Legal
Privacy Policy
A plain account of what this website actually collects and does with it — no data broker relationships, no advertising network, no marketing cookies.
1. What we collect
When you use this site directly, we collect:
- Booking requests (/rooms): your name, email, phone number, number of guests, dates, and any special requests you add.
- Payment receipts: if you upload proof of a bank or crypto transfer from your booking page, we store that file to verify your deposit against your stay.
- Enquiries (/contact): your name, the contact detail you provide (email or phone), and your message — saved the moment you choose to send it on WhatsApp or by email, alongside that hand-off, not instead of it.
- A Google account, only if you sign in: the name, email address and profile picture Google provides. This is currently used by our staff to manage the site.
2. How we use it
To confirm room availability, process your deposit, prepare your invoice, respond to your enquiry, and reach you about your stay. We don't sell, rent, or share it with advertisers, and we don't use it to build a marketing profile.
3. Third parties involved
- Google Maps — the map on this site and on /contact loads a script from Google, which is subject to Google's own privacy policy.
- Google Sign-In — used only if you choose to sign in.
- WhatsApp and your mail app — when you press a "Send on WhatsApp" or "Send by email" button, your own device opens that app with a message we composed but you send. Our servers do not transmit anything to WhatsApp or a mail provider on your behalf.
- Vercel Analytics and Speed Insights — aggregate, cookie-free usage and performance metrics for this site. They don't identify you individually.
4. Where it's stored
Booking and enquiry records live in our PostgreSQL database (hosted on Neon). Uploaded receipts and site images are stored with Vercel Blob. Both are accessible only to authenticated staff.
5. What stays on your device
Your browser remembers the bookings you've made and rooms you've looked at, using localStorage — this is how /bookings shows your saved bookings on a return visit.
That list lives only in your browser; it is never sent to us, and clearing your browser's
site data clears it. If we sign you in, we set one session cookie (auth-session); we don't set marketing or tracking cookies.
6. Contact
Questions about your data: teyabeachreception@gmail.com or +94 72 787 2771. See also our Terms of Service.