Privacy
Privacy Policy
How Colombohaven B&B handles the information you share when you book a stay.
Last updated: June 2026. Colombohaven B&B, 263/6 Galle Rd, Kollupitiya, Colombo 03, Sri Lanka. Questions: hello@colombohaven.com.
What we collect
When you make a booking we collect your name, email address, optional phone number, the dates and room you choose, and anything you tell us in the notes field. We do not take payment online — you settle the bill at the property — so we never collect or store card details.
Why we use it & our lawful basis
We use your details solely to create, confirm, and manage your reservation and to contact you about your stay (performance of a contract). If you ask us a question, we use your details to reply (legitimate interest). We do not sell your data or use it for advertising.
Who we share it with
Your booking data is stored in a managed database hosted on Microsoft Azure (our data processor) in the UAE North region. If we email your confirmation, your email provider/SMTP service processes that message. We do not share your information with anyone else except where required by law.
How long we keep it
We keep reservation records for the period needed to host your stay and meet our legal/accounting obligations, then delete or anonymise them. You can ask us to delete your booking at any time.
Your rights
You may ask us to access, correct, or delete your personal data, or to restrict how we use it. You can cancel and remove a booking yourself from My Booking (reference + email), or email us at hello@colombohaven.com and we will action your request.
Cookies
We use a single, strictly-necessary session cookie so the booking form and owner login work. We do not use advertising or third-party tracking cookies. If the human-check (Cloudflare Turnstile) is enabled, it may set its own functional cookie.
Security
Traffic is encrypted in transit (HTTPS), data is encrypted at rest, secrets are held in a managed key vault, and admin access is passcode-protected and rate-limited.
Owner note: please review this draft with your legal adviser and confirm your real business/legal entity details, contact, and retention period before relying on it.