Last updated: 25 September 2026
This Privacy Policy explains how Navi Boutique Hotel, operated by DREAM PROJECT (PVT) LTD, Ahangama 80650, Sri Lanka ("we", "us"), collects and uses your personal data when you visit naviboutiquehotel.com or stay with us. We process personal data in accordance with Sri Lanka's Personal Data Protection Act No. 9 of 2022 and, for guests from the European Union, the General Data Protection Regulation (GDPR).
1. Data we collect
- Booking data: name, email address, phone number, country, stay dates, number of guests and special requests.
- Check-in data: passport or national ID details, as required by Sri Lankan law.
- Payment data: payments are processed by PayHere. We receive confirmation of the payment and limited information, such as the amount, card type and last four digits. We do not receive or store your full card number or security code.
- Communications: messages you send us by email, WhatsApp or through the contact form.
- Technical data: cookies necessary for the website and booking process to function, such as session cookies. If analytics tools are added, anonymous visit statistics may also be collected with your consent.
2. Why we use your data
- To manage your reservation, stay and payments as part of the performance of a contract.
- To comply with legal obligations, including guest registration and tax and accounting requirements.
- To respond to your questions and requests.
- To send you information relating to your stay. We will only send marketing emails if you have agreed to receive them, and you may unsubscribe at any time.
3. Who we share your data with
We do not sell your data. We share it only with:
- PayHere, for payment processing in Sri Lanka.
- Booking.com, if you booked through that platform, and our channel manager provider, e4jConnect, which synchronises reservations.
- Our website hosting provider, Hostinger, and our email service providers.
- Public authorities, where required by law.
Some of these providers may process data outside Sri Lanka. They are required to protect it using appropriate safeguards.
4. How long we keep your data
Booking and invoice data is kept for as long as required under Sri Lankan tax and accounting law, generally 6 years. Other data is deleted when it is no longer required.
5. Your rights
You may ask to access, correct or delete your personal data, object to or restrict its use, or receive a copy of it. Please contact us at info@naviboutiquehotel.com. If you are not satisfied with our response, you may contact the Data Protection Authority of Sri Lanka or, if you are in the European Union, your local data protection authority.
6. Security
We use reasonable technical and organisational measures to protect your data, including encrypted HTTPS connections and a certified payment provider.
7. Changes
We may update this Privacy Policy from time to time. The latest version will always be available on this page.
8. Contact
Navi Boutique Hotel, Ahangama 80650, Sri Lanka
Email: info@naviboutiquehotel.com · Phone / WhatsApp: +94 70 760 3855