Privacy Policy

1. Data Controller

INAX (Private) Limited, trading as Santino Family
368/B, Merenchigoda, Udupila, Mirissa 81740, Sri Lanka
Email: inax.pvt.ltd@gmail.com
Phone: +94 76 152 4374

2. Information We Collect

We collect personal information when you make a booking, contact us, or use our website:

• Identity data: full name, nationality, passport or ID number
• Contact data: email address, phone number, WhatsApp
• Booking data: check-in/check-out dates, room type, number of guests, special requests
• Payment data: billing address; card details are processed by our payment provider (PayHere) and are not stored by us
• Technical data: IP address, browser type, pages visited, via cookies

3. How We Use Your Information

• To process and manage your reservation
• To process payments and prevent fraud
• To communicate with you about your stay (confirmation, pre-arrival, feedback)
• To comply with Sri Lankan legal obligations (tourism and tax regulations)
• To improve our website and services (anonymised analytics)

We do not sell or rent your personal data to third parties.

4. Data Sharing

We share your data only with trusted service providers who assist in operating our business:

• PayHere — payment processing
• AioSell — property management and booking engine
• Sri Lankan tax and tourism authorities, as required by law

5. Cookies

Our website uses essential cookies to ensure basic functionality (session management, language preference). We do not use advertising or tracking cookies. You may disable cookies in your browser settings, although some features may not function correctly as a result.

6. Data Retention

We retain booking and guest data for 7 years to comply with Sri Lankan tax and business regulations. Marketing communications are retained until you withdraw consent. Technical logs are deleted after 90 days.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention obligations)
• Withdraw consent to marketing communications at any time

To exercise these rights, email us at inax.pvt.ltd@gmail.com. We will respond within 30 days.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Payment data is encrypted using TLS and processed exclusively by PCI-DSS compliant providers.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version is always available at this URL. Significant changes will be communicated by email to guests with active or recent bookings.

10. Contact

For privacy-related questions, contact us at:
INAX (Private) Limited, 368/B, Merenchigoda, Udupila, Mirissa 81740, Sri Lanka
Email: inax.pvt.ltd@gmail.com
Phone: +94 76 152 4374