Privacy Policy

At Luxtori Hospitality, accessible via www.luxtorihotels.com, we prioritize the privacy and security of our guests' personal data. This Privacy Policy outlines how we collect, use, disclose, and protect your information when you interact with our website, social media platforms, or services.

1. Scope of the Policy

This Privacy Policy applies to:

  • Personal data collected through our website (www.luxtorihotels.com), booking systems (e.g., eZee Absolute), and social media platforms.
  • Data shared during reservations, inquiries, or promotional campaigns.
  • Information processed by ATLAZ HOTELS AND RESORTS (PRIVATE) LIMITED under operational agreements with LUXTORI HOSPITALITY LLP.

2. Information We Collect

We may collect the following types of information:

  • PERSONAL IDENTIFIABLE INFORMATION (PII): Name, email address, phone number, physical address, nationality.
  • BOOKING DETAILS: Stay preferences, payment information (via third-party processors like eZee Absolute).
  • SENSITIVE INFORMATION: Dietary restrictions or accessibility needs (with explicit consent).
  • TECHNICAL DATA: IP address, browser type, cookies (see Cookie Policy below).
  • CHILD INFORMATION: We do not knowingly collect data from children under 13 years of age. If you believe your child has provided personal data, contact us immediately.

3. How We Use Your Information

We use your data for:

  • Fulfilling reservations and managing guest stays.
  • Sending confirmation emails and updates about bookings.
  • Marketing communications (with opt-in consent).
  • Improving website functionality through analytics tools.
  • Compliance with legal obligations such as immigration reporting.

4. Sharing Your Information

Your data may be shared with:

  • THIRD-PARTY SERVICE PROVIDERS: eZee Absolute (booking engine), payment gateways.
  • OPERATIONAL PARTNERS: Atlaz Hotels and Resorts (Private) Limited for property management.
  • SOCIAL MEDIA PLATFORMS: Data shared when engaging with our pages on Facebook, Instagram, etc.
  • Government authorities for legal compliance.

5. Cookie Policy

We use cookies to enhance your browsing experience:

  • ESSENTIAL COOKIES: Required for website functionality.
  • ANALYTICS COOKIES: Track user behavior anonymously to improve services.

You can manage cookie preferences via your browser settings.

6. Handling Child Data

We do not knowingly collect or process data from children under 13 years of age. Parents or guardians can request deletion of such data by contacting us at privacy@luxtorihotels.com.

7. Social Media Integration

When interacting with our social media pages:

  • Your profile information may be visible to other users based on platform settings.
  • You can control permissions through your social media account's privacy settings.

8. Security Measures

We implement robust security protocols:

  • Encryption of sensitive data during transmission (e.g., AES-256).
  • Restricted access controls for staff handling guest information.
  • Regular audits of third-party systems like eZee Absolute.

9. Your Rights

Under GDPR and PDPA, you have the right to:

  1. Access your personal data.
  2. Request corrections to inaccurate information.
  3. Withdraw consent for marketing communications.
  4. Request deletion of non-essential data within 30 days.

To exercise these rights, email us at privacy@luxtorihotels.com.

10. Business Transfers

In case of ownership changes or operational transitions:

  • Your personal data may be transferred to new operators under confidentiality agreements consistent with this policy.

11. Updates to This Policy

This Privacy Policy may be updated periodically to reflect changes in regulations or business practices. Guests are requested to review this Privacy Policy before making reservations. Any claims of ignorance of this Privacy Policy shall not be entertained later.

Contact Information

For privacy-related inquiries:

For complaints under Sri Lanka's PDPA:

Sri Lanka Data Protection Authority