Privacy Policy

Effective Date: 26^th  January 2024

Aster Leisure Management (Pvt) Ltd our is committed to protecting your privacy and ensuring you have a secure experience while visiting our website https://aster.lk. This Privacy Policy outlines how we collect, use, disclose, and protect your information in accordance with global data protection laws including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and Sri Lanka Personal Data Protection Act (PDPA).

1. Who We Are

Aster Leisure Management (Pvt) Ltd is a leading leisure and entertainment company in Sri Lanka, offering services such as water parks, amusement parks, events, and leisure-based hospitality experiences.

Company Name: Aster Leisure Management (Pvt) Ltd
Company Registration No: PV-00292911
Head Office Address: No. 123, Galle Road, Colombo 03, Sri Lanka
Email: [email protected]
Phone: +94 718 602 381
Website: https://aster.lk

2. Information We Collect

We collect personal and non-personal information in several ways:

2.1 Personal Data

Includes information you provide to us directly:

• Full Name
• Email Address
• Contact Number
• Postal Address

2.2 Usage Data

Collected automatically when you access the website:

• IP Address
• Browser Type & Version
• Device Information
• Referring URLs
• Pages Visited & Time Spent
• Clickstream Data

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, and analytics tools to:

• Remember your preferences
• Analyze website traffic
• Improve our services

You may control cookie preferences in your browser settings. See our Cookie Policy for full details.

3. How We Use Your Information

We use your data to:

• Process and manage bookings or service requests
• Send confirmations and notifications
• Communicate special offers or promotions (with your consent)
• Improve website content and customer experience
• Ensure safety, security, and fraud prevention
• Comply with legal and regulatory obligations

4. Legal Basis for Processing

Under applicable laws, we process your personal data based on one or more of the following:

• Your consent
• Fulfillment of a contract
• Our legitimate interest (e.g., marketing or fraud prevention)
• Compliance with a legal obligation

5. Sharing Your Data

We do not sell your personal data. We may share information with:

• Service Providers: IT, payment processors, web hosting, and email platforms
• Regulatory Authorities: If required by law or court order
• Business Partners: When necessary for delivering joint services or events
• Affiliates or Subsidiaries: As part of our group company operations

All third parties are required to comply with applicable data protection regulations.

6. Data Retention

We retain personal data only for as long as necessary for the purposes outlined in this Policy or as required by law:

• Booking and transaction data: 7 years
• Marketing preferences: until you unsubscribe
• Customer support inquiries: 2 years

7. Data Security

We maintain technical and organizational security measures including:

• Secure Socket Layer (SSL) encryption
• Firewall and intrusion detection systems
• Limited access control to sensitive systems
• Regular data audits and staff training

Despite our best efforts, no transmission over the Internet is 100% secure. We encourage you to take precautions, such as using strong passwords and logging out after sessions.

8. International Data Transfers

If you access our services from outside Sri Lanka, please note your information may be transferred to, processed, and stored in countries with data protection laws different from your jurisdiction. Where necessary, we implement safeguards such as Standard Contractual Clauses or Data Transfer Agreements.

9. Your Rights

Depending on your location, you may have the following rights:

• Access: Request access to the personal data we hold about you
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion (subject to legal limits)
• Restriction: Limit how we use your data
• Objection: Object to data processing in certain cases
• Portability: Request data transfer to another service provider
• Withdraw Consent: At any time, where processing is based on consent

To exercise these rights, email us at [email protected].

10. Children’s Privacy

Our website and services are not directed to children under the age of 13. We do not knowingly collect data from minors without verified parental consent. If we learn we have collected such data, we will delete it immediately.

11. Third-Party Links

Our website may include links to other sites (e.g., ticketing, event partners, or social media). We are not responsible for the privacy practices of such third parties. Please review their privacy policies independently.

12. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in legal requirements, services, or our practices. Updates will be posted on this page with the revised effective date. You are encouraged to review this page periodically.

13. Contact Us

If you have questions, complaints, or requests related to this policy or your personal data, please contact:

Aster Leisure Management (Pvt) Ltd
No. 123, Galle Road, Colombo 03, Sri Lanka
Email: [email protected]
Phone: +94 71 860 2381
Website: https://aster.lk

🔒 Thank you for trusting Aster with your personal information. We are committed to ensuring your privacy and security.