This Privacy and Data Protection Policy sets out the practices that Taru Villas (Pvt) Ltd (“Taru Villas”, “we”, “our”, “us”) follows with respect to the collection, use maintenance, transfer and disclosure of information collected when you visit our website www.taruvillas.com (“Site”). This Privacy and Data Protection Policy applies to the Site and all products and services offered by Taru Villas and describes our privacy practices for data that we collect through the Site, social media pages, emails and other over-the-counter data collection points.
We respect and value the privacy of each guest (“you” or “your”) who share personal information with us and we commit towards maintaining the highest standards required in order to protect any personal information you consent to share with us in accordance with the Sri Lanka’s Personal Data Protection Act 2022 (the “PDPA”).
We reserve the right to revise this Privacy Policy at anytime, without prior notice, and the changes will be effective subsequent to posting the changes on our Site. By accessing the content and services made available on the Site and by providing your personal data to us, you acknowledge and agree that you have fully read and understood this policy, and consent to the collection, use, processing, and disclosure of your personal data as described in this policy. If you do not want us to collect, use, store, transmit, please do not use the Site.
Taru Villas collect personal data about you in a variety of ways, including, but not limited to, when you visit our Site, make a reservation, fill out a form, and in connection with other activities, services, features or resources we make available on our Site and at any of our properties.
We collect and use your information as necessary, to deliver great service to you (including telling you about our hotel reservation services, deals, and other opportunities through email) and to run and improve our business (which includes our reservation services and marketing).
When you use our Site and services you may be asked for the following kinds of information: –
Unless specifically requested, we ask that you not send us, and you not disclose, on or through the services or otherwise to us, any Sensitive Personal Data (e.g., social security numbers, national identification number, data related to racial or ethnic origin, political opinions, religion, ideological or other beliefs, health, biometrics or genetic characteristics, criminal background, trade union membership, or administrative or criminal proceedings and sanctions). In the event that you do provide this information to us, we will only retain the sensitive information for the period required to carry out the service for you (or to continue providing you with the requested services). In such a case that sensitive information is held by us, it will be done in a secure and safe manner with limited access on a filtered need-to-know basis.
When you access or use the Site, we automatically collect personal data about you, including:
Subject to the requirements of applicable law, we may collect, use and disclose your personal data for the purposes set out below.
We do not sell, trade or otherwise transfer your personal identifiable information to third parties. Any information provided to the Site will be protected from loss, misuse, unauthorized access or disclosure, alteration or destruction.
However, we share your personal information with authorized third parties who assist us in: –
With our advisors, which includes our accountants, auditors, lawyers, other professional advisors and business contacts for the purpose of assisting us to better manage, support or develop our business and comply with our legal and regulatory obligations and with any other party at your consent or at your direction or whom you authorize us to disclose your personal data to; and
We may share generic aggregated demographic information not linked to any personal identification information regarding visitors and users with our business partners, trusted affiliates and advertisers for the purposes outlined above. You acknowledge that we may share your information with these third parties for such limited purposes.
The Site may also use “cookies” and other technologies enabling us to recognize users and customize their experience and obtain information regarding the use of the Site. A cookie which is a small text file that a website’s server places on a user’s computer, mobile phone or other device enables to transmit information back to the website’s server regarding the browsing activities of the computer user on the Site. This may also include information such as pages and content viewed, the time and duration of visits and whether the user clicked on an advertisement. Cookies are also used to recognize users and maintain data related to a particular individual. If you prefer not to accept cookies from the Site, you can modify the settings on your web browser. This however may affect the functionality of the Site.
The types of Cookies we use
Third Party advertising Cookies
We may use third-party advertising companies to serve advertisements regarding goods and services that may interest you when you access and use the Site. To serve such advertisements, these companies place or recognize a unique cookie on your browser (including through use of pixel tags).
Cookies are also set when you use any of the social media sharing buttons on our Site (to post on Facebook, for example); Taru Villas has no control over the cookie policies of third-party social media sites.
We use Google Analytics cookies to obtain an overall view of visitor habits and visitor volumes, and to help improve the overall experience on our Site. Google Analytics is a third-party web analysis service provided by Google Inc., which uses “performance cookies” and “targeting cookies” to analyze how you use the Site. The information generated by the cookie about your use of the Site (including your IP address) will be transmitted to and stored by Google on servers in the United States. However, this website uses Google Analytics with the expansion ‘anonymizeIp()’ which means that Google will truncate/anonymize the last octet of the IP address for Member States of the European Union.
On behalf of us, Google will use the information collected for the purpose of evaluating your use of our Site, compiling reports on Site activity and providing other services relating to Site activity and internet usage to us. Google will not associate your IP address with any other data held by Google.
How do you change cookie preferences or block cookies?
For the performance cookies and targeting cookies when using our Site, you can choose to opt-out of these. It is possible that any advertising you receive will be less targeted as a result, but the Site should function correctly.
If you wish to disable the strictly necessary cookies, then within your browser you can choose whether you want to accept cookies or not. Different browsers make different controls available to you. Generally, your browser will offer you the choice to accept, refuse or delete all cookies, third-party cookies, or specific website cookies. Each browser’s website should contain instructions on how you can do this.
If you block these cookies on our Site, certain features and services may not function properly.
From time to time, we would like to use your name, email address, mobile phone number, and other relevant contact information to send you either via emails, SMS messages, telephone calls, push notifications, post, or social media (e.g. Facebook) information that we think may be of interest to you, including about our properties, products and services, news about our membership programs (if you become a member of a Taru Villas loyalty program), satisfaction surveys, events, offers and promotions, but we can only do so with your consent.
We would also like to share (for gain) such data with selected third party entities, so that they may send you information, news updates, special events, offers and promotions as regards their products and services, including travel, transportation, retail, food and beverage, hotel accommodation, credit cards, financial and investment services, real estate, entertainment, publications, fashion and jewelery, leisure and sports, health and wellness, non-profit and charitable activities, telecommunications, social networking, media and public relations, but we will not share your personal data with such third parties or use your personal data for direct marketing without your consent.
You may, in accordance with applicable law, choose not to receive marketing communications or opt-out from receiving marketing communications at any time, free of charge, by following the unsubscribe instructions contained in the marketing communications or contacting Taru Villas in accordance with the section “Your Rights and Contact Us” below. If you opt out of these communications, we may still send you non-promotional communications, such as those about your reservation, unless we are prohibited from doing so by applicable laws.
This Site contains links to other websites. We are not responsible for the privacy practices of third parties or their websites, even if they link from the Site. This Privacy Policy applies solely to information collected by this Site. To the extent that you disclose your information to other parties, different rules may apply to their use or disclosure of information.
Our Site is for a general audience. We do not intentionally collect personally identifiable information of children. If you are a minor, you may only use our Site and services with the permission of your parent or guardian.
If you are in the EU, our online services are not directed at children under the age of 13. If you believe we have collected information about a child under the age of 13, please contact us so that we may take appropriate steps to delete such information. If you are at least 13 but under the age of 16, please get the consent of your parent or legal guardian before giving us any personal data about yourself.
We adopt appropriate data collection, storage and processing practices and security measures as reasonably possible to protect against unauthorized access, alteration, disclosure or destruction of personal information, username, password, transaction information and data stored on our Site.
Your personal data will be transferred to, and stored in the cloud, with back up locations in Australia and Singapore. It will also be accessed and processed by our personnel and the personnel of our partners, affiliates and third-party service providers, who operate outside of Australia and Singapore. Your personal data will only be transferred to locations outside of Australia and Singapore where we are satisfied that adequate or comparable levels of protection are in place to protect personal data held in that jurisdiction, and (where we are required to do so) with your consent.
When personal data is transferred from the EU to outside the EU, we confirm compliance according to GDPR (General Data Protection Regulation).
We may choose to retain your personal information to the full extent of any period provided by law and statute.
We will retain your personal data as long as necessary to provide you with the services requested. When we no longer need it for which it was collected (as set out in this Privacy and date protection policy) we take reasonable steps to destroy, or redact in a secure manner, or take steps to properly anonymize it so that you can no longer be identified from it. Your personal data will not be stored in our archives for more than Six (06) years, subject to local laws and regulations.
We may release your information when we are required to comply with the law, enforce our policies, or protect Tau Villa’s and other third-party rights, property or safety. However, non-personally identifiable information may be provided by Taru Villas to third parties for marketing, advertising, or other uses.
You are entitled to the following rights:
Whenever reasonably possible and required, we will strive to grant these rights within one (01) month.
You may also withdraw your consent to receiving direct marketing communications, or more generally to our processing of your personal data, at any time, and you may in certain circumstances ask us to delete your personal data. However, we may not be able to continue providing services to you if you entirely withdraw your consent or ask us to delete your personal data entirely.
If you would like us to update the personal information we maintain about you and your preferences, or if you wish to withdraw your consent to receiving direct marketing communications from us, please contact us by email at unsubscribe@taruvillas.com
GDPR Compliance – As per the General Data Protection Regulation (GDPR), you have the right to amend or delete any personal data or information you may have previously shared with us and which is stored on our website. This deletion / amendment will be carried out within a 24 hour period. Do note that any information removed is that which has been collected only through our website and not by any other means.
By submitting any personal information, you signify your acceptance of this Privacy and data protection policy. If you do not agree to this policy, please do not submit any personal information. Any submission of your personal information will be deemed your acceptance of this Privacy and data protection policy.
If you have any questions or concerns regarding the Privacy and data protection policy, please feel free to contact us at the following email web@taruvillas.com
