Privacy Policy

Last updated: 12/10/2026

1. Introduction

Makara Resorts (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect through makararesorts.lk (the “Website”), how we use it, who we share it with, and the choices and rights you have.

By browsing or using our Website, you acknowledge that you have read and understood this policy. If you do not agree with it, please do not use the Website.

This policy applies only to this Website. Our Website may contain links to, or co-branded pages from, third parties such as booking engines, payment providers and social media platforms. Those sites are not covered by this policy, and we encourage you to read their privacy policies before sharing any information with them.

We handle personal data in line with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka and other applicable laws.

2. Information We Collect

Information you give us

We collect personal information that you provide voluntarily when you complete an enquiry or booking form, subscribe to our newsletter, enter a contest or promotion, submit feedback, or contact us by email, phone or messaging apps. This may include:

• Your name, email address, telephone number and postal address
• Your nationality, travel dates, number of guests and room or package preferences
• Special requests such as dietary needs, celebrations or accessibility requirements
• Billing details and payment information when you book or purchase a service
• The content of your messages, reviews and feedback

Please do not submit personal data to us if you do not wish us to collect it. Note that without certain details we may not be able to process your enquiry or reservation.

Information we collect automatically

When you visit the Website, we may automatically collect technical information through cookies, web beacons and similar technologies. This may include your IP address, browser type, device and operating system, pages viewed, time and date of visits, referring website and approximate geographical location.

A cookie is a small text file placed on your device by your web browser. A web beacon is a small graphic image on a web page that helps us understand how visitors use the Website. This information is generally not used to identify you personally. Most browsers accept cookies automatically, but you can change your browser settings to delete or block them. If you disable cookies, some parts of the Website may load more slowly or may not work as intended.

3. How We Use Your Information

We use your information for the following purposes:

• To respond to your enquiries and to process and manage your reservations, orders and payments
• To provide, personalise and improve our services, and to tailor your experience when you return to the Website
• To communicate with you about your stay, including confirmations, pre-arrival information and after-stay follow-up
• To send you news, offers and promotions, where you have agreed to receive them
• To run contests and promotions you have entered
• To compile reviews and conduct market research and statistical analysis
• To understand how visitors use the Website and to improve its design, content and performance
• To manage online advertising and measure its effectiveness
• To prevent fraud, abuse and the posting of unlawful, offensive or objectionable content
• For accounting, auditing, strategic planning and internal business purposes
• To meet legal, regulatory and tax obligations

We process your personal data only where we have a lawful basis to do so, such as your consent, the performance of a contract with you, compliance with a legal obligation, or our legitimate business interests that are not outweighed by your rights.

4. Sharing Your Information

We do not sell your personal data. We may share it in the following circumstances:

• Within our group. With companies and properties affiliated with Makara Resorts, where this is necessary to provide our services.
• Service providers. With trusted third parties who work on our behalf, such as website hosting and maintenance providers, booking and reservation system providers, payment processors, email and marketing platforms, analytics and advertising partners, and transport or tour partners arranged at your request. They may use your data only to provide services to us and must protect it appropriately.
• With your consent. With other third parties where you have agreed to this.
• Aggregated data. We may share anonymous, aggregated statistics about Website use (for example, age range or country of visitors) that cannot identify you personally.
• Legal and safety reasons. Where required by law, court order or lawful request from a government or regulatory authority, or where necessary to enforce our terms, operate our systems properly, or protect the rights, property or safety of Makara Resorts, our guests or others.
• Business changes. If Makara Resorts is involved in a merger, acquisition, restructuring or sale of assets, your information may be transferred as part of that transaction. We will make sure the new owner continues to honour this policy or inform you of any changes.

5. Payment Information

Payments made through the Website are processed by third-party payment providers. We do not store full credit or debit card numbers on our own systems. Your payment details are handled under the security standards and privacy policies of the relevant payment provider.

6. International Transfers

Some of our service providers may be located outside Sri Lanka, so your information may be transferred to and stored in other countries. Where this happens, we take reasonable steps to make sure your data remains protected in line with applicable law.

7. Email and Communication Monitoring

We may keep records of emails, messages and other communications you send to us, and may monitor them for quality, training, record-keeping and security purposes, in line with this policy.

8. Data Security

We use reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, misuse or alteration. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. You share information with us at your own risk.

9. Data Retention

We keep your personal data only for as long as necessary to fulfil the purposes described in this policy, including to meet legal, accounting and reporting requirements. When data is no longer needed, we delete it or anonymise it.

10. Your Rights

Subject to applicable law, you have the right to:

• Request access to the personal data we hold about you
• Ask us to correct information that is inaccurate or incomplete
• Ask us to delete your personal data where there is no good reason for us to keep it
• Withdraw your consent at any time, where we rely on consent to process your data
• Object to or ask us to restrict certain processing, including direct marketing
• Unsubscribe from marketing emails at any time using the link in our emails, or by contacting us
• Lodge a complaint with the relevant data protection authority in Sri Lanka

To exercise any of these rights, please email us at the address below with full details of your request. We may ask you to verify your identity before we respond.

11. Children

The Website is not directed at children, and we do not knowingly collect personal data from anyone under 18 without the consent of a parent or guardian. If you believe a child has given us personal data without such consent, please contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the “Last updated” date above. Please review it regularly. Your continued use of the Website after changes are posted means you accept the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

Makara Resorts (Pvt) Ltd
132/32C, Nawala Road, “Kurulu Bedda”, Nugegoda, Sri Lanka
Email: info@makararesorts.lk
Telephone: +94 11 282 8147
Website: makararesorts.lk