Privacy Policy

Last Updated: January 2026

Introduction

At Villa Imperial, we are committed to protecting the privacy and security of our guests' personal information. This Privacy Policy outlines how we collect, use, store, and safeguard your information when you visit our website, make a booking, or use our services.

By using our website and services, you consent to the practices described in this policy. We encourage you to read this policy carefully and contact us if you have any questions.

Information We Collect

We collect information to provide better services to our guests. The types of information we collect include:

Personal Information

Data Type	Purpose
Full Name	Booking identification and communication
NIC/Passport Number	Guest verification and legal compliance
Email Address	Booking confirmations and updates
Phone Number	Booking confirmations and emergency contact
Payment Information	Processing transactions (handled by secure payment gateway)

Automatically Collected Information

• Device Information: Browser type, operating system, device type
• Log Data: IP address, access times, pages viewed
• Cookies: Session data and preferences (see Cookies section below)
• Location Data: General geographic location based on IP address

How We Use Your Information

We use the collected information for the following purposes:

• Service Improvement: Analyzing usage patterns to improve our website and services
• Personalization: Customizing your experience based on preferences
• Marketing: Sending promotional offers (only with your consent)
• Legal Compliance: Meeting regulatory and legal requirements
• Security: Detecting and preventing fraud or unauthorized access

Information Sharing

We respect your privacy and do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Payment Processors: We share necessary payment information with trusted third-party payment processors (e.g., PayHere) to process your transactions securely. These providers are contractually obligated to protect your data.
• Service Providers: We may share information with vendors who assist us in operating our website, conducting our business, or servicing you (e.g., email service providers).
• Legal Requirements: We may disclose your information if required by law, court order, or government regulation.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
• With Your Consent: We may share your information for other purposes with your explicit consent.

Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption: All data transmitted between your browser and our servers is encrypted using SSL/TLS technology.
• Secure Payment: Payment information is processed through PCI-DSS compliant payment gateways. We do not store your full credit card details.
• Access Controls: Access to personal information is restricted to authorized personnel only.
• Regular Audits: We conduct regular security assessments and updates.
• Data Minimization: We only collect and retain information necessary for our services.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience:

Cookie Type	Purpose
Essential Cookies	Required for website functionality (e.g., session management)
Analytics Cookies	Help us understand how visitors use our website
Preference Cookies	Remember your settings and preferences
Marketing Cookies	Used to deliver relevant advertisements (with consent)

You can control cookies through your browser settings. Disabling certain cookies may limit some features of our website.

Data Retention

We retain your personal information for as long as necessary to:

• Fulfill the purposes outlined in this policy
• Comply with legal obligations
• Resolve disputes and enforce agreements

Booking records are typically retained for 7 years for accounting and legal purposes. You may request deletion of your data subject to legal retention requirements.

Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information (subject to legal requirements).
• Opt-out: Unsubscribe from marketing communications at any time.
• Data Portability: Request your data in a portable format.
• Withdraw Consent: Withdraw consent for data processing where applicable.

To exercise any of these rights, please contact us using the information provided below.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with a revised "Last Updated" date. We encourage you to review this policy periodically. Continued use of our services after changes constitutes acceptance of the updated policy.