Privacy Policy
This Privacy Policy explains how Serenity Hotels collects, uses, discloses and protects your information.
Last updated: November 07, 2025
1. Who we are
“Serenity Hotels”, “we”, “us” and “our” refer to Serenity Hotels (Sri Lanka) whose collection includes Kadupul by Serenity, Neroli by Serenity, Vines by Serenity, Hills by Serenity and Serenity Grand.
2. What data we collect
- Identification: name, email, phone, country.
- Booking details: dates, guests, preferences, payment status (no full card numbers stored on our servers).
- Communications: messages via forms or email.
- Technical: IP, browser/device info, pages viewed, cookies (see “Cookies & Analytics”).
- On-property: check-in documents as required by law, incident reports if any.
3. How we collect data
- Directly from you (forms, email, phone, at the property).
- Via our booking engine and authorised travel partners.
- Automatically via cookies/analytics.
4. Why we use your data
- Provide, confirm and manage reservations and services.
- Respond to enquiries and support requests.
- Process payments and prevent fraud.
- Improve our websites and guest experience.
- Send necessary service messages; with consent, send marketing you can opt out of.
- Comply with legal and tax obligations.
5. Legal bases
Contract, legitimate interests, legal obligation, and consent (for optional marketing).
6. Cookies & Analytics
We use cookies for essential functions and analytics. You can control cookies in your browser. Third-party tools (if any) set their own cookies.
7. Sharing your data
We share information with trusted processors (booking engine, channel manager, payment, email/SMS, transport/tour partners on request, IT/hosting/security) under protections and purpose limits. We do not sell your personal information.
8. International transfers
Your data may be processed outside Sri Lanka by global providers with appropriate protections.
9. Retention
We keep data as long as needed to provide services and meet legal requirements.
10. Security
We use appropriate safeguards but no method is completely secure.
11. Your rights
Request access, correction, deletion or restriction; withdraw consent for marketing via reservations@serenityhotels.lk.
12. Children
Not directed to children under the age required by local law without parental consent.
13. Third-party sites
Linked sites/booking platforms have their own policies.
14. Changes
We may update this Policy periodically.