Privacy Policy
How SerendiaTours collects, uses, and safeguards your personal information.
Information We Collect
At SerendiaTours, we collect personal information you voluntarily provide when using our services. This enables us to deliver tailored, high-quality travel experiences across Sri Lanka.
Personal Identifiers
- Full name and date of birth
- Passport or national ID details
- Nationality and country of residence
Contact Information
- Email address
- Phone number (mobile and landline)
- Mailing or residential address
Travel Preferences
- Preferred travel dates and duration
- Accommodation type and meal preferences
- Special needs or accessibility requirements
Technical Data
- IP address and browser type
- Device type and operating system
- Pages visited and time spent on site
How We Use Your Information
We use your personal information strictly for the purposes outlined below. We do not use your data for any purpose that is incompatible with those described.
Booking & Reservation Management
Processing your tour bookings, hotel reservations, transport arrangements, and all related travel logistics on your behalf.
Personalized Travel Consultation
Understanding your preferences to curate bespoke itineraries, suggest relevant packages, and provide tailored recommendations.
Communication & Support
Responding to inquiries, sending booking confirmations, travel updates, and providing support during your trip.
Service Improvement
Analyzing anonymized usage data to improve website performance, identify service gaps, and enhance overall customer experience.
Legal & Regulatory Compliance
Meeting our obligations under applicable law, including travel regulations, anti-fraud measures, and financial reporting requirements.
Marketing (with consent only)
Sending newsletters, promotional offers, and travel inspiration — only when you have explicitly opted in. You may opt out at any time.
Legal Basis for Processing
We process your personal data based on the following lawful grounds in accordance with applicable data protection legislation:
Contractual Necessity
Processing required to fulfill your booking or travel agreement.
Legitimate Interests
Improving our services, preventing fraud, and maintaining secure operations.
Legal Obligation
Compliance with travel regulations, tax requirements, and legal proceedings.
Consent
Marketing communications and non-essential cookies, where you've opted in.
Sharing of Information
We may share your information only with the following trusted categories of recipients, and only to the extent necessary to fulfill your travel arrangements:
- Accommodation providers (hotels, guesthouses, resorts) for room reservations
- Licensed tour guides and transport operators for ground services
- Airlines and ferry operators for ticketing and seat reservations
- Payment processors for secure transaction handling
- Government authorities or regulatory bodies when legally required
- Technology providers who power our website and booking systems, under strict data processing agreements
Data Security
We implement industry-standard safeguards to protect your data from unauthorized access, disclosure, alteration, or destruction.
SSL Encryption
All data transmissions are encrypted using HTTPS/TLS protocols.
Access Controls
Strict role-based access limits who can view your information internally.
Regular Audits
Periodic security reviews ensure ongoing data protection compliance.
While we apply rigorous security measures, no method of internet transmission is 100% secure. We continuously work to protect your data but cannot guarantee absolute security.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting obligations.
| Data Type | Retention Period |
|---|---|
| Booking records & correspondence | 7 years (legal requirement) |
| Financial transaction records | 7 years (tax compliance) |
| Marketing consent records | Until consent is withdrawn |
| Website analytics data | 24 months |
| Support & inquiry records | 3 years from last interaction |
Your Rights
You have the following rights regarding your personal data. To exercise any of these rights, contact us at serendiatours@gmail.com.
Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of your personal data ('right to be forgotten').
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent
Withdraw marketing consent at any time without affecting prior processing.
International Data Transfers
As a Sri Lanka-based travel company, your data may be processed or accessed by service providers located outside Sri Lanka — for example, cloud hosting providers or international tour partners. When such transfers occur, we ensure appropriate safeguards are in place, including contractual data protection clauses or the use of providers with recognized compliance certifications, so your information remains protected to the same standard.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us directly:
Response Times
- General inquiries: within 2 business days
- Data access requests: within 30 days
- Urgent concerns: same business day