Privacy policy

This policy explains how Yehen's Villa (“we”, “us”), Ranaviru Anuruddha Mawatha, Unawatuna 80600, Sri Lanka, handles personal data. We aim to meet the requirements of Sri Lanka’s Personal Data Protection Act, No. 9 of 2022, and to treat guests from the UK and EU with the standards they expect under the UK GDPR and EU GDPR.

What we collect

• Details you send us through the booking, contact or careers forms: name, email address, phone number, travel dates, number of guests and your message.
• Messages you send us on WhatsApp or by phone.
• Information needed for your stay, such as arrival time and, where Sri Lankan law requires it, identity documents at check-in.

We do not use analytics, advertising or tracking cookies on this website.

How we use it

• To reply to your enquiry, prepare a quote and manage your booking (to take steps at your request before entering into a contract, and to perform it).
• To meet legal obligations, such as guest registration.
• To consider job applications you send us (with your consent).

We never sell your data or use it for marketing without asking first.

Who we share it with

• Cloudflare, which hosts this website and processes form submissions.
• Our email provider, which delivers form submissions and your confirmation email.
• Google, when you use the embedded map or view the reviews feed.
• WhatsApp (Meta), if you choose to contact us on WhatsApp.
• A transfer driver, if you ask us to arrange one (name, flight details and phone number only).

Some of these providers process data outside Sri Lanka under their own safeguards.

How long we keep it

Enquiries that do not lead to a booking are deleted within 12 months. Booking records are kept for as long as the law requires. Job applications are kept for up to 12 months unless you ask us to delete them sooner.

Your rights

You can ask to see, correct or delete the personal data we hold about you, or object to how we use it. Contact us on +94 77 395 2897 (phone or WhatsApp). If you are not happy with our reply you can complain to the Data Protection Authority of Sri Lanka, or to your own country’s regulator.