this page.

We encourage you to review this page periodically to remain informed about how we handle personal information.