LEGAL
Privacy Policy
Ceylon By You respects your privacy and is committed to handling personal information responsibly, transparently and securely.
This Privacy Policy explains what information we collect, how we use it, when it may be shared and the choices available to you when you visit www.ceylonbyyou.com, submit an enquiry or arrange a journey with us.
Last updated: 22 August 2026
1. Who we are
Ceylon By You is a travel business registered in Sri Lanka, specialising in tailor-made Sri Lanka journeys, private city tours and jeep safaris.
For the purposes of applicable data-protection law, Ceylon By You is responsible for the personal information described in this policy.
Contact: info@ceylonbyyou.com
Website: www.ceylonbyyou.com
Country of establishment: Sri Lanka
2. Information we may collect
Identity and contact information
Your name, email address, telephone number, country of residence and preferred method of communication.
Travel enquiry information
Your proposed travel dates, duration, number of travellers, ages of children where relevant, destinations, interests, preferred pace, accommodation preferences and approximate budget.
Booking information
Information required to arrange your journey, which may include nationality, date of birth, passport or identification details, flight details, accommodation requirements and emergency contact information.
Health and accessibility information
Dietary requirements, allergies, medical information, mobility requirements or other information you voluntarily provide when it is relevant to safely arranging your journey.
We only request this information when necessary and handle it with additional care.
Payment and transaction information
Payment amounts, payment status, transaction references, invoices and limited billing information.
Full card details are generally processed directly by the relevant bank or payment provider and are not intended to be stored by Ceylon By You.
Communications
Emails, WhatsApp messages, telephone conversations, enquiry-form submissions, feedback and other correspondence with us.
Website and technical information
Your IP address, browser type, device information, approximate location, pages visited, referral source and interactions with our website.
This information may be collected through Wix Analytics, Google Analytics, cookies and similar technologies, subject to your consent where required.
Marketing preferences
Your decision to receive or decline newsletters, travel inspiration, offers and other promotional communications.
3. How we collect information
We may collect personal information:
-
When you submit a website enquiry form
-
When you contact us by email, telephone or WhatsApp
-
When we discuss, prepare or refine a travel proposal
-
When you confirm or pay for a booking
-
When you subscribe to marketing communications
-
Automatically through cookies and analytics technologies
-
From someone arranging travel on your behalf
-
From suppliers or service providers involved in your confirmed journey
If you provide information about another traveller, you should have their permission to share it with us.
4. How we use your information
We may use personal information to:
-
Respond to enquiries and understand your travel requirements
-
Design and provide tailored itineraries and proposals
-
Recommend suitable destinations, accommodation and experiences
-
Confirm and manage reservations
-
Arrange transport, guides, safaris, activities and other services
-
Process and record payments
-
Communicate important booking and travel information
-
Provide assistance before, during and after your journey
-
Send newsletters or promotional communications where permitted
-
Improve our website, services and customer experience
-
Maintain website security and prevent fraud or misuse
-
Meet accounting, tax, regulatory and legal obligations
-
Establish, exercise or defend legal claims
5. Our reasons for processing information
Depending on the circumstances and applicable law, we process personal information because:
-
It is necessary to respond to your request or take steps towards a booking
-
It is necessary to perform our agreement with you
-
You have provided consent
-
We have a legitimate business interest in operating, improving and protecting our services
-
We must comply with a legal or regulatory obligation
-
It is necessary to protect someone’s vital interests in an emergency
You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.
6. When we share information
We only share information when reasonably necessary for the purposes described in this policy.
Recipients may include:
-
Hotels and other accommodation providers
-
Drivers, chauffeur-guides and local guides
-
Transport and transfer providers
-
Safari, activity and experience providers
-
Attraction, ticketing and reservation providers
-
Airlines or other travel providers when requested
-
Banks and payment-service providers
-
Wix, which hosts and supports our website
-
Google, where Google Analytics is enabled
-
WhatsApp when you choose to communicate through that service
-
Professional advisers, including accountants, insurers and legal advisers
-
Government, regulatory or law-enforcement authorities where legally required
-
Suppliers receive only the information reasonably required to provide the requested service.
We do not sell personal information for monetary consideration.
7. International processing and transfers
Some technology providers and travel suppliers may process information outside your country of residence or outside Sri Lanka.
Different countries may have different data-protection standards. Where required by applicable law, we take reasonable steps to use appropriate contractual, organisational or legal safeguards for international transfers.
8. Cookies and analytics
Our website uses cookies and similar technologies to:
-
Operate essential website functions
-
Remember visitor choices
-
Maintain security
-
Understand website traffic and performance
-
Improve navigation and content
-
Measure the effectiveness of our communication
Non-essential analytics or marketing technologies will be used with consent where required.
You can accept, reject or manage non-essential cookies through the cookie banner displayed on the website. You may also control cookies through your browser settings, although disabling essential cookies may affect website functionality.
9. Wix, Google and WhatsApp
Our website is created and hosted using Wix. Wix may process technical and website information according to its own privacy practices.
Where enabled, Google Analytics helps us understand how visitors use our website. Google may process device, cookie and usage information according to its own privacy policy.
If you contact us through WhatsApp, Meta and WhatsApp may process information associated with that communication according to their respective policies.
You can review their policies here:
Wix Privacy Policy: www.wix.com/about/privacy
Google Privacy Policy: policies.google.com/privacy
WhatsApp Privacy Policy: www.whatsapp.com/legal/privacy-policy
10. Marketing communications
We may send travel inspiration, news or promotional messages when you have requested them or when otherwise permitted by applicable law.
You can unsubscribe at any time by:
-
Selecting the unsubscribe link in a marketing email
-
Replying to the message
-
Contacting info@ceylonbyyou.com
Service messages concerning an enquiry, confirmed journey, payment or important travel information are not marketing communications and may still be sent when necessary.
11. How long we retain information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.
Enquiry information that does not result in a booking will normally be retained for up to 24 months after our last meaningful communication.
Booking, transaction and financial records may be retained for longer when required for accounting, tax, insurance, contractual or legal purposes.
Marketing information is retained until you unsubscribe, withdraw consent or it is no longer reasonably required. We may retain a limited suppression record to ensure that your opt-out preference is respected.
Analytics information is retained according to our selected provider settings and your cookie-consent choices.
12. How we protect information
We use reasonable administrative, organisational and technical safeguards intended to protect personal information against unauthorised access, disclosure, loss, alteration or misuse.
However, no internet transmission, electronic communication or storage system can be guaranteed to be completely secure.
13. Your privacy rights
Depending on your location and applicable law, you may have the right to:
-
Ask whether we hold personal information about you
-
Request access to your personal information
-
Ask us to correct inaccurate or incomplete information
-
Request deletion of information in certain circumstances
-
Request restriction of processing
-
Object to certain processing, including direct marketing
-
Withdraw consent
-
Request transfer of certain information
-
Complain to an appropriate data-protection authority
We do not use personal information to make solely automated decisions that produce legal or similarly significant effects.
To exercise a privacy right, contact info@ceylonbyyou.com. We may request reasonable information to verify your identity before completing the request.
14. Children’s information
Our website is not directed towards children independently using our services.
A parent, guardian or responsible adult may provide information about a child when arranging family travel. We use that information only where reasonably necessary to prepare or provide the requested travel services.
15. Third-party websites
Our website may contain links to third-party websites and services.
Ceylon By You is not responsible for the privacy practices, security or content of websites operated by other organisations. We encourage you to review their privacy policies before providing information.
16. Changes to this policy
We may update this Privacy Policy when our services, technology or legal obligations change.
The latest version will be published on this page with an updated revision date. Material changes may also be communicated through the website or by another appropriate method.
17. Contact us
If you have questions, concerns or requests concerning this Privacy Policy or your personal information, please contact:
Ceylon By You
Sri Lanka
Email: info@ceylonbyyou.com
Website: www.ceylonbyyou.com
If you believe your concern has not been resolved, you may also contact the Data Protection Authority of Sri Lanka at www.dpa.gov.lk.