Privacy policy

Effective Date: 17 August 2026

Information Collected: Name, contact details, nationality, reservation information, payment information, cookies and website analytics.

Purpose: To process reservations, communicate with guests, comply with legal obligations, improve services and prevent fraud.

Payment Information: Payments are processed through secure payment providers. Candidasa Hills does not store complete card details.

Information Sharing: Information may be shared with payment providers, booking platforms, authorities where legally required and operational service providers. Personal data is never sold.

Cookies: Cookies may be used to improve functionality and analytics.

Data Security: Reasonable technical and organisational measures are implemented to protect personal information.

Data Retention: Information is retained only as long as necessary for legal and operational purposes.

Guest Rights: Guests may request access, correction or deletion of their personal information where permitted by law.

Changes: The latest version of this policy will always be published on the website.

‍