1. Information we collect
- Details you give us — your name, email address, phone or WhatsApp number, country, stay dates, number of guests, and any requests you include in a booking inquiry, package inquiry, contact form or newsletter signup.
- Payment information — when you pay online, your card details are entered directly on the secure payment page of PayHere. We receive only the payment result and reference (for example, the amount, status and the last digits of the card). We never see or store your full card number or security code.
- Stay information — identity document details collected at check-in and preferences you share with us.
- Technical information — pages visited, device and browser type, and an approximate country or city inferred from your network, collected through cookies and similar technologies (see section 5).
2. How we use your information
- To respond to inquiries and to confirm, manage and prepare for your booking.
- To process advance payments and refunds.
- To contact you by email, phone or WhatsApp about your stay.
- To send offers and news, only if you subscribe — you can unsubscribe at any time.
- To improve our website and services, and to prevent fraud and misuse.
- To meet our legal, tax and accounting obligations.
3. Sharing your information
We do not sell, trade or rent your personal information. We share it only where needed to provide our services:
- Payment processing — PayHere (Pvt) Ltd and the card networks and banks involved in your transaction.
- Service providers who help us run the website and our business, such as website hosting and database storage, email delivery, spam protection on our forms and — only with your consent — website analytics. They may use your information only to provide these services to us.
- Excursion partners — the minimum details needed when you ask us to arrange a safari, transfer or other activity.
- Authorities — where required by law or valid legal request.
4. Data security & retention
We use industry-standard safeguards, including encrypted (HTTPS) connections and restricted access to booking records, to protect your information from unauthorised access, alteration or loss. Online payments are handled entirely on PayHere's secure, PCI-DSS compliant platform. No method of transmission or storage is 100% secure, but we work to protect your data.
We keep booking and payment records for as long as needed for your stay and for our legal and accounting obligations, then delete or anonymise them.
5. Cookies & analytics
We use essential cookies to run the website — for example to remember your currency choice and your cookie preference. With your consent, we also use analytics cookies (such as Google Analytics, Microsoft Clarity or Meta Pixel, where enabled) to understand how visitors use the site and improve the booking experience.
When you first visit, you can choose "Essential only" or "Accept all". To change your choice, clear this site's data in your browser and the notice will appear again. You can also block cookies in your browser settings, though some features may not work as intended.
6. Your rights
You can ask to access, correct or delete the personal information we hold about you, or to stop receiving marketing messages, at any time by emailing info@diyadaharalakeresort.lk. We may need to keep certain records where the law requires it.
7. Children
Our website and booking services are intended for adults. We do not knowingly collect personal information from children, other than guest details provided by a parent or guardian as part of a booking.
8. Changes to this policy
We may update this Privacy Policy from time to time. Changes are posted on this page with a new "last updated" date. Please also read our Terms & Conditions and Refund & Cancellation Policy.
