Privacy Policy

Linoli Cove (Pvt) Ltd ("we", "us", or "our") is dedicated to safeguarding the privacy and personal data of our guests and website visitors. This policy outlines how your information is handled in accordance with the Personal Data Protection Act (PDPA) No. 9 of 2022 of Sri Lanka.

1. Information We Collect

• Guest Identification: Full name, passport or National Identity Card (NIC) number (mandatory under Sri Lanka tourist registration laws), nationality, and contact phone number.
• Contact Information: Email address and WhatsApp telephone number for booking confirmations and dining order routing.
• Transactional Information: Payment reference ID, booking dates, selected suites, and order amounts.

2. Payment Information & Gateway Security

Linoli Cove does not store, capture, or inspect your credit/debit card numbers, CVV codes, or banking PINs. All online payments are securely tokenized and redirected through PayHere, an approved Internet Payment Gateway certified under the Central Bank of Sri Lanka (CBSL) and compliant with Payment Card Industry Data Security Standards (PCI-DSS Level 1).

3. Purpose of Processing Personal Data

• To process direct room reservations and dining orders through linolicove.lk.
• To comply with regulatory hotel guest reporting mandates enforced by the Sri Lanka Tourism Development Authority (SLTDA) and local authorities.
• To send booking confirmation receipts and responsive customer service notifications.

4. Non-Disclosure & Data Protection

We do not sell, lease, or monetize your personal information to third parties. Data is only disclosed where required to process your transaction (e.g., PayHere payment processor) or where mandated by the laws of Sri Lanka.

5. Data Subject Rights (Under PDPA No. 9 of 2022)

You have the right to request access to, correction of, or deletion of your personal contact records, subject to statutory record retention requirements under Sri Lankan taxation and tourism statutes. Contact our Data Officer at [email protected].