About this policy

Arana by Forest Trails is operated by Forest Trails (Pvt) Ltd, a company registered in Sri Lanka. This policy explains how we handle personal information collected through our website (www.aranayala.com), reservation enquiries, and your stay with us.

By using our website or making a reservation, you agree to the practices described in this policy. If you do not agree, please do not submit personal information to us.

What we collect

We may collect the following categories of personal information:

Identity & contact details: name, email address, phone number, postal address, nationality, passport or ID number (required for hotel check-in under Sri Lankan law).
Reservation details: arrival and departure dates, room type, number of guests, special requests, and dietary requirements.
Payment information: we process payments via our third-party booking and payment provider. We do not store card numbers on our servers.
Communication records: emails, WhatsApp messages, and enquiry form submissions sent to us. The enquiry form on this site opens your own email application; no form data is transmitted to or stored on our servers. If you subscribe to the Arana dispatch, your email address is stored so we can send you our letters; you may unsubscribe at any time by replying to any letter.
Website usage data: if you accept the cookie banner, Google Analytics 4 collects anonymised data on pages visited, browser type, and referral source. Declining the banner blocks Google Analytics entirely. Cloudflare, our hosting provider, collects aggregate, cookieless traffic statistics independently of your cookie choice. Fonts served by Google Fonts and map tiles served by OpenStreetMap will receive your IP address as part of any standard web request; we do not control that processing. Route data on our maps is fetched from the OSRM open routing service, which similarly receives your IP as part of the request.

How we use your information

We use personal information to:

Process and manage your reservation.
Communicate with you before, during, and after your stay.
Comply with Sri Lankan legal requirements (e.g. guest register obligations).
Respond to enquiries and provide customer service.
Send occasional information about Arana (only where you have opted in).
Improve our website and services.

We do not sell or rent personal information to third parties. We do not use your data for automated profiling or decisions that produce legal effects.

We share information only where necessary:

Booking platform: our third-party reservation system provider processes reservation and payment data on our behalf.
Payment processors: card transactions are handled by our payment gateway provider.
Sri Lankan authorities: we may be required to disclose guest information to the Sri Lanka Tourism Development Authority or law-enforcement bodies under applicable law.
Transfer partners: if you book a transfer through us, your name and arrival details are shared with our transport provider solely to fulfil that service.

We do not transfer personal data outside Sri Lanka other than as described above.

How long we keep your data

We retain personal information for as long as is necessary to fulfil the purposes described in this policy, and in any case no longer than required by applicable Sri Lankan law. Guest-register information is typically retained for a minimum period prescribed by the Sri Lanka Tourism Development Authority.

Security

We take reasonable precautions to protect personal information from unauthorised access, disclosure, or loss. Our website is served over HTTPS. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

Your rights

You may contact us at any time to:

Request a copy of personal information we hold about you.
Ask us to correct inaccurate information.
Ask us to delete information where we no longer have a legal basis to retain it.
Withdraw consent to marketing communications.

Please send requests to info@aranayala.com. We will respond within a reasonable time.

Cookies

Google Analytics 4 is loaded only after you click Accept on the cookie banner; declining the banner blocks it entirely. Your choice is stored in your browser. Cloudflare provides cookieless aggregate analytics that do not require your consent. We do not use advertising cookies.

Changes to this policy

We may update this policy from time to time. The current version will always be available at www.aranayala.com/privacy-policy/. Continued use of our website or services after a change constitutes acceptance of the updated policy.

Contact

Forest Trails (Pvt) Ltd
No. 1, Diyawara Gammanaya, Tissa–Kirinda Road, Yala Junction
Tissamaharama 82600, Sri Lanka
Email: info@aranayala.com
Phone: +94 11 401 0101

Effective date: 25 June 2026