Privacy Policy for Castle Palace Kandy

Effective Date: May 21, 2026

At Castle Palace Kandy, we are committed to protecting the privacy and personal data of our guests and website visitors. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

1. Information We Collect

We may collect personal information that you voluntarily provide to us when booking a room, subscribing to our newsletter, or contacting us through our website forms. This information may include:

Personal Identifiers: Name, email address, phone number, and physical address.
Booking & Stay Details: Dates of arrival and departure, room preferences, and special requests.
Payment Information: Credit/debit card details (processed securely via encrypted third-party payment gateways; we do not store your raw card details on our servers).
Technical Data: IP address, browser type, and usage data collected automatically through cookies when you navigate our site.

2. How We Use Your Information

We use the collected information for purposes including, but not limited to:

Processing, confirming, and managing your hotel reservations and bookings.
Responding to your inquiries, customer service requests, and emails.
Improving our website functionality, security, and guest user experience.
Sending promotional emails or special offers regarding Castle Palace Kandy (only if you have opted in to receive them).
Complying with legal obligations and local hospitality regulations in Sri Lanka.

3. Data Protection and Security

We implement a variety of administrative, technical, and physical security measures—including SSL encryption—to maintain the safety of your personal information. Your data is restricted to authorized personnel who require the information to perform specific operational duties.

4. Third-Party Disclosures

We do not sell, trade, or otherwise transfer your personally identifiable information to outside parties. This does not include trusted third parties who assist us in operating our website (such as our booking engine or email host), conducting our business, or serving our guests, so long as those parties agree to keep this information confidential.

We may also release information when its release is appropriate to comply with Sri Lankan law, enforce our site policies, or protect ours or others' rights, property, or safety.

5. Cookies and Tracking Technologies

Our website uses "cookies" to enhance your browsing experience. Cookies help us understand your preferences based on previous or current site activity (such as your language or room search preferences). You can choose to turn off all cookies through your browser settings, though doing so may disable some features of our website.

6. Your Rights

You have the right to request access to the personal data we hold about you, request corrections to any inaccuracies, or request the deletion of your personal information, subject to local legal requirements.

7. Changes to This Privacy Policy

Castle Palace Kandy reserves the right to update or change this Privacy Policy at any time. Any changes will be posted immediately on this page with an updated effective date.

8. Contact Us

If you have any questions or concerns regarding this Privacy Policy or how your data is handled, please contact us at:

Castle Palace Kandy
Email: info@castlepalacekandy.com
Website: castlepalacekandy.com