Privacy & Cookie Policy

Effective Date: [03/24/2026]

This Privacy Policy explains how Hotelz.lk (“the Website”), operated by Collk (Pvt) Ltd (“the Company,” “we,” “us,” or “our”), collects, uses, and protects data from general users, property owners, and business listing owners (collectively, “Users” or “you”).

We are committed to processing your data in compliance with the Sri Lanka Personal Data Protection Act (PDPA) No. 9 of 2022 and international best practices.

By using https://hotelz.lk/, you agree to this Privacy Policy.

What Information Do We Collect?

We collect information from our through registration, listing submissions, and contact forms to facilitate our services:

Account & Verification Data (Private): During registration, we collect usernames, passwords, and mobile numbers for account security. For business and property owners, we also collect Full Names, Job Titles, and Business Registration Number. This information is utilized strictly for internal B2B verification and administrative communication; it is not disclosed to the public.

Listing Content (Publicly Accessible): Information submitted via our Property or Business Listing forms is intended for public display to increase visibility. This includes, but is not limited to:

• Business Name, Category, Descriptions, and Amenities.
• Media assets (Listing Images, Cover Photos).
• Geolocation Information (District, Address, and Google Maps links).
• Contact Information: Official Website URLs, Social Media links, and WhatsApp Contact Numbers.
• Purpose of Disclosure: Contact details collected via listing forms are specifically to facilitate direct booking inquiries and real-time communication between travelers and listing owners. By submitting a listing, you acknowledge and consent to the public visibility of these fields.

Contact Forms: We collect your name and email address to respond to direct inquiries.

Comments: Your name, email address and comment content are collected when you leave a comment.

Technical & Usage Data: We automatically gather data such as your IP address, device hardware details, browser type, and access times to optimize site performance.

How We Process Your Information

We process your personal information for a variety of reasons, depending on how you interact with our Website, including:

• Managing Your Account: To facilitate account creation, authentication, and the ongoing administration of user profiles.
• Delivering Our Services: To provide the requested directory services, including the hosting and public display of your property or business listings.
• Supporting Your Inquiries: To respond to your questions, provide technical support, and solve potential issues with our services.
• Sending Administrative Updates: To send you details about our services, updates to our terms and policies, or other essential account-related notices.
• Enabling Direct Communication: To facilitate direct booking inquiries between travelers and listing owners via public contact channels like WhatsApp.
• Sharing Marketing & Promotions: To send you marketing communications and promotional offers if you have provided explicit opt-in consent.
• Ensuring Security & Preventing Fraud: To keep our Website safe and secure, including the verification of business legitimacy and monitoring for fraudulent activity.
• Improving Our Platform: To identify usage trends and determine the effectiveness of our promotional campaigns so we can improve the platform experience.

What Legal Bases Do We Rely On?

Under the PDPA, we must have a specific legal reason to handle your information. We rely on the following:

• To Fulfill Our Agreement with You: Necessary to provide the services you signed up for such as creating your account and hosting your business listing.
• For Our Legitimate Business Interests: We process certain data (like Business Registration IDs) to verify that listings are authentic. This protects the site from fraud and ensures a high-quality experience for all users.
• With Your Explicit Consent: For activities like sending marketing emails, we only proceed if you have specifically opted in. You can withdraw this consent at any time.
• To Meet Our Legal Obligations: To comply with Sri Lankan laws and regulatory requirements.

Cookie Policy

We utilize cookies to optimize site performance and user experience.

• Essential Cookies: These are mandatory for technical functionality, such as maintaining secure login sessions and enabling dashboard management.
• Functional Cookies: These remember your preferences to provide a seamless browsing experience.
• Management: You may adjust your browser settings to refuse cookies; however, this will restrict access to the Member Area and submission features.

Third-Party Integrations and External Links

Our platform integrates third-party tools and links to enhance the directory experience. Please be aware of how these interact with your data:

• External Links: Our site contains links to external social media profiles (Facebook, Instagram,etc) and booking platforms. When you click these links, you leave our Website. We do not control, and are not responsible for, the privacy practices of these external entities.
• Embedded Maps (Google Maps): We utilize Google Maps to display property locations. When you view or interact with a map on our site, your browser establishes a direct connection with Google’s servers. This allows Google to receive technical data (such as your IP address). This interaction is governed by Google’s own privacy terms.

How Do We Keep Your Information Safe?

• Our Security Measures: We employ industry-standard measures, including SSL encryption, regular backups, and restricted administrative access.
• Your Responsibility: You are responsible for maintaining the confidentiality of your account credentials and ensuring your account is secure.

How Long Do We Retain Your Data?

We retain your personal data only for as long as necessary to facilitate your account and comply with legal obligations. If you delete your account, your data will be removed or anonymized unless legal requirements (such as tax audits or fraud prevention) prohibit immediate deletion.

What Are Your Privacy Rights?

Under the PDPA, you have the following rights:

• Access & Correction: You can view and update your data via your User Dashboard. Listing edits are subject to administrative review.
• Requesting Deletion: You have the right to request the deletion of your account. For security, we will verify your identity before processing these requests.
• Withdrawing Consent: You may opt-out of marketing at any time.

Age Restrictions

Our platform is not directed towards children or those under the age of 18. If we inadvertently collect personal data from a minor, we will remove it immediately upon notification.

How Do We Handle Changes To This Policy?

We may update this Privacy Policy from time to time to reflect changes in the law or our platform features. The updated version will be indicated by a “Revised” date at the top of this page. Significant changes will be communicated via a prominent notice on the Website or via email. We encourage you to review this Privacy Policy frequently to stay informed about how we are protecting your information. Your continued use of hotelz.lk after these changes are posted confirms that you agree to the updated terms.

How Can You Contact Us About This Policy?

For any privacy-related questions or to exercise your rights, please contact us at: info@hotelz.lk or via any contact method available on our website.