ZEYLON TRAILS

Privacy Policy

At Zeylon Trails, we are committed to protecting your privacy and ensuring your personal information is handled securely in accordance with Sri Lanka's Personal Data Protection Act, No. 9 of 2022. This comprehensive policy explains how we collect, use, and safeguard your data when you interact with our website.

1. Information We Collect

We collect information required to respond to travel inquiries, prepare proposals and manage bookings. This includes your name, contact details (such as email address and phone number), and travel preferences submitted through our inquiry forms, booking panels, and newsletter subscriptions.

2. How We Use Your Information & Lawful Processing

Your primary data is used to facilitate your travel arrangements in Sri Lanka. We process personal data based on your explicit consent and for the legitimate purpose of fulfilling your travel requirements. Additionally, by checking the consent box during the booking or inquiry process, or by subscribing to our newsletter, you grant Zeylon Trails permission to use your submitted email address for promotional communications, special offers, and newsletter emails.

3. Data Protection and Security

All collected data is stored securely, access is limited to authorised staff, and your information will not be sold to third parties. We implement appropriate technical and organizational measures, such as access controls, to prevent unauthorized access, loss, or destruction of personal data. We only share necessary details with trusted local service providers (like hotels or drivers) strictly for fulfilling your itinerary.

4. Data Retention

We ensure that personal data is not kept longer than necessary for the purposes for which it was collected. Once your travel arrangements are completed and any legal or accounting obligations are fulfilled, your data will be securely erased or anonymized.

5. Your Rights as a Data Subject

Under Sri Lankan data protection legislation, you possess several rights regarding your personal information:

Right of Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can ask us to correct or complete any inaccurate or outdated data.
Right to Erasure: You can request the deletion of your personal data under specific circumstances.
Right to Withdraw Consent: You may opt out of our marketing communications at any time. Every promotional email and newsletter we send includes an "unsubscribe" link for easy removal from our mailing list.

Contact

For policy questions, or to exercise any of your data rights, contact the agency using the details on the Contact page.