Ceylonaa Holidays (Pvt) Ltd

Privacy Policy

Last Updated: February 2026

Ceylonaa Holidays Pvt Ltd (“Ceylonaa Holidays”, “we”, “our”, “us”) is an SLTDA-licensed, government-registered Destination Management Company based in Colombo, Sri Lanka. We believe your personal data deserves as much protection as your travel experience. This policy explains how we collect, use, and safeguard your information when you interact with us through our website, CeylonaaHolidays.lk, or our offline channels.

1. Information We Collect

To design your bespoke Sri Lankan escape, we collect only the information necessary for your journey:

    • 1.1 Personal Identity: Full name, nationality, and passport details (required for hotel registrations, domestic flights, and national park permits).

    • 1.2 Contact Data: Email address, phone number, and WhatsApp details for real-time tour support.

    • 1.3 Travel Preferences: Dietary requirements, mobility needs, interest areas, and flight arrival/departure details.

    • 1.4 Digital Data: When you visit our site, we may collect your IP address, browser type, and “cookies” to help us improve your browsing experience.

2. How We Use Your Information

We use your data solely to deliver a seamless, personalized travel experience:

    • To Process Bookings: Reserving hotels, transport, and hand-picked activities.

    • To Communicate: Providing pre-arrival guidance and 24/7 on-ground support.

    • Legal Compliance: Meeting SLTDA and Sri Lankan immigration requirements.

    • Continuous Improvement: Improving our website performance based on how you interact with it.

Our Promise: We never sell, rent, or trade your personal information to third-party marketing companies. Period.

3. Sharing Your Information

We act as the “bridge” between you and our partners. We share your information only with trusted suppliers essential to your trip:

    • Hotels & Boutique Retreats: For check-in and room security.

    • Licensed Chauffeur-Guides: So they can personalize your daily experience.

    • Ticketing Partners: For rail or domestic air travel.

    • Emergency Services: If medical or travel insurance assistance is required.

4. Data Security & Retention

    • Security: We use encrypted communication channels and restricted internal access to protect your files. While no digital transmission is 100% secure, we follow industry-standard protocols to minimize risk.

    • Retention: We keep your data only as long as necessary to fulfill your travel arrangements and meet legal tax/audit requirements. Passport copies are deleted once they are no longer required for operational bookings.

5. Cookies & External Links

    • Cookies: Our website uses cookies to remember your preferences. You can disable these in your browser settings at any time.

    • External Links: Our site may link to third-party sites (like Tripadvisor). We are not responsible for their privacy practices and encourage you to read their policies.

6. Children’s Privacy

Our services are not directed at children under 16. We do not knowingly collect personal information from minors unless it is provided by a parent or legal guardian for the explicit purpose of travel arrangements.

7. Your Rights

You have the right to request access to your data, correct any inaccuracies, or request the deletion of your information (where legally permissible). To exercise these rights, please contact our Data Navigator at the details below.

8. Contact Us

For questions or data-related requests, please reach out to:

Ceylonaa Holidays Pvt Ltd