Effective Date: August 2026

At Velvet Lanka Tours, trust is the foundation of every journey we craft, and that begins with how we handle your personal information. This Privacy Policy explains what information we collect when you visit our website or engage our services, how we use it, who we share it with, and the choices and rights available to you. By using our website or booking a tour with us, you agree to the practices described in this policy.

1. Who We Are

Velvet Lanka Tours is a travel company based in Sri Lanka, specialising in Day Tours, Round Tours and Tailor-made Tours across the island. For the purposes of applicable data protection law, Velvet Lanka Tours is the data controller responsible for your personal information collected through our website, email correspondence, telephone enquiries and in the course of planning and delivering your journey.

2. Information We Collect

We collect information that you provide directly to us, information gathered automatically as you use our website, and information received from trusted third parties involved in delivering your trip.

Information you provide to us

• Contact details, including your name, email address, phone number and postal address.
• Passport and travel document details, where required for bookings, permits or entry requirements.
• Travel preferences, including dates, group composition, interests, accommodation style and budget, shared during the tailor-made itinerary process.
• Health, dietary, and mobility information that you choose to share so we can plan a safe and comfortable journey.
• Payment information, including billing details, processed to confirm and settle bookings.
• Correspondence, including emails, enquiry forms, and messages exchanged with our travel specialists.
• Feedback and testimonials you submit following your trip.

Information collected automatically

• Technical data such as IP address, browser type, device information, and general location, gathered when you browse our website.
• Usage data, including the pages you visit, links you click, and time spent on our site, collected through cookies and similar technologies (see Section 5).

Information from third parties

• Details shared by hotels, airlines, ground handlers, and activity operators involved in fulfilling your itinerary.
• Information from travel agents or tour partners who make a booking on your behalf.

3. How We Use Your Information

We use the information we collect to:

• Design, confirm, and administer your tailor-made itinerary, day tour or round tour package.
• Communicate with you regarding enquiries, bookings, itinerary changes and travel updates.
• Arrange accommodation, transport, guides and activities with our network of partners.
• Process payments and maintain accurate financial and booking records.
• Provide 24/7 in-destination support and respond to emergencies during your trip.
• Improve our website, services, and the overall quality of the journeys we design.
• Share relevant offers, destination inspiration, or updates, where you have consented to receive them.
• Comply with legal, regulatory and safety obligations.

4. How We Share Your Information

We do not sell your personal information. We share it only where necessary to deliver your journey or as required by law, including with:

• Accommodation providers, drivers, guides, and activity operators directly involved in your itinerary.
• Payment processors and financial institutions that facilitate booking payments.
• Government authorities, immigration offices, or park authorities, where required for permits, entrance tickets or legal compliance.
• Professional advisors, such as insurers or legal counsel, where necessary to protect our rights or respond to a claim.
• Service providers who support our operations, such as website hosting, email, and booking-management platforms, under confidentiality obligations.

Any third party with whom we share your information is expected to handle it securely and use it only for the purpose for which it was shared.

5. Cookies and Similar Technologies

Our website uses cookies and similar technologies to remember your preferences, understand how visitors use our site, and improve your browsing experience. Cookies may be set by us directly or by trusted third parties, such as analytics providers. You can control or disable cookies through your browser settings; please note that some parts of our website may not function as intended if cookies are disabled.

6. Data Security

We take the security of your personal information seriously and apply appropriate technical and organisational measures to protect it against unauthorised access, loss, misuse or alteration. While we work hard to safeguard your data, no method of transmission or storage is entirely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain personal information for as long as necessary to fulfil the purposes described in this policy, including maintaining booking records, meeting legal and accounting obligations, and resolving any disputes. When information is no longer required, we take reasonable steps to securely delete or anonymise it.

8. International Transfers

As a Sri Lanka-based company working with international travellers and global partners, your information may be transferred to and processed in countries other than your own, including Sri Lanka. Where this occurs, we take reasonable steps to ensure your information continues to receive an appropriate level of protection.

9. Your Rights

Depending on your location, you may have rights in relation to your personal information, which may include the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your information, subject to legal and contractual retention requirements.
• Object to or restrict certain uses of your information.
• Withdraw consent for marketing communications at any time.
• Request a copy of your information in a portable format.

To exercise any of these rights, please contact us using the details in Section 12. We will respond within a reasonable timeframe and in accordance with applicable law.

10. Children’s Privacy

Our services are intended for adults arranging travel, including travel for family groups. We do not knowingly collect personal information directly from children. Where a booking includes children, the accompanying adult is responsible for providing any necessary information on their behalf.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The revised policy will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

• Email: info@velvetlankatours.com
• Phone: +94 70 577 8695
• Address: No 52C, Welikadamulla Road, Mabola, Wattala