Privacy Policy

01. Information We Collect

We collect personal information only when it is necessary to provide our travel services or to respond to your enquiries. The categories of information we may collect include:

• Identity Data: Full name, nationality, date of birth, and passport or national ID details — collected when required to arrange bookings, visas, or domestic travel permits in Sri Lanka.
• Contact Data: Email address, phone number, and country of residence — used to communicate your itinerary, confirmations, and pre-travel updates.
• Travel Preferences: Accommodation type, dietary requirements, mobility considerations, special occasions (e.g., honeymoons or anniversaries), and activity preferences shared through our enquiry or booking process.
• Health Information: Relevant medical or dietary conditions shared voluntarily by clients, used solely to ensure appropriate activity recommendations and safety arrangements.
• Payment Data: Credit or debit card details, bank transfer references, and billing addresses processed securely through our payment partners. We do not store full card numbers on our servers at any time.
• Technical Data: IP address, browser type and version, operating system, pages visited, time on site, and referring URLs — collected automatically when you visit our website via cookies and analytics tools.
• Communication Records: Emails, WhatsApp messages, or enquiry form submissions exchanged with our team, retained for service delivery and dispute resolution purposes.

We do not knowingly collect personal information from children under the age of 13 without verifiable parental consent.

02. How We Use Your Data

We process your personal information only for lawful purposes directly related to providing our travel services. We use your data to:

• Respond to your enquiries and create bespoke tour proposals tailored to your requirements.
• Confirm bookings and issue itineraries, vouchers, and receipts.
• Arrange all elements of your Sri Lanka trip — accommodation, private transfers, domestic flights, guided tours, activities, and restaurant reservations — on your behalf.
• Process deposits and balance payments, and issue invoices.
• Send important pre-travel communications including visa guidance, packing advice, and in-country emergency contacts.
• Contact you during your trip for operational support, updates, or emergency assistance.
• Send post-trip feedback requests and, where you have opted in, occasional newsletters and promotional offers.
• Analyse website usage to improve our content, services, and user experience.
• Comply with applicable legal obligations under Sri Lankan law, including the Tourism Act and any data-protection regulations in force.

03. Sharing Your Information

Ceylon Signature Travels does not sell, rent, or trade your personal data to any third parties for their own commercial purposes. We share data only with service providers who are strictly necessary to deliver your travel experience:

All third-party suppliers are required to handle your data securely and to use it exclusively for the purpose for which it was shared.

04. Cookies & Tracking

Our website (www.ceylonsignaturetravels.com) uses cookies and similar tracking technologies to enhance your experience and understand how visitors use our site. The types of cookies we use are:

You can manage or disable cookies at any time through your browser settings. Please note that disabling essential cookies may prevent certain features of our website from functioning correctly.

05. Data Security

We take reasonable and appropriate steps to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our current security measures include:

• SSL/TLS (HTTPS) encryption across all pages of our website to protect data in transit.
• Access controls ensuring that only authorised team members at Ceylon Signature Travels can access client booking records.
• Use of reputable, PCI-DSS compliant third-party payment processors — we never handle or store raw card data ourselves.
• Confidentiality obligations for all staff and contracted guides who handle personal information.
• Client data is retained only as long as necessary to deliver your travel services, meet legal obligations, or resolve disputes — typically no longer than 3 years after your trip concludes.

While we take every reasonable precaution, no method of internet transmission is completely secure. If you suspect your data has been compromised, please contact us immediately at [email protected].

06. Your Rights

You have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us using the details in Section 7:

We will respond to all valid requests within 30 days. We may need to verify your identity before processing your request. There is no charge for exercising your rights.

07. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us directly:

08. Policy Updates

We review and update this Privacy Policy periodically to reflect changes in our operations, applicable law, or industry best practices. When we make material changes, we will:

• Update the “Last Updated” date shown at the top of this page.
• Display a notice on our website homepage or send an email notification to active clients where the change is significant.
• Seek fresh consent where processing activities change and consent is required under applicable law.

We encourage you to review this page whenever you visit our website. Continued use of our website or services after an updated policy has been posted constitutes your acceptance of the revised terms.