Privacy Policy

Information we collect

When you submit an enquiry, build a trip, book an experience or subscribe to our newsletter, we collect the details you provide — such as your name, email, phone / WhatsApp number, country, travel dates, party size and trip preferences.

For instant bookings we also process booking metadata (item, dates, travellers, amount). Card payments are handled by our payment provider — we do not store full card numbers on our servers.

We also collect limited technical data (such as device and usage information) through privacy-friendly analytics to improve our website, and only after you consent where required.

How we use your information

We use your information to respond to enquiries, prepare tailored quotes and itineraries, process bookings and payments, deliver the services you request, and (with your consent) send you relevant travel inspiration and offers.

We do not sell your personal information to third parties.

Sharing with trusted partners & sub-processors

To fulfil your trip, we may share necessary details with vetted local hosts, accommodation and transport providers. We only share what is required to deliver your experience.

We also use carefully chosen processors to operate the site: Vercel (hosting and delivery), Sanity (content management), PayHere (payment processing for instant bookings), and Resend (transactional email). If we connect a CRM or automation tool (for example Make or Zapier) to route leads, that tool processes enquiry details solely to help us respond to you.

These providers act on our instructions and are not permitted to sell your data.

International travellers (including UK / EEA)

If you are in the UK or European Economic Area, you have rights under applicable data protection law, including access to your data, correction of inaccuracies, erasure where appropriate, restriction of processing, and objection to certain processing.

Where we transfer data outside your region (for example to processors listed above), we do so using appropriate safeguards required by law.

Data retention & security

We retain your information only as long as necessary for the purposes described (including booking records and legal obligations), and apply reasonable technical and organisational measures to protect it.

Your rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us.

To exercise your rights or ask any privacy question, email hello@visitsrilanka.co.

Contact

Questions about this policy? Contact us at hello@visitsrilanka.co.