Skip to main content

Privacy

Privacy policy

This policy explains what personal data may be handled when you browse 5starhotels.lk, contact us, or use services connected to the directory.

Last reviewed 2 August 2026

Who is responsible for this website

The operator of 5starhotels.lk determines how personal data connected with this website is used. Privacy questions and requests can be sent to hello@5starhotels.lk.

Information we may handle

  • Information you send: your email address, name if provided, message, attachments, and any details included in a correction, copyright, or privacy request.
  • Technical and security information: IP address, request time, requested URL, browser or device information, referral information, and security events recorded in hosting or service logs.
  • Analytics information: page views, sessions, approximate location, browser and device category, referral source, and interactions measured to understand how the directory is used.

Please do not email payment-card details, passport information, or other sensitive personal data. This website does not need that information to handle directory enquiries.

How information is used

  • To respond to enquiries and verify requested corrections.
  • To review image, copyright, privacy, or misuse reports.
  • To operate, secure, diagnose, and improve the website.
  • To understand aggregate readership and content usefulness through website analytics.
  • To comply with applicable legal obligations and protect rights.

We do not sell personal information and do not use contact emails to create public profiles or unrelated marketing lists.

Cookies and Google Analytics

The public directory does not require a visitor account. Essential cookies may be used for security and for restricted administrative or pre-launch access. Google Analytics audience measurement is described below.

Google Analytics is enabled on the public website and may use a first-party cookie such as _ga containing a random client identifier. Google Analytics’ default web measurement can collect session statistics, approximate location, and browser or device information. Your browser also sends Google information such as the visited page URL and IP address when it connects to Google services.

Analytics starts when a public page loads; no cookie confirmation banner is currently displayed. You can block or delete cookies through your browser and use Google’s Analytics opt-out browser add-on. Read how Google uses information from sites using its services.

Service providers and external websites

We use specialist providers to host and operate the website, deliver images, maintain the content database, authenticate the private admin area, and measure aggregate website use. These currently include Vercel, Supabase, ImageKit, and Google Analytics for the relevant functions. Providers may process technical information under their own terms and privacy documentation.

Hotel pages contain links to external hotel or brand websites. Once you follow an external link, that organisation’s privacy practices apply; 5starhotels.lk does not control its website or booking systems.

Retention, security, and international processing

Enquiry and correction correspondence is kept only as long as reasonably needed to respond, document a material editorial decision, resolve a dispute, or meet a legal obligation. Technical logs and analytics data are retained according to operational needs and the configured retention controls of the relevant provider.

Reasonable technical and organisational safeguards are used, but no internet transmission or storage system can be guaranteed completely secure. Service providers may process information in countries other than your own, subject to their infrastructure and safeguards.

Your choices and rights

Depending on the law applicable to you, you may be able to request access to personal data, correction, deletion, restriction, objection, withdrawal of consent, or information about processing. Email a clear request to hello@5starhotels.lk. We may need enough information to verify the request and locate the relevant records.

You may also have the right to raise a concern with the Data Protection Authority of Sri Lanka or another competent privacy regulator.

Children and policy updates

The directory is intended for general travel research and is not directed specifically to children. We do not knowingly request personal information from children through the public website.

This policy may be updated when the website, providers, or legal requirements change. The latest version will remain available at this URL with its review date. For related site terms, see the legal, disclaimer, and copyright notice.