Privacy Policy

1. Who We Are

Baron Luxury Boutique Hotel ("the Hotel", "we", "us") is a boutique hotel located in Nuwara Eliya, Sri Lanka. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website or make a reservation.

2. Information We Collect

We collect the following personal information when you make a reservation or contact us:

• Identity data: First name, last name
• Contact data: Email address, phone number
• Booking data: Arrival and departure dates, room type, number of guests, board basis, special requests
• Payment data: Transaction reference numbers. We do not store card numbers — all payment processing is handled by PayHere.
• Communication data: Any messages or enquiries you send us via our contact form or email.

We do not collect sensitive personal data (such as health information, religious beliefs, or political opinions) unless you voluntarily provide it in a special request.

3. How We Use Your Information

We use your personal data for the following purposes:

• To process and manage your reservation
• To send booking confirmations and pre-arrival information
• To process deposit payments via our payment provider (PayHere)
• To respond to enquiries and provide customer support
• To comply with legal and regulatory obligations

4. Sharing Your Information

We only share your personal data with the following third parties, and only to the extent necessary:

• PayHere — our payment processor. PayHere receives your name, email, phone, and booking amount to process your deposit payment. Their privacy policy is available at payhere.lk.
• Legal authorities — if required by law or court order.

We do not share your data with online travel agencies (OTAs) or any other marketing platforms.

5. Data Retention

We retain booking records for a minimum of 5 years for accounting and legal compliance purposes. After this period, personal data is securely deleted.

If you contact us with an enquiry that does not result in a booking, we retain your message for up to 12 months before deletion.

6. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our booking system uses encrypted HTTPS connections, and access to booking data is restricted to authorised hotel staff only.

Payment card data is never stored on our systems — all card transactions are handled entirely by PayHere's PCI-DSS compliant infrastructure.

7. Cookies

Our website uses minimal browser storage (localStorage) to remember your currency preference (USD or LKR). No tracking cookies or third-party advertising cookies are used on this website.

8. Your Rights

You have the right to:

• Request a copy of the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to our legal retention obligations)
• Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at the details below. We will respond within 30 days.

9. Contact Us

If you have questions about this Privacy Policy or how your data is handled, please contact:

• Email: baronluxuryboutiquenuwaraeliya@gmail.com
• Phone: +94 77 999 3045
• Address: Baron Luxury Boutique Hotel, Nuwara Eliya, Sri Lanka

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with a revised date. We encourage you to review this page periodically.