Legal
Privacy Policy
Last updated: 29 May 2026 · Applies to: ceylonvaluetravels.com
1. Data Controller
The data controller responsible for your personal information is:
Colombo, Sri Lanka
Email: ceylonvaluetravels@gmail.com
Phone / WhatsApp: +94 77 133 2693
For all privacy-related requests, including exercising your rights under the GDPR, please contact us at the email address above with the subject line "Privacy Request".
2. Scope of This Policy
This Privacy Policy explains how Ceylon Value Travels ("we", "us", "our") collects, uses, stores, and protects personal data about visitors to our website (ceylonvaluetravels.com) and individuals who contact us regarding our travel services. It applies to all users, including those based in the European Union and Italy.
This policy is issued in accordance with the EU General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and the Italian Privacy Code (D.Lgs. 196/2003, as amended by D.Lgs. 101/2018).
3. Personal Data We Collect
3.1 Data you provide directly
When you fill in our contact or enquiry form, we collect:
- Full name
- Email address
- Phone / WhatsApp number (optional)
- Preferred travel dates
- Number of travellers
- Package of interest
- Your message / travel requests
3.2 Data collected automatically
When you visit our website, we may automatically collect:
- IP address (anonymised before storage)
- Browser type and version
- Device type and operating system
- Pages visited and time spent on each page
- Referring URL
- Country of access
This data is collected through cookies and similar technologies only if you have given your consent. See our Cookie Policy for details.
4. Legal Basis for Processing
| Processing Activity | Legal Basis (GDPR) |
|---|---|
| Responding to your enquiry or booking request | Art. 6(1)(b) — Performance of a contract / pre-contractual steps |
| Sending you a newsletter or marketing emails (if subscribed) | Art. 6(1)(a) — Consent |
| Google Analytics (website analytics) | Art. 6(1)(a) — Consent |
| Website security and fraud prevention | Art. 6(1)(f) — Legitimate interests |
| Complying with legal obligations | Art. 6(1)(c) — Legal obligation |
5. How We Use Your Data
- To respond to your travel enquiry and provide information about our packages
- To prepare and send you a personalised travel quote
- To process and manage your booking
- To send booking confirmations and travel documentation
- To improve our website based on anonymised usage analytics
- To comply with applicable laws and regulations
We will never sell your personal data to third parties or use it for automated decision-making or profiling that produces significant legal effects.
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Enquiry / contact form data (no booking) | 12 months from last contact |
| Booking and customer records | 7 years (accounting / legal obligations) |
| Google Analytics data | 26 months (GA4 default) |
| Cookie consent records | 12 months |
| Server access logs | 90 days |
7. Data Recipients and International Transfers
We share your data only where necessary with the following categories of recipients:
- Hostinger International Ltd (web hosting) — servers located in the EU.
- Google LLC (Google Analytics, Google Workspace) — headquartered in the USA. Transfers to Google are protected by Standard Contractual Clauses (SCCs) adopted under EU Commission Decision 2021/914. Google is also certified under the EU–US Data Privacy Framework. You may opt out of Google Analytics at any time via our cookie banner or by using the Google Analytics Opt-out Browser Add-on.
- WhatsApp / Meta Platforms Ireland Ltd — if you contact us via WhatsApp. Data is processed subject to Meta's Privacy Policy.
We do not transfer your personal data to any other countries or organisations without an adequate level of protection.
8. Your Rights Under the GDPR
If you are located in the EU / EEA (including Italy), you have the following rights regarding your personal data:
- Right of access (Art. 15) — You may request a copy of the personal data we hold about you.
- Right to rectification (Art. 16) — You may request correction of inaccurate or incomplete data.
- Right to erasure / "right to be forgotten" (Art. 17) — You may request deletion of your data where there is no overriding legal basis for retention.
- Right to restriction of processing (Art. 18) — You may request that we limit how we use your data in certain circumstances.
- Right to data portability (Art. 20) — You may request your data in a structured, machine-readable format.
- Right to object (Art. 21) — You may object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent (Art. 7(3)) — Where processing is based on consent, you may withdraw it at any time via our cookie banner or by contacting us. Withdrawal does not affect the lawfulness of prior processing.
To exercise any of these rights, contact us at ceylonvaluetravels@gmail.com with the subject line "Privacy Request". We will respond within 30 days.
9. Right to Lodge a Complaint
If you believe we have processed your personal data unlawfully, you have the right to lodge a complaint with the competent supervisory authority. For Italian residents, this is:
Piazza Venezia 11, 00187 Roma — Italy
Website: www.garanteprivacy.it
Email: garante@gpdp.it
Tel: +39 06 69677 1
Residents of other EU countries may contact the data protection authority in their country of habitual residence.
10. Cookies
Our website uses cookies. For detailed information about which cookies we use, their purpose, and how to manage your preferences, please read our Cookie Policy.
11. Children's Privacy
Our website and services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when it was last revised. We encourage you to review this page periodically. For significant changes, we will display a notice on the website.