Privacy Policy

Last updated: 10/8/2025

Who we are

Ceylon Serendib Tours is a Sri Lanka–based inbound tour operator. Contact: privacy@ceylonserendibtours.com

Data we collect

• Contact details (name, email, phone, country)
• Trip preferences (dates, pax, interests, budget band)
• Optional: passport details only if required to secure bookings
• Technical: IP, user agent, referrer/UTM (for analytics and fraud prevention)

How we use data

• To prepare quotes, confirm bookings, and deliver support
• To communicate updates about your trip
• To improve our website and services (aggregate analytics)

Legal basis & consent

We process data with your consent and to perform a requested service (pre-contract steps and contract). You may withdraw consent at any time by contacting us.

Sharing

We share only what’s necessary with trusted suppliers (hotels, guides, transport operators). We do not sell personal data. International transfers may occur for cloud hosting and email—protected by standard safeguards.

Retention

Leads are retained for [e.g., 12 months]. Booking records follow statutory requirements. We minimize retention of passport/ID—deleted once not required for the service or legal compliance.

Security

We use industry-standard controls: access limits, HTTPS, and encryption in transit. No method is 100% secure but we continually improve safeguards.

Your rights

Subject to applicable law, you may request access, correction, deletion, or restriction of your personal data. Email: privacy@ceylonserendibtours.com

Cookies & analytics

We use cookies/analytics (e.g., GA4) to understand site usage. You can disable non-essential cookies in your browser.

Contact & complaints

For questions or complaints, contact privacy@ceylonserendibtours.com.