Privacy policy

1. Who we are

Meth Suites (“we”, “us”) is a small hotel at 507/B/1 Bimpandura, Pamunugama 11370, Sri Lanka, registered with the Sri Lanka Tourism Development Authority (SLTDA Reg. No. 0000001374). We are responsible for the personal details you share with us through this website and when you contact us directly.

If you book through Booking.com or another booking platform, that platform also handles your details under its own privacy policy. We use the booking details it passes to us to manage your stay.

2. What we collect

• Contact details: your name, phone or WhatsApp number, and email address.
• Booking details: check-in and check-out dates, room, number of guests, estimated price, flight number, whether you want an airport drop-off, and any notes you add.
• Messages: anything you write to us on WhatsApp, email, Telegram, WeChat or by phone.
• Payment details: payment status, amount and reference. We do not collect full card numbers through this website.
• Website usage statistics (only if you accept cookies): pages viewed, approximate country and city, device and browser type, how you reached our site, and which contact buttons were used. See section 7.
• Quick-contact records: when you tap a WhatsApp, phone or email button, we record a reference code, the channel and the website language, so we can match your message to the right enquiry. This record does not include your name or number.

3. How the booking form works

When you press a send button on the booking form (WhatsApp, Email, Telegram or WeChat):

• a copy of the details you entered is saved in the hotel's private Google Sheet, so we don't miss any request. This happens even if you then decide not to send the message;
• your message opens in the app you chose, and you send it to us from there.

A booking request is not a confirmed reservation. Your room is confirmed only when the hotel replies to confirm it.

4. How we use your details

• to answer your enquiry and check room availability;
• to confirm, change or cancel your booking;
• to prepare for your arrival, for example a late-night check-in;
• to arrange services you ask for, such as an airport drop-off;
• to handle payments and keep the hotel's business and accounting records;
• to protect our guests, staff and property, and to prevent fraud or misuse;
• to meet our legal obligations.

We do not send you marketing messages unless you agree to receive them, and you can ask us to stop at any time.

5. Who we share your details with

We never sell your personal details. We share them only when needed:

• Hotel staff who handle bookings and look after your stay;
• Google, which stores our booking Google Sheet and email, and provides Google Analytics (only if you accept cookies);
• Cloudflare, which hosts our website and protects it from attacks;
• Messaging apps you choose to use: WhatsApp (Meta), Telegram or WeChat (Tencent);
• Payment providers, if you pay by card or payment link;
• The driver who takes you to the airport, if you ask for a drop-off (only what they need, such as your name, pick-up time and contact number);
• Government authorities, where Sri Lankan law requires it.

Some of these services store information on servers outside Sri Lanka, under their own privacy policies.

6. Payments

You can pay at the hotel by card or cash, or in advance through a secure payment link we send you. Payment links are handled by an external payment provider, which collects your card details directly under its own privacy and security terms. We only receive the payment status, amount and reference.

7. Cookies and third-party tools

Our website does not use advertising cookies or tracking pixels.

Google Analytics (only with your consent). When you first visit, we ask whether you accept analytics cookies. Only if you tap Accept do we use Google Analytics to see, in summary form, how visitors use our website: which pages are viewed, which country and city visitors come from, what device they use, how they found us, and how many people use our booking and contact buttons. This helps us improve the website.

• Google Analytics sets cookies named _ga and _ga_… on your device. They can last up to 2 years.
• Your name, phone number, email, travel dates and booking messages are never sent to Google Analytics.
• We have turned off Google's advertising features (Google signals and ad personalisation) for this website.
• Google keeps the analytics data for 14 months, then deletes it automatically. Google processes this data under its own privacy policy, and may process it outside Sri Lanka.
• If you tap Decline, Google Analytics does not load and no analytics cookies are set.

You can change your choice at any time: open cookie settings (also in the footer of every page).

Our website also uses:

• Your browser's storage, to remember the language you chose and your cookie choice. This stays on your device.
• Google Fonts, which loads the website's fonts. Your browser connects to Google to do this, so Google receives your IP address.
• Google Maps, the map in the Location section. Google may set cookies and collect usage data when the map loads.
• Cloudflare, which hosts the website. Like any web host, it processes technical data such as your IP address to deliver the pages and protect the site.

These providers handle data under their own privacy policies. You can also block or delete cookies in your browser settings; some parts of the page, such as the map, may then not display.

8. How long we keep records

We keep personal details only as long as we need them. Retention periods vary by type of record:

When a record is no longer needed, we delete it or remove the details that identify you.

9. Keeping your details safe

Only authorised hotel staff can access booking records, and our Google Sheet is private. No website or online service can be completely secure, so please avoid sending sensitive information, such as card numbers, through chat apps or email.

10. Your rights

Under Sri Lanka's Personal Data Protection Act, No. 9 of 2022, you can ask us to:

• tell you what personal details we hold about you and give you a copy;
• correct details that are wrong or out of date;
• delete your details, unless we must keep them by law;
• stop or limit how we use your details, or withdraw your consent (for analytics cookies, use the cookie settings link at the bottom of any page);
• stop sending you any marketing messages.

To make a request, contact us using the details below. We may need to confirm your identity first. If you are not happy with our answer, you can contact the Data Protection Authority of Sri Lanka.

11. Changes to this policy

We may update this policy when our services or the law change. The latest version will always be on this page, with the date it was last updated.