Your privacy matters

Privacy Policy

How we collect, use, and protect your personal information when you visit Hiriketiya Sri Lanka.

Effective date: January 2025

1. Information We Collect

When you visit Hiriketiya Sri Lanka, we may collect certain information automatically and information you provide voluntarily.

Automatically collected information:

•

IP address, browser type, and device information

•

Pages visited, time spent on pages, and referral sources

•

Cookies and similar tracking technologies for site functionality and analytics

Information you provide voluntarily:

•

Name, email address, and phone number when you submit inquiry forms

•

Surf lesson booking details (preferred day, time, experience level)

•

Business listing information when you submit a listing

•

Any information included in messages you send through our contact forms

2. How We Use Your Information

We use the information we collect for the following purposes:

- To respond to your inquiries — Your name, email, and message are used to reply to questions, feedback, or support requests.

•

To process surf lesson bookings — Booking details are forwarded to our partner surf instructors so they can confirm your lesson.

•

To improve our website — Anonymous analytics help us understand how visitors use our site and improve content.

•

To send relevant updates — If you opt in, we may send occasional newsletters about Hiriketiya events, surf conditions, and travel tips. You can unsubscribe at any time.

3. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in these limited cases:

- Surf lesson partners — When you book a lesson, your name, email, phone, and booking preferences are shared with our certified surf instructor partners to fulfil your request.

•

Service providers — We use third-party services (e.g., Google Analytics, Netlify hosting, Nodemailer for email delivery) that process data on our behalf under strict confidentiality agreements.

•

Legal requirements — We may disclose information if required by law, court order, or governmental authority.

4. Cookies & Tracking

Our website uses cookies for:

- Essential cookies — Required for basic site functionality (session management, security).

•

Analytics cookies — Google Analytics helps us understand page views, traffic sources, and user behaviour in aggregate.

•

Preference cookies — Remember your settings and preferences for a better experience.

You can control cookies through your browser settings. Disabling essential cookies may affect site functionality.

5. Data Security

We implement industry-standard security measures to protect your personal information:

- SSL/TLS encryption for all data in transit

•

Secure hosting infrastructure via Netlify

•

Limited access to personal data on a need-to-know basis

•

Regular security reviews of third-party services

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy:

- Inquiry and contact form data — Retained for up to 12 months to maintain communication history.

•

Surf lesson booking data — Retained for up to 6 months after the lesson date.

•

Analytics data — Anonymized and aggregated; retained indefinitely for trend analysis.

•

Business listing data — Retained as long as the listing is active on our site.

7. Your Rights

You have the right to:

- Access the personal data we hold about you

•

Correct any inaccurate or incomplete data

•

Delete your personal data from our systems

•

Opt out of marketing communications at any time

•

Withdraw consent for data processing where applicable

To exercise any of these rights, please contact us at contact us. We will respond within 30 days.

8. Third-Party Links

Our website contains links to third-party websites (e.g., surf schools, restaurants, accommodation providers). We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

9. Children's Privacy

Our website is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. Continued use of the site after changes constitutes acceptance of the updated policy.

Questions about this policy?