Privacy Policy

DBI Ceylon Pvt Ltd (trading as Moi Hotels) is the data controller for this website and for the Moi Collection and DBI Select sites hosted on it. We are a Sri Lankan company. Our reservations office is at 56/3 Koswatta Cross Road, Sri Jayawardenepura Kotte, Sri Lanka.

For privacy requests, email centralreservations@dbihotels.lk or write to us at the address above. You can also call +94 112 063 064.

This policy explains how we handle personal information collected through moihotels.com and related property pages: contact and enquiry forms, newsletter sign-up, on-site popups, WhatsApp, and cookies or similar storage in your browser.

It does not replace the details in a booking confirmation. If you stay with us, the confirmation and any registration card we send you will describe stay-specific information (for example passport details at check-in).

Depending on how you use the site, we may collect:

We use this information to:

We process personal data under Sri Lanka’s Personal Data Protection Act, No. 9 of 2022. Where EU or UK data protection law also applies (for example if you are in the EEA or UK), we rely on: consent (newsletters, non-essential cookies, analytics, and marketing); legitimate interests (replying to an enquiry you sent, running a secure website); and steps needed to enter a contract (handling a reservation request).

We do not sell your information. We share it only as needed to provide the service:

Necessary cookies and local storage keep the site working and remember this privacy choice. Functional, analytics, and marketing tools run only after you accept them. Details, including a cookie table, are in our Cookie Policy. You can change your mind at any time via Cookie settings in the footer.

Enquiry and popup messages are kept as long as needed to handle your request and for a reasonable follow-up period. Newsletter addresses are kept until you unsubscribe. Cookie consent is stored for up to 12 months, after which we may ask again. Analytics and advertising data follow each provider’s retention settings.

We are based in Sri Lanka. Some processors (including Google and Meta, if you consent) may process data in other countries. Where those tools are used, we rely on the safeguards those providers publish for international transfers.

You may ask us for a copy of your personal data, to correct it, to delete it where we no longer need it, or to withdraw consent (for example newsletter or cookies). EU and UK visitors may also have rights to restrict or object to certain processing, and to data portability.

To exercise these rights, email centralreservations@dbihotels.lk with the subject “Privacy request”. You may also complain to Sri Lanka’s data protection authority, or to your local authority if you are in the EEA or UK.

This website is intended for adults making travel plans. We do not knowingly collect personal data from children through the site.

We may update this policy from time to time. The “Last updated” date at the top of this page will change. Continued use of the site after an update means you should read the new version.