Ceylon Paradiso is committed to protecting the privacy and personal data of everyone who visits our website or uses our services. This Privacy Policy explains what personal information we collect, how we use and store it, and your rights in relation to your data. By using our website or services, you consent to the practices described in this policy.

1.  Information We Collect

Personal Information You Provide

When you contact us, make an enquiry, or confirm a booking, we may collect the following personal information:

• Full name and date of birth
• Email address and phone number
• Postal or billing address
• Passport or national identity document details
• Dietary requirements, health conditions or accessibility needs
• Payment information
• Travel preferences and itinerary details

Information Collected Automatically

When you visit our website, we may automatically collect certain technical and usage data, including:

• IP address and geographic location
• Browser type, device type and operating system
• Pages visited, time spent on pages and referral source
• Cookies and similar tracking technologies (see Section 6 below)

2.  How We Collect Information

We collect personal information through the following means:

• Website enquiry and contact forms
• Email correspondence
• WhatsApp or telephone communications
• Booking confirmation processes
• Website analytics tools
• Social media interactions where you contact us directly

3.  How We Use Your Information

Ceylon Paradiso uses your personal information for the following purposes:

• Processing tour bookings, reservations and payments
• Communicating with you about your enquiry, booking or itinerary
• Providing personalised tour recommendations and quotations
• Sending service-related updates, confirmation and reminders
• Complying with legal and regulatory obligations
• Improving our website, services and customer experience

We will not use your personal data for purposes that are incompatible with those listed above without first obtaining your consent.

4.  Data Storage & Security

Your personal data is stored securely on password-protected systems and, where applicable, on trusted cloud-based platforms with industry-standard encryption. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction, or disclosure.

We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. Booking-related data is typically retained for seven (7) years for financial and legal compliance purposes. Marketing data is retained until you withdraw your consent.

Despite our best efforts, no method of internet transmission or electronic storage is completely secure. We encourage you to contact us immediately if you believe your data has been compromised.

5.  Sharing Your Data with Third Parties

Ceylon Paradiso does not sell, rent, or trade your personal information. We may share your data with trusted third parties only under the following circumstances:

• Service providers: Hotels, transport operators, activity providers, and other travel suppliers who need your details to fulfil your booking
• Payment processors: Secure payment gateways that process transactions on our behalf
• Legal compliance: Government authorities or regulators where required by law or legal process
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to equivalent privacy protections

All third-party service providers who receive your data are contractually required to process it lawfully and confidentially, and only for the purposes for which it was shared.

6.  Cookies Policy

Our website uses cookies to enhance your browsing experience and gather usage analytics. We use the following types of cookies:

• Essential cookies: Required for core website functionality
• Analytics cookies: Used to understand how visitors interact with our website
• Marketing cookies: Used to display relevant advertisements

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website.

7.  Marketing Communications

We will only send you promotional emails, newsletters, or special offers if you have opted in to receive such communications. Every marketing email we send will include a clear, easy-to-use unsubscribe link. You may also withdraw your consent at any time by contacting us.

Withdrawing consent for marketing communications will not affect the lawfulness of any processing carried out before the withdrawal.

8.  Your Rights

Under applicable data protection law, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you
• Right to rectification: You may request correction of inaccurate or incomplete data
• Right to erasure: You may request deletion of your personal data, subject to legal retention obligations
• Right to restriction: You may request that we limit how we process your data in certain circumstances
• Right to data portability: You may request a copy of your data in a structured, machine-readable format
• Right to object: You may object to the processing of your data for marketing purposes at any time

To exercise any of these rights, please submit a written request to hello@ceylonparadiso.com. We will respond within 30 days. We may ask you to verify your identity before processing your request.

9.  Children’s Privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately so we can delete it.

10.  Third-Party Links

Our website may contain links to third-party websites, including hotel partners, activity providers, and travel blogs. This Privacy Policy applies only to the Ceylon Paradiso website. We encourage you to read the privacy policies of any third-party sites you visit, as we have no control over and accept no responsibility for their content or data practices.

11.  Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any material changes will be posted on this page with a revised effective date. We encourage you to review this policy periodically.

12.  Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us:

Email: info@ceylonparadiso.com

Website: ceylonparadiso.com

Sri Lanka

We take all privacy concerns seriously and will endeavour to resolve your query promptly and fairly.