PRIVACY POLICY – VILLAS IN SRI LANKA

Effective Date: August 2026

Website: https://www.villainsrilanka.co.uk/

1. ABOUT THIS PRIVACY POLICY

Welcome to Villas in Sri Lanka (operated under PARAGON LUXURY VILLAS LTD). We respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how PARAGON LUXURY VILLAS LTD (“Paragon”, “we”, “us”, or “our”) collects, uses, shares, and protects your personal information when you visit www.villainsrilanka.co.uk, enquire about our luxury Sri Lankan villa portfolio, or book accommodation and concierge services through us.

We act as the Data Controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. COMPANY & CONTACT DETAILS

• Legal Entity Name: PARAGON LUXURY VILLAS LTD

• Company Registration Number: 12435740 (England and Wales)

• Registered Address: Yew Tree House, Lewes Road, Forest Row, England, RH18 5AA

• Website: https://www.villainsrilanka.co.uk/

• Privacy / Data Contact Email: info@paragonluxuryvillas.com

3. THE PERSONAL DATA WE COLLECT ABOUT YOU

We may collect, use, store, and transfer different kinds of personal data depending on your interaction with us:

• Identity Data: Full names, titles, dates of birth, passport numbers, nationalities, and copy documents provided for guest verification.

• Contact Data: Email addresses, residential addresses, telephone numbers, and emergency contact details.

• Financial & Payment Data: Bank account details, payment card details, payment receipts, and transaction histories. (Note: Credit/debit card transactions are processed securely via PCI-DSS compliant third-party payment gateways).

• Booking & Stay Details: Arrival/departure dates, property selections, party numbers, flight details, dietary requirements, special preferences, or accessibility requests.

• Technical & Usage Data: IP address, browser type, device information, and how you navigate our website (via cookies).

4. HOW WE COLLECT YOUR DATA

We collect data from you via:

• Direct Interactions: When you fill in enquiry forms on our website, email us, call our team, or request a villa reservation.

• Booking & Financial Transactions: When you make deposit or balance payments directly to us for your villa stay or concierge services.

• Third Parties: Recommendations, travel agents, or referral partners operating on your behalf.

5. HOW WE USE YOUR PERSONAL DATA & LEGAL BASIS

We will only use your personal data when the law allows us to. Most commonly, we process your data under the following legal bases:

6. PAYMENTS & FINANCIAL DATA HANDLING

Unlike introductory agencies where guests pay property owners directly, Villas in Sri Lanka (PARAGON LUXURY VILLAS LTD) collects and manages booking payments directly from you.

• Card Processing: Online card payments are processed securely by PCI-DSS compliant payment processing partners. We do not store raw credit/debit card security codes (CVV) on our servers.

• Bank Transfers: Direct bank transfers are received into designated bank accounts held by PARAGON LUXURY VILLAS LTD.

• Security Measures: All financial communications and payment portals utilize SSL encryption to protect sensitive data.

7. SHARING YOUR PERSONAL DATA (INTERNATIONAL TRANSFERS)

To deliver your holiday experience in Sri Lanka, we need to share relevant guest details with trusted local service providers:

• Villa Owners & In-Resort Staff: Names, flight arrival times, dietary needs, and party details are shared with local villa managers, house staff, and local estate representatives.

• Third-Party Service Suppliers: Local drivers, boat operators, tour guides, or private chefs in Sri Lanka hired to fulfill your concierge requests.

• Service Providers & IT Partners: Secure cloud hosting, email systems, accounting software, and payment processing platforms based in the UK/EU.

• Legal & Regulatory Authorities: Where required by UK law, tax authorities, or Sri Lankan immigration and local authorities.

International Transfers Note: Sri Lanka is located outside the UK/EEA. When transferring your data to Sri Lankan villa managers or local transport providers, we ensure that data sharing is strictly limited to what is necessary for the performance of your booking contract.

8. DATA SECURITY & RETENTION

• Security: We have put in place appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, altered, accessed, or disclosed without authorization.

• Retention: We retain your personal information for as long as necessary to fulfill the purposes we collected it for, including satisfying legal, accounting, tax, or statutory reporting requirements (typically 6 years for financial records under UK tax law).

9. YOUR LEGAL RIGHTS UNDER UK GDPR

Under UK data protection laws, you have rights regarding your personal data, including the right to:

• Request Access to your personal data (a “Subject Access Request”).

• Request Correction of incomplete or inaccurate data.

• Request Erasure of your personal data (where there is no good reason for us to continue processing it).

• Object to Processing or Request Restriction of processing.

• Withdraw Consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at info@paragonluxuryvillas.com.

10. COOKIES & THIRD-PARTY LINKS

Our website uses standard cookies to analyze web traffic and improve user experience. Our website may also contain links to external third-party websites. Clicking those links may allow third parties to collect data about you. We do not control these third-party websites and are not responsible for their privacy statements.

11. CHANGES TO THIS PRIVACY POLICY

We reserve the right to update this Privacy Policy as required by operational, legal, or regulatory changes. Updated versions will be posted directly on this page with an updated effective date.