Last updated: 22 January 2026

This Privacy Policy explains how wellington.lk collects, uses, stores, and protects personal information. This policy is prepared in line with the Sri Lanka Personal Data Protection Act No. 9 of 2022 (PDPA).

By using this website, booking a property, or submitting any information, the user agrees to this Privacy Policy. By submitting personal information through forms, bookings, or listings, the user gives clear consent for personal data to be processed as described in this policy.

1. What is personal data

Personal data means any information that can identify a person directly or indirectly. This includes name, email address, phone number, address, booking details, payment-related information, IP address, and similar data.

2. Information we collect

• Full name
• Email address
• Phone number
• Address or country of residence
• Booking and payment-related details
• Messages or inquiries sent through forms or WhatsApp
• Technical data such as IP address, browser type, device information, and cookies

Sensitive personal data is not intentionally collected unless required by law or necessary for a booking.

3. How and when information is collected

• When an account is created
• When a property is booked or listed
• When a form or inquiry is submitted
• When contacting us by email, phone, or messaging platforms
• When using the website (automatic technical data collection)

4. Purpose of collecting personal data

• To process property bookings and payments
• To send booking confirmations and updates
• To respond to customer service requests
• To improve website functionality and user experience
• To send service-related or promotional messages (with consent)
• To prevent fraud, misuse, or illegal activity
• To comply with legal and regulatory requirements in Sri Lanka

5. Legal basis for processing (Sri Lanka PDPA)

• User consent
• Performance of a contract (booking or listing a property)
• Compliance with legal obligations
• Legitimate business interests, without overriding user rights

Consent can be withdrawn at any time, subject to legal or contractual limits.

6. Data protection and security

Reasonable technical and organisational measures are used to protect personal data, including secure hosting, access controls, and limited access to authorised personnel.

7. Data retention

Personal data is kept only as long as necessary for bookings, legal requirements, or dispute resolution. When no longer required, data is securely deleted or anonymised.

In the event of a personal data breach that may affect users, reasonable steps will be taken to assess the impact and notify affected users and authorities where required by law.

8. Cookies and tracking

Cookies are used to remember preferences, analyse traffic, improve services, and support advertising and remarketing.

Users can disable cookies through browser settings. Some features may not work properly if cookies are disabled.

9. Third-party services

Personal data may be shared only when necessary with trusted third parties such as:

• Property owners or hosts, strictly for booking and service purposes. Property owners are responsible for handling guest data lawfully and securely.
• Payment gateways
• Website hosting and analytics providers
• Advertising services such as Google

Personal data is not sold.

10. Payments

Payments are processed by trusted third-party payment gateways. wellington.lk does not store or process credit or debit card numbers.

11. Google services and advertising

• Google Analytics
• Google Ads and remarketing services

Google may use cookies to show ads based on previous visits. Users can manage ad preferences through Google Ad Settings.

12. International data transfers

Some data may be processed outside Sri Lanka through cloud or third-party services. Reasonable safeguards are applied as required by the PDPA.

13. Children’s privacy

wellington.lk does not knowingly collect personal data from children under 16 years. If such data is identified, it will be removed promptly.

14. User rights under Sri Lanka PDPA

• Request access to personal data
• Request correction of inaccurate data
• Withdraw consent
• Request deletion, subject to legal limits
• Object to certain processing activities

15. Third-party links

This website may contain links to external sites. wellington.lk is not responsible for their privacy practices.

16. Changes to this policy

This Privacy Policy may be updated from time to time. Updates will be posted on this page with a revised date.

17. Contact information

Website: https://www.wellington.lk
Email: info@wellington.lk

18. Booking and listing properties

By booking or listing a property on wellington.lk, the user agrees to the collection and use of personal data as described in this Privacy Policy.