Privacy policy

This policy explains how Villa Cozy (“we”, “us”), a guest house at 2792+GWQ, South, Unawatuna 80600, Sri Lanka, handles personal information when you use this website or contact us. We follow Sri Lanka’s Personal Data Protection Act, No. 9 of 2022, and treat visitors from the UK and EU with the same care expected under the UK GDPR and EU GDPR.

What we collect

• Details you send us through the booking, contact or careers forms: your name, email address, phone or WhatsApp number, travel dates, number of guests and any message you write.
• Messages you send us directly by phone, WhatsApp or email.
• Basic technical information our hosting provider (Cloudflare) records to keep the site secure and working, such as IP address and browser type, kept in short-lived server logs.

We do not use analytics, advertising or tracking cookies, and we do not sell or rent personal information.

How we use it

• To answer your enquiry and manage your booking request and stay (to take steps you asked for before a contract, and to perform it).
• To consider job applications you send us (with your consent).
• To meet legal duties, for example guest registration records that accommodation providers in Sri Lanka may be required to keep.

Who we share it with

Form submissions are delivered to us by email through our email provider, and WhatsApp messages are handled by WhatsApp (Meta). The embedded map is provided by Google. These providers process data on our behalf or under their own privacy policies. If you book through Booking.com, their privacy policy also applies.

How long we keep it

We keep enquiry and booking details for as long as needed to handle your stay and any follow-up, and no longer than two years unless the law requires otherwise. Job applications are kept for up to twelve months unless you ask us to delete them sooner.

Your rights

You can ask to see, correct or delete the personal information we hold about you, or object to how we use it. To do so, call or WhatsApp +94 77 333 1494. You can also complain to the Data Protection Authority of Sri Lanka or, if you live in the UK or EU, to your local data protection authority.

Changes

We may update this policy from time to time. The date at the top shows when it last changed.