Privacy Policy

  • Home
  • Privacy Policy

Privacy Policy – Sinharaja Kithula Eco Cabana

Effective Date: June 28, 2025

Welcome to Sinharaja Kithula Eco Cabana (Pvt.) Ltd. (“we,” “our,” or “us”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://sinharajaecocabanas.lk/, and any associated services. By accessing or using the Site, you consent to the practices described in this Policy.

1. Information We Collect

We may collect the following types of personal information:

  • Identifying Information: First name, last name, email address, phone number, physical address, city, state/province, postal/ZIP code, and country.
  • Payment Information: Billing and payment details via third-party provider PayHere.
  • Technical Data: IP address, browser type, pages visited, time on site (collected via Google Analytics and cookies).
  • Marketing Data: Preferences for receiving marketing from us, remarketing cookies (Google Ads, Facebook Ads), and reCAPTCHA data.
  • Other Data: Information you provide when contacting us or interacting with us on social media (e.g., our Facebook page).

2. How We Use Your Information

We use your personal data to:

  • Process bookings and payments securely
  • Provide customer support and respond to inquiries
  • Improve our website and customer experience
  • Send promotional and transactional emails
  • Comply with legal and regulatory obligations
  • Show relevant advertisements through Google and Facebook remarketing
  • Protect against spam and bots (using Google reCAPTCHA)

3. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on:

  • Consent: When you subscribe to our newsletter or allow cookies.
  • Contract: To provide services (like booking a cabana).
  • Legal obligation: To comply with tax and legal requirements.
  • Legitimate interests: Improving our services, remarketing, and analytics.

4. Your Rights Under GDPR

If you are a resident of the EU/EEA, you have the right to:

  • Access the personal data we hold about you
  • Request correction or deletion of your data
  • Object to or restrict processing of your data
  • Withdraw consent at any time
  • Lodge a complaint with a supervisory authority


To exercise your rights, contact us at: info@sinharajaecocabanas.lk

5. Your Rights Under CCPA/CPRA

If you are a California resident, you have the right to:

  • Know what personal data we collect and how we use it
  • Request access to or deletion of your personal data
  • Opt out of the sale or sharing of personal data
  • Non-discrimination for exercising your privacy rights.

We do not sell personal data in the traditional sense. You may request access or deletion by emailing us at info@sinharajaecocabanas.lk

6. Children’s Privacy (COPPA)

We are aware of and respect the importance of protecting children’s privacy. We may collect limited personal data from children under 13 with parental or guardian consent, especially during family bookings. If we learn that we have collected personal data without appropriate consent, we will delete it.

7. California Online Privacy Protection Act (CalOPPA)

In accordance with CalOPPA:

  • Users can visit our site anonymously
  • This policy is linked clearly on our home page
  • Users will be notified of any privacy policy changes via this page
  • Users can update their personal information by contacting us

8. Cookies and Tracking

We use cookies and similar technologies to:
  • Remember your preferences
  • Analyze traffic via Google Analytics
  • Run remarketing ads through Google Ads and Facebook
You can manage cookie preferences in your browser settings.

9. Third-Party Services

We use trusted third-party services:

  • PayHere for payment processing
  • Google Analytics for traffic monitoring
  • Google reCAPTCHA for bot prevention
  • Facebook Pixel and Google Ads for marketing

These services have their own privacy policies which we encourage you to review.

10. Data Retention

We retain your data only for as long as necessary to fulfill the purposes outlined in this policy, including legal and accounting requirements.

11. Data Security

We use administrative, technical, and physical safeguards to protect your data from unauthorized access or disclosure.

12. International Transfers

As our servers and services may be located outside of Sri Lanka, your data may be transferred to countries that may not have the same data protection laws. By using our services, you consent to such transfers.

13. Your Privacy Controls

You can:

  • Opt-out of marketing emails by clicking “unsubscribe” in emails
  • Contact us to update, delete, or access your data
  • Block cookies in your browser settings

14. Contact Us

For any privacy-related inquiries, you may contact us by:

15. Changes to This Policy

We reserve the right to update this Privacy Policy. Any changes will be posted on this page with the updated date. Continued use of our site constitutes your acknowledgment and acceptance of those changes.