Privacy policy

Privacy Policy

Limitation of Liability Clause

This Website has been compiled in good faith. No representation is made or warranty given, either express or implied as to the completeness or accuracy of the information that it contains. The Company and / or Group make no representations about the information, products and services contained on this Website for any purpose.

To the maximum extent permitted by law, the Company disclaims all implied warranties with regard to information, products, services and material provided through this Website. All such information, products, services and materials are provided “as is” and “as available” without warranty of any kind. The Company is not obliged, nor does it have the responsibility to maintain the Website, the contents and services and offerings made available on this Website or to correct or update the same.

Neither the Company nor the Group (or any subsidiary of the Company or Group) its/their Directors, officers, employees or agents shall be liable for any loss, damages or expenses of any kind, including but not limited to, direct, indirect, incidental, consequential or punitive damages, arising out of your access to, use, inability to use, change in content of this Website even if the Company was previously advised of the possibility of such damages or from any act or omission.

Privacy & Cookies

Updated: 30th September 2021

This Privacy Statement explains how and why we collect and process your personal data. This relates to personal data you share directly with us – as our guests, our property owners, our suppliers and our booking partners. It also relates to personal data you share with third party introducers, booking sites and group travel partners who share your data to provide you with the services that you have requested. Where a third party has shared your data with us, we expect that they have informed you about the processing and sharing of your data.

For the purpose of the Data Protection Legislation and this notice, we are the ‘data controller’. This means that we are responsible for deciding how we collect and process personal data about you. Personal data is defined as any information that can identify an individual (‘data subject’), directly or indirectly, by reference to an identifier (e.g. name, identification number, location data, or online identifier) or to one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural, or social identity of that individual.

This privacy notice also provides information about your rights as a ‘data subject’.

Who are we?

When we say ‘we’ or ‘us’ or ‘our’, we are generally referring to South Beach Weligama, our subsidiaries and the separate legal entities that make up the South Beach Weligama Properties (Pvt) Ltd.

South Beach Weligama Properties (Pvt) Ltd is a company registered in Sri Lanka. Company number PV00225276. Our Registered Office is at 34 Galle Face Court 2, Colombo 3, Sri Lanka.

How do we collect your personal data?

We currently collect your personal data through a number of sources, such as:

  • When you contact us by phone, email, live chat and social media platforms.
  • When you complete forms, surveys and enter competitions on our website or social media platforms.
  • When you subscribe to receive our newsletter and receive information about our special offers and services.
  • When you book and register as a guest in a flat.
  • When third party partners, booking sites or travel groups share your data with us in order to book accommodation and facilities on your behalf.
  • Where you register and take part in any outdoor activities we provide.
  • When you book your children into and provide consent for the use of our childcare/recreational facilities.
  • When you visit our bars, restaurants and clubhouses.
  • When you arrange a wedding, event or conference in our premises.
  • When you make any complaints regarding our facilities or the service you have received.
  • Where you have been involved in any accidents or incidents in our premises or facilities.
  • When we arrange a contract with you or when we agree to purchase products or services from each other.
  • Through CCTV Visual Imaging in areas within our properties, car parks, outdoor areas and leisure facilities.
  • When you use our Wi-Fi services.


This policy will be reviewed annually unless there is a change in legislation requiring us to review the policy sooner. We are committed to ensuring that the data we collect and process is accurate, is up to date, is appropriate, is not excessive, is not retained for longer than required and does not constitute an unwarranted invasion of your privacy.

What personal data do we collect and process?

The data we hold and process for you will depend on our relationship with you, the enquiries you have made with us, and the bookings and services you have requested from us, along with the products or services we may request from you.

Typically, we may hold:

Details such as names, addresses, contact details, details of services or products provided or inquired about, consent information provided for children, correspondences, complaints and enquiries, preferences regarding marketing information, information from other sources such as publicly available information, industry networking information, national industry portals and records, visual imaging recorded on CCTV when you access our grounds and properties and a record of marketing emails sent to you and whether you have opened, read or clicked through to our website from them.

How do we use the personal data we hold about you? 

We may process your personal data for the legitimate interests we have, provided that those interests do not override any of your own rights and freedoms, which we will consider carefully.

We may collect and store personal data for a number of reasons:

  • To fulfil our booking or contractual obligations
  • To provide you with information you have requested from us or that we feel may be of interest to you
  • To respond to your feedback and ideas
  • To notify you of any changes to our services
  • To plan and manage our properties and facilities and improve our internal processes
  • To investigate and respond to any complaints you may make
  • To prevent and detect crime, fraud or corruption
  • To meet legal, regulatory, statutory and ethical responsibilities
  • To monitor the safety and security of data subjects in and around our properties and grounds


How long will we keep your personal data?

We will only keep your personal data for as long as is necessary, to fulfil the purposes for which it was collected. You are free to remove yourself from our lists at any time by using the unsubscribe option.

Who will we share your personal data with?

We may share your personal data with third parties or other organisations and individuals where:

  • There is a legal obligation to do so
  • Where we are bound by any code of practice
  • Relevant data may be shared with our booking partners or service providers in conjunction with the delivery of our services to you. In these circumstances we will have an appropriate contract in place which sets out requirements, that the third party can only process your data on our instruction, and that they will not use it for their own purposes. They will hold it securely and delete it or return it to us, once the contract has ended.
  • Relevant data may be shared with our booking partners or service should a complaint be made by you.


International transfers

If we intend to transfer your personal data to a third country or share with an international organisation, we will put measures in place to do so securely, with appropriate safeguards in place.

Data Security

We are serious about taking appropriate measures to protect your personal data.

The transmission of information via the internet is not completely secure. Although we do our best to protect your personal data, we cannot guarantee the security of the data you transmit to our site, and any transmission is at your own risk.

Once we have received your data, we use strict procedures and security features to prevent unauthorised access to your data.

All information provided by you is held on secure servers and any payment transactions will be encrypted. We apply controls and access-restrictions across all of our technology platforms and review and test these at regular intervals.

Through the contracts and security measures we put in place, any third parties that we may share your data with are obliged to keep your details secure and to use this data only to fulfil the service they provide to you on our behalf. If we pass any special category personal data onto a third party, we will only do so once we have obtained your explicit consent or for the fulfilment of a contract we hold with you, unless we are legally required to do otherwise.

Your rights as a ‘data subject’

Whilst we are processing your personal data at the South Beach Weligama Properties (Pvt) Ltd, as a ‘data subject’, you have the following rights:

  • Right to be informed: You have the right to be informed about our data processing through this Privacy Notice.
  • Right of access: By submitting a ‘Subject Access Request’, you have the right to request information about and access to a copy of the personal data held by us as a Data Controller.
  • Right of rectification: Where you feel that the information we hold about you is inaccurate or incomplete, you have the right to request that we correct your personal data.
  • Right to be forgotten: When you feel we no longer need your personal data for the purpose it was obtained for or where you have withdrawn your consent to us processing your data, you may ask us to erase your personal data.
  • Right to restrict processing: Where you feel the personal data we are processing is inaccurate or where you feel your personal data is no longer needed but you want us to retain it for any possible future reference, you have the right to restrict our processing of your personal data.
  • Right to data portability: Where we hold data electronically about you, in certain circumstances, you have the right to ask us to provide that data in an easy to read format and to transfer this data to another organisation.
  • Right to object: You have the right to object to certain types of processing of personal data in certain circumstances. You have an absolute right to ask us to stop using your contact details to send you direct marketing.


If we process your personal data, you can request the following information from us:

  • Who is the person or organisation that decided how and why to process your data
  • The contact details of our Data Protection Officer
  • The legal basis for processing and the purpose of the data processing
  • Which categories of personal data are collected and processed
  • Who we share your data with or disclose your data to
  • If we intend to transfer your personal data to a third country or share with an international organisation
  • How long we will store your data
  • Confirmation of your Data Subject Rights to ask us to correct, erase, restrict, transfer or object to processing your personal data
  • Details regarding your right to withdraw your consent at any time.
  • Where it is required to enter into a contract between us, if you are obliged to provide the personal data and any consequences possible if you fail to provide the personal data required
  • Where your data was not collected directly from you, confirmation of where your personal data was sourced from
  • We will normally respond to your request to access your personal data within one month from the date it is received. However, in some cases, we may need to extend this to three months.


A copy of your personal data is usually provided free of charge. However, we can charge a ‘reasonable fee’ where we find that the data requested is manifestly excessive or manifestly unfounded and in particular if the request is a repetitive one. We can also charge for additional copies of the personal data.

Contacting Us and Your Right to Make a Complaint

If you wish to speak to us or question anything in this notice relating to how we collect, store or process your personal data, please email us at

We hope you don’t need to make a complaint about how we process your personal data or how a complaint has been handled. If you feel you do wish to complain, you have the right to complain through our Data Protection Officer as detailed above and the supervisory authority at the contact details below:

Data Protection Authority of Sri Lanka (to be appointed once the Act comes into place)

Policy Change

This policy was last updated on 30th September 2021.  


Cookies are small text files that are placed on your computer by websites you visit. They are widely used to make websites work more efficiently, as well as provide information to the owners of the site you are visiting.

We use Cookies when you arrive at our site, unless you have adjusted your browser to refuse them. We may collect information about your computer, including where available your operating system and browser type, for system administration. This is statistical data about our users’ browsing actions and patterns, and does not identify any individual. For the same reason, we may obtain information about your use of our site by using a cookie file which is stored on the hard drive of your computer. Cookie files help us to improve our site and to deliver a better and more personalised service.

We use the following cookies:

Google Analytics – These cookies are used to collect information about how our visitors use our website. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to this site from and the pages they have visited.

Google Website Optimiser – These cookies are used to collect information about how visitors use our site. We use information to test and optimise site content and design.

Juicer – These cookies are used to display an image feed from Instagram in the ‘Picture This’ feature.

We may use additional cookies to track behaviour and usage on third party software, for example our app, and will update this policy annually to reflect new uses.

You may refuse to accept cookies by activating the setting on your browser which allows you to refuse the setting of cookies. However, if you select this setting you may be unable to access certain parts of our site. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you log on to our site.

Display advertising

We use display ads based on Google Analytics remarketing features. You can opt-out of these ads and change your preferences with the Ads Preferences Manager.

Links to other websites

Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

Register your interest


Alternatively, you can call +94 77 727 5727 to speak with one of our team.