Privacy policy
and your information.

This website is owned and controlled by Colombo Court Hotel (Pvt) Ltd under the brand name Colombo Court Hotel & Spa (CCH).

This Privacy Notice explains who we are, how we collect, share and use Personal Information, and how you can exercise your privacy rights. It includes information about:

• What information we collect
• How we collect it
• How we use it
• The security measures we take concerning your Personal Information
• Whether it is shared, and with whom
• Your rights concerning your Personal Information

Colombo Court Hotel & Spa operates a boutique hotel, The Court Spa, Cloud Café & Bar, the Loft Bar, the Scarlet Room restaurant and Amber Poolside Café in the city of Colombo, Sri Lanka.

This privacy policy contains information on how CCH collects, uses and shares information collected from you, and how that information is protected from unauthorised access. This privacy policy covers only the Site. By using the Site, you agree that CCH may collect, use and share information consistent with this privacy policy.

The effective date of this privacy policy is 29 September 2026.

CCH may change this privacy policy from time to time. Any changes will become effective upon posting of the revised policy on the Site.

If any of the changes affect how CCH treats or handles personally identifiable information or personal data collected from you, such as your name, address, telephone number, email address or any other information that could identify you (“Personal Information”), we will give notice of this on our website. You may inform us by email of any changes to the consent you have given us by using this website.

CCH will state explicitly on the website that Personal Information is requested only for the following purposes: when making reservations, when requesting a specific service, if you need us to contact you for any reason, to operate the Site, to provide Site services, to administer services reserved through the Site, to contact you in response to a question or about a good or service you purchased or reserved through the Site, and/or to inform you of new features, services and products.

CCH does not sell or otherwise make your Personal Information available to any third parties for their own use. However, subject to the applicable laws of Sri Lanka, CCH may collect, use and disclose relevant portions of your Personal Information to our business partners in order, among other things, to:

• Process your online reservations and bookings for our hotel accommodation and spa services.
• Provide, and charge for, the hotel accommodation, spa services and other goods and services you purchase.
• Provide you with a better, more personalised level of service.
• Fulfil contractual obligations to you, to anyone involved in making your travel arrangements (such as travel agents or group travel organisers), and to vendors (such as airline operators).
• Conduct market research, customer satisfaction and quality assurance surveys, and direct marketing and sales promotions.

CCH may collect your name, email address and telephone number, as required by law in Sri Lanka, and any other information you choose to provide so that we may process your requests. All required and optional information is clearly marked on any form you are presented with. If you give us feedback or contact us by email, we will collect your name and email address, as well as any other content included in the email, in order to send you a reply.

The Personal Information that we may collect about you broadly falls into the following categories.

Some information and data may be collected automatically from you through the standard operation of our internet servers and through the use of “cookies”. Cookies are small text files that a site can store on your computer. CCH uses cookies to improve your experience by recognising repeat users, making it easier to keep accessing and using the Site, tracking Site usage behaviour, and compiling aggregate data that allows content improvements and targeted advertising. Cookies generally neither damage your files nor allow us to identify you personally, and some cookies expire as soon as you leave our site. Others remain on your browser so that we can recognise you when you return. Cookies can be disabled at any time in your browser settings. However, some cookies may be necessary to provide some features of the Site, so deleting them may affect how the Site works for you.

Please note that by using the Site, you consent to the CCH website privacy policy.

The cookies this website uses, and how to accept or refuse them, are set out in full in our Cookie Policy.

CCH does not sell any of your Personal Information to third parties for any reason. As explained above, CCH may share some of your Personal Information with certain third parties in order to run its business properly, including the operation of its spa and hotel services. For example, your name and contact details may be shared with the travel agent or booking platform through which you made your reservation, so that your booking can be confirmed.

CCH may also disclose your Personal Information if required to do so by law, or in the good-faith belief that such action is necessary: (a) to comply with applicable law or with legal process served on CCH or the Site; (b) to protect and defend the rights or property of CCH or the Site; or (c) if the ownership of CCH changes, such as it being acquired by another party.

Online reservations and bookings for accommodation at our hotel are handled by a third-party vendor, SiteMinder. When making a reservation or booking, you will leave the CCH site and go to a booking page maintained by SiteMinder, and you will be bound by the CCH privacy policy regarding the collection of information. Please note that any information you provide to SiteMinder as part of reserving or booking accommodation at CCH will be shared with CCH for reasons consistent with how we use information collected directly through the Site.

Cancellation of room bookings, advance payment and related charges are governed by our Terms and Conditions, not by this privacy policy.

Our legal basis for collecting and using the Personal Information described above will depend on the Personal Information concerned and the specific context in which we collect it.

However, we will normally collect Personal Information from you only where we have your consent to do so, where we need the Personal Information to perform a contract with you, or where the processing is in our legitimate interests. In some cases, we may also have a legal obligation to collect Personal Information from you, or may otherwise need it to protect your vital interests or those of another person.

If we ask you to provide Personal Information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether providing your Personal Information is mandatory, protecting both your legitimate interests and those of CCH.

If you require any clarification about how we collect and use your Personal Information, please contact us using the details below.

CCH keeps Personal Information only for as long as it is needed for the purpose it was collected for, or for as long as the law requires. This includes our duties under the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka, as amended by the Personal Data Protection (Amendment) Act, No. 22 of 2025, and under Sri Lankan tax, accounting and company law.

When we have no ongoing legitimate business need to process your Personal Information, we will either delete or anonymise it or, if this is not possible (for example, because your Personal Information has been stored in backup archives), we will securely store it and isolate it from any further processing until deletion is possible.

You have the following data protection rights, subject to the legal requirements of Sri Lanka.

• If you wish to access, correct, update or request deletion of your Personal Information, you can do so at any time by contacting us.
• You can object to the processing of your Personal Information, ask us to restrict the processing of your Personal Information, or request portability of your Personal Information, again by contacting us.
• You have the right to opt out of marketing communications we send you at any time, by clicking the “unsubscribe” or “opt out” link in the marketing emails we send you. To opt out of other forms of marketing (such as postal marketing or telemarketing), please contact us.
• If we have collected and processed your Personal Information with your consent, you can withdraw your consent at any time, subject to the legal requirements of Sri Lanka.

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. How we apply the General Data Protection Regulation is explained on our GDPR compliance page.

CCH uses appropriate technical and organisational measures to protect the Personal Information that we collect and process about you. We take the security of your information seriously and review our safeguards regularly. Please be aware, however, that no method of sending information over the internet is completely secure, so we cannot guarantee the security of information while it is in transit to us. Once it reaches us, it is protected by the measures described above.

The CCH website is not marketed to, directed at or intended for children under 18 years of age. CCH does not knowingly collect any information from children under 18 years of age.

Your Personal Information may at times be transferred to, and processed in, countries other than the country in which you are resident. Every country has data protection laws that differ from those of your country. However, we have taken appropriate safeguards to require that your Personal Information will remain protected in accordance with this Privacy Notice.

The Site may contain links to external sites that are not controlled by or affiliated with CCH and are therefore not bound by this privacy policy. If you visit these linked sites, you will be subject to the privacy practices of those sites.

Your use of the Site is also governed by our Terms and Conditions, which are incorporated into this privacy policy by reference.

At Colombo Court Hotel & Spa, the privacy and online safety of our guests are of the utmost importance. There has recently been a rise in phishing and fraudulent email activity worldwide, affecting many hotels and booking platforms.

These deceptive messages may impersonate legitimate hotel brands or online booking channels in order to steal personal or payment information. While this is a global issue affecting the hospitality industry as a whole, we want to make sure our guests stay informed and protected.

We are committed to safeguarding your personal information and to working closely with our partners to ensure a secure digital environment for all our guests.

Colombo Court Hotel & Spa will not be liable for any security breach or financial loss resulting from the disclosure of personal information through unofficial or fraudulent emails. Your vigilance plays a vital role in maintaining the integrity of our shared online environment.

For any concerns, please contact info@colombocourthotel.com, or call +94 11 464 5333.

If you need to contact CCH for any reason, including if at any time you believe that your privacy is being compromised, please notify CCH using the details below and we will use all reasonable efforts to promptly determine and correct the problem, if it is within our control.

Colombo Court Hotel & Spa, corporate office
Email: info@colombocourthotel.com
Telephone: +94 11 464 5333

These changes to the CCH privacy policy are in line with, and modified as per, the applicable laws as of 29 September 2026.