Effective Date: December 22, 2025
At Ceylon2World Travel, we are dedicated to creating unforgettable journeys to Sri Lanka. As a UK-based company with deep roots in Sri Lanka, we take our responsibility to protect your personal data seriously. This policy outlines how we handle your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Sri Lanka Personal Data Protection Act.
1. Who We Are
Ceylon2World Travel is the “Data Controller” for your information.
- Registered Office: 75 Wallwood Street, Coutts Court, London E14 7GS.
- Contact Email: [email protected]
- Phone: +44 736 192 9371
2. Information We Collect
To provide our tailor-made holidays and safari experiences, we collect:
- Identity Data: Name, date of birth, gender, and passport details (required for flights, national park entries, and hotel check-ins).
- Contact Data: Email address, phone number, and billing address.
- Travel Data: Flight details, itineraries, and travel insurance information.
- Sensitive Data: Dietary requirements (which may imply religious beliefs) or medical/mobility information to ensure your safety during tours and safaris.
- Technical Data: IP address and browsing behavior via cookies on our website.
3. How We Use Your Data (Legal Basis)
We only process your data when we have a legal reason to do so:
- Performance of a Contract: To book your hotels, jeeps for elephant safaris, and local guides.
- Legal Obligation: To comply with airline security and Sri Lankan immigration laws.
- Consent: When you opt-in to our newsletter or provide health/dietary info.
- Legitimate Interest: To improve our travel packages and website experience.
4. International Data Transfers
As your journey takes you to the heart of Sri Lanka, we must transfer some of your data (like your name and passport info) to our local partners in Sri Lanka (hotels, safari operators, etc.).
- Safeguards: Since Sri Lanka is outside the UK/EEA, we use Standard Contractual Clauses (SCCs) or rely on the “Contractual Necessity” derogation to ensure your data remains protected to UK standards even when it is processed abroad.
5. Sharing Your Data
We share your information only with the necessary parties:
- Local Suppliers: Safari jeep operators, hotels, and tour coordinators in Sri Lanka.
- Airlines & Insurance: To secure your travel arrangements.
- Payment Processors: Secure third-party platforms for handling UK / International payments.
6. Data Retention
We keep your booking information for 6 years following the completion of your trip to comply with UK tax laws and for insurance purposes. Marketing data is kept until you unsubscribe.
7. Your Rights
Under UK GDPR, you have the right to:
- Access your data.
- Correct inaccurate info.
- Request erasure (“Right to be forgotten”).
- Object to direct marketing.
- Withdraw consent at any time.
To exercise these rights, please email us at [email protected].
8. Cookies
We use cookies to enhance your experience. You can choose to “Reject” non-essential cookies via our cookie banner without affecting your ability to browse our tours.
