Privacy Policy
Last updated: 12 August 2026
This policy explains what personal information Dream Cliff Mountain Resort collects, why, who we share it with, and what rights you have over it. We may update it from time to time; the date above shows when it last changed.
1. Who we are
Dream Cliff Mountain Resort is the controller of the information described here.
Kirawanagama Road, Lower Blackwood, Nikapotha – Haputale, UVA Province, Sri Lanka
[email protected] · +94 (0) 557 857 600
2. What we collect and why
| Information | Why we use it | Legal basis |
|---|---|---|
| Booking details — your name, contact details, country, stay dates, room and occupancy, and any requests | To take and manage your booking and provide your stay. Payment is handled by our booking provider's secure payment service; we never receive or store your card details. | Contract |
| Enquiry details — your name, contact details and message, by form, email, telephone or WhatsApp | To answer you and follow up | Legitimate interests |
| Booking and payment records | Accounting and tax | Legal obligation |
| Technical details — your IP address, device and browser, approximate location, the pages you visit, and the site or advertisement that brought you | Keeping the site secure and our forms free of spam | Legitimate interests |
| Measuring how the site is used and how our advertising performs | Consent |
You do not have to give us anything, but we cannot take a booking or answer an enquiry without the details above.
3. Cookies and your choice
If you are in the European Economic Area or the United Kingdom, a banner asks for your choice the first time you arrive. Until you accept, we set nothing beyond the essential cookies below and Google receives no advertising identifiers from your visit. Choosing Reject keeps it that way.
If you are anywhere else, analytics and advertising cookies are set from your first visit without a banner. You can turn them off at any time using the Cookie settings link in our footer, and we will remember that.
| Type | What it does | How long |
|---|---|---|
| Essential — always on | Remembers your cookie choice and protects our forms from automated spam | Up to 6 months |
| Analytics — Google Analytics | Counts visitors and measures how the site is used | Up to 2 years |
| Advertising — Google Ads | Shows which advertising leads to enquiries and bookings | Up to 90 days |
If you open a WhatsApp enquiry we also store a short reference in your browser so we can match your message to your visit. It is deleted when you close the tab.
We use Google Consent Mode, so your choice is sent to Google with each measurement request and limits what Google may store and how it may use the data. Our booking pages are operated for us by STAAH under the SwiftBook name and sit on a different web address; your choice is carried across to them. We also use Cloudflare's website analytics, which sets no cookies and does not identify you.
This site is protected by reCAPTCHA.
4. Who we share it with
We do not sell your information or share it for anyone else's marketing. We share it only with the providers we need to run the resort and website:
- STAAH / SwiftBook — our booking system and its secure payment service
- Google — Analytics, Ads, Tag Manager and reCAPTCHA, to the extent you have consented
- WhatsApp (Meta) — if you choose to message us that way
- Cloudflare and our website developer — keeping the site running and secure
- Travel agents and booking platforms — only where you booked through them
We may also disclose information where the law requires it.
5. Sending information abroad
We are based in Sri Lanka and the providers above operate internationally, so your information may be processed outside your own country. Where information leaves the European Economic Area or the United Kingdom, we rely on the European Commission's Standard Contractual Clauses and the safeguards those providers apply.
6. How long we keep it
We keep your information only for as long as we need it:
- Booking and payment records — for as long as accounting and tax law requires
- Enquiries that do not lead to a booking — only as long as we need to answer you and follow up
- Website analytics — no more than 14 months
- Cookies — as set out in section 3
7. Your rights
You can ask us to give you a copy of your information, correct it, delete it, restrict or stop our use of it, or send it to another provider. Where we rely on your consent you can withdraw it at any time — for cookies, use the Cookie settings link in our footer.
Email [email protected] and we will respond within one month, free of charge.
If you are in the European Economic Area or the United Kingdom and you are unhappy with how we have handled your information, you may complain to your national data protection authority — in the UK, the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to put it right first.