Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your personal information when you stay with us or visit our website.
Your Data is Secure
Last Updated: 8/4/2025
Your Data Rights
You have full control over your personal information
Data Access
Request a copy of your personal information
Data Correction
Update or correct inaccurate information
Data Deletion
Request deletion of your personal data
Data Control
Manage your privacy preferences
1. Who We Are
- Rupas Surf Camp is a registered business in Sri Lanka (Registration No: PVL/DSACC/BR/14).
- We are committed to protecting your privacy and personal information.
- This policy explains how we collect, use, and protect your data when you book with us or visit our facilities.
2. Information We Collect
- Personal details: Name, email, phone number, address, nationality, and date of birth
- Booking information: Arrival/departure dates, room preferences, special requests
- Payment information: Credit card details (processed securely through our payment providers)
- Health & dietary information: Allergies, medical conditions, dietary restrictions (when provided)
- Communication records: Emails, messages, and phone conversations with our team
- Photos and videos: Images taken during your stay (with your consent)
- Website usage: IP address, browser type, pages visited, and time spent on our site
3. How We Use Your Information
- Process and manage your bookings and reservations
- Provide personalized services and accommodate special requests
- Communicate with you about your stay, updates, and important information
- Process payments and handle billing inquiries
- Ensure your safety and security during your stay
- Improve our services and facilities based on feedback
- Send marketing communications (with your consent)
- Comply with legal requirements and regulations
4. Information Sharing
- We do not sell, trade, or rent your personal information to third parties
- We may share information with trusted service providers (payment processors, booking platforms)
- Local authorities when required by law or for safety reasons
- Emergency contacts in case of medical emergencies
- With your explicit consent for marketing partnerships or special offers
5. Data Security
- We use industry-standard security measures to protect your information
- All payment transactions are encrypted and processed securely
- Staff access to personal information is limited and monitored
- Regular security audits and updates to our systems
- Physical security measures at our facilities to protect paper records
6. Cookies & Website Data
- We use cookies to improve your browsing experience on our website
- Essential cookies for booking functionality and security
- Analytics cookies to understand how visitors use our site
- Marketing cookies for personalized content (with your consent)
- You can control cookie preferences through your browser settings
7. Photos & Media
- We may take photos or videos during your stay for marketing purposes
- We will always ask for your consent before using your image
- You can opt out of photography at any time during your stay
- Photos may be used on our website, social media, and promotional materials
- You can request removal of your photos from our marketing materials
8. Data Retention
- Booking and guest information: Kept for 7 years for legal and accounting purposes
- Marketing communications: Until you unsubscribe or request deletion
- Website analytics: Anonymized data kept for 2 years
- CCTV footage: Stored for 30 days for security purposes
- Financial records: Kept as required by Sri Lankan law
9. Your Rights
- Access: Request a copy of the personal information we hold about you
- Correction: Update or correct any inaccurate information
- Deletion: Request deletion of your personal information (subject to legal requirements)
- Portability: Receive your data in a common format
- Objection: Opt out of marketing communications at any time
- Restriction: Limit how we use your information in certain circumstances
10. International Transfers
- Some of our service providers may be located outside Sri Lanka
- We ensure adequate protection when transferring your data internationally
- All transfers comply with applicable data protection laws
- We use secure methods for any international data transfers
11. Third-Party Services
- Booking platforms (Booking.com, Airbnb, etc.) have their own privacy policies
- Payment processors (Stripe, PayPal) handle payment information securely
- Social media platforms if you interact with our social media content
- We are not responsible for third-party privacy practices
12. Policy Updates
- We may update this privacy policy from time to time
- Changes will be posted on our website with the effective date
- Significant changes will be communicated via email
- Continued use of our services indicates acceptance of updates
Privacy Questions?
Contact us about your privacy rights, data requests, or any privacy-related concerns:
Data Request Form
Need to access, update, or delete your personal information? Contact us with your request.
Data Access Request
Get a copy of your personal data
Data Deletion Request
Request removal of your data
Important Notice
• We will respond to all privacy-related requests within 30 days
• Some information may be retained for legal or safety reasons
• We may need to verify your identity before processing requests
• Emergency contact information may be shared with authorities when necessary
Your Privacy Matters
We are committed to protecting your privacy and handling your personal information with care and respect. If you have any questions or concerns about our privacy practices, please don't hesitate to contact us.
Secure Data Handling
GDPR Compliant
Trusted by Guests