Privacy Policy

We collect information in several ways to provide and improve our services:

• Account Information: When you create an account, we collect your name, email address, phone number, and password.
• Booking Information: Details about villa bookings, including check-in/check-out dates, number of guests, special requests, and payment information.
• Contact Information: When you contact us via our contact form, we collect your name, email, phone number, and message content.
• Authentication Data: Two-factor authentication codes and security verification information via Supabase.
• Usage Data: Information about how you interact with our site, collected through Google Analytics (page views, session duration, device type).
• Device Information: Browser type, IP address, operating system, and device identifiers for security and analytics purposes.

We use the information we collect for the following purposes:

• Service Delivery: Processing bookings, sending confirmation emails, and managing your account.
• Communication: Responding to inquiries, sending booking updates, and providing customer support via Resend email service.
• Authentication: Verifying your identity and maintaining account security through Supabase authentication.
• Analytics: Understanding user behavior and improving our website through Google Analytics.
• Legal Compliance: Fulfilling legal obligations and protecting our rights.
• Marketing: With your consent, sending promotional content and newsletters.

We use cookies and similar tracking technologies to enhance your experience. Cookies are small files stored on your device that help us remember your preferences and analyze site usage.

Types of cookies we use:

• Necessary Cookies: Required for authentication, security, and core functionality.
• Analytics Cookies: Help us understand how you use our site (Google Analytics).
• Preference Cookies: Remember your settings and preferences.

For detailed information about all cookies we use, please visit our Cookie Policy.

Under the California Consumer Privacy Act (CCPA) and similar state privacy laws, you have the right to opt out of the sale or sharing of your personal information.

We do not sell your personal information to third parties. We only share information with service providers who assist us in operating our website and conducting our business, subject to strict confidentiality agreements.

If you have questions about your privacy rights or wish to exercise your rights under applicable privacy laws, please contact us at ayubowan@theceylonvillas.com.

GDPR Rights (EU Residents):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time

CCPA Rights (California Residents):

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to delete personal information collected from you
• Right to opt-out of the sale or sharing of personal information
• Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, please contact us at ayubowan@theceylonvillas.com.

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Retention periods vary based on the type of data:

• Account Information: Retained while your account is active and for 2 years after account closure.
• Booking Information: Retained for 7 years for accounting and legal compliance purposes.
• Consent Records: Stored in your browser's localStorage until you clear your cookies or withdraw consent.
• Analytics Data: Retained by Google Analytics according to their retention policies (typically 26 months).

You can request deletion of your data at any time by contacting us.

If you have questions about this Privacy Policy or our privacy practices, please contact us:

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by updating the "Last Updated" date at the top of this page.

Your continued use of our website following the posting of revised Privacy Policy means that you accept and agree to the changes.