Privacy Policy

How we collect, use, and protect your information

Last updated: March 2026

Sha Lanka Travels ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website or use our services.

1. Information We Collect

Information You Provide

When you use our booking forms, contact forms, or communicate with us via WhatsApp, we may collect:

  • Full name
  • Email address
  • Phone number
  • Nationality
  • Travel dates and preferences
  • Number of travelers
  • Special requests or messages

Information Collected Automatically

When you browse our website, we may automatically collect:

  • IP address and approximate location
  • Browser type and device information
  • Pages visited and time spent on pages

Third-Party Services

Our website uses Google Maps and Google Places API for the custom trip planner feature. Google may collect data in accordance with Google's Privacy Policy.

2. How We Use Your Information

We use the information we collect to:

  • Process your booking inquiries and reservations
  • Communicate with you about your trip details
  • Provide customer support
  • Improve our website and services
  • Send you relevant travel information (only with your consent)

3. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

  • Our drivers and tour guides to facilitate your trip
  • Third-party service providers who assist in operating our website
  • Legal authorities if required by law

4. WhatsApp Communication

Our booking forms send inquiries directly to our WhatsApp business number. WhatsApp messages are subject to WhatsApp's Privacy Policy. We use WhatsApp solely to communicate about your booking and travel arrangements.

5. Data Security

We take reasonable measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Your Rights

You have the right to:

  • Request access to the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your personal data
  • Withdraw consent for marketing communications at any time

Rights Under the EU General Data Protection Regulation (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the GDPR, including:

  • Right to portability: Request a copy of your personal data in a structured, commonly used, machine-readable format
  • Right to restrict processing: Request that we limit how we use your data
  • Right to object: Object to the processing of your personal data for direct marketing purposes
  • Right to lodge a complaint: File a complaint with your local data protection authority

To exercise any of these rights, please contact us using the details in Section 9 below. We will respond to your request within 30 days.

7. Lawful Basis for Processing

We process your personal data on the following legal bases:

  • Contractual necessity: Processing required to fulfil a booking or respond to your inquiry
  • Legitimate interest: Processing necessary for our business operations, such as improving our services
  • Consent: Processing based on your explicit consent, such as receiving marketing emails — you may withdraw consent at any time

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:

  • Booking and inquiry data: Retained for up to 2 years after your trip for customer service and legal purposes
  • WhatsApp messages: Retained on our device for up to 1 year, then deleted
  • Newsletter subscriptions: Retained until you unsubscribe
  • Website analytics data: Not collected (we do not use analytics tools at this time)

After the retention period, your data is securely deleted.

9. Cookies

Our website stores a cookie consent preference in your browser's local storage. We do not use tracking cookies or analytics cookies. Embedded third-party services (Google Maps) may set their own cookies — see Google's Privacy Policy for details.

10. Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact us: