Privacy Policy
Delight Lanka Travels & Tours
Your privacy matters to us. This policy explains what personal information we collect when you visit our website, contact us or travel with us, why we collect it, how we protect it and the rights you have.
Last updated: 19 September 2026
1. Who we are
Delight Lanka Travels & Tours ("Delight Lanka", "we", "us") is a tour operator based in Sri Lanka. We are the controller of your personal information.
Address: 32/3, Makola South, Makola 11640, Sri Lanka
Email: delightlankatours.info@gmail.com
Phone / WhatsApp: +94 70 382 2281
We welcome guests from many countries. We handle personal information in line with the Sri Lanka Personal Data Protection Act No. 9 of 2022 and, where they apply to us, the UK General Data Protection Regulation and Data Protection Act 2018, the EU General Data Protection Regulation (GDPR), the Australian Privacy Principles, the UAE Personal Data Protection Law and applicable US state privacy laws.
2. The information we collect
- Contact details: your name, email address, phone or WhatsApp number and country of residence.
- Trip details: travel dates, number of travellers, the ages of any children, interests, budget, flight times and your itinerary.
- Booking details: the names of all travellers and, only where a supplier or authority requires it (for example, for train reservations or park permits), passport details.
- Special requirements: dietary, medical or mobility needs that you choose to tell us about so that we can look after you. We use this information only with your explicit consent and only for your trip.
- Payment information: records of payments you make. We do not store full card details. Card payments are processed by our payment provider or bank.
- Communications: messages, emails and call notes between us.
3. How we collect it
We collect information directly from you, or from the person who makes a booking for your group. Our website enquiry form does not store your details on this website. When you press "Send", it opens WhatsApp or your own email program with your message ready to send. We receive your information only when you choose to send it.
4. Why we use it, and our legal basis
| Purpose | Legal basis (UK/EU GDPR) |
|---|---|
| Replying to your enquiry and preparing your quote | Taking steps at your request before entering into a contract, and our legitimate interest in responding to you |
| Arranging and delivering your tour, including sharing details with your driver-guide and the suppliers you ask us to book | Performance of our contract with you |
| Handling special requirements, such as health or dietary needs | Your explicit consent |
| Keeping accounts and meeting legal obligations | Legal obligation |
| Helping you in an emergency during your trip | Vital interests |
| Occasional news or offers, only if you ask to receive them | Consent, which you can withdraw at any time |
We never sell your personal information, and we never use it for automated decision-making or profiling.
5. Who we share it with
- Your chauffeur guide and our team, so that they can deliver your tour.
- Hotels, safari operators, Sri Lanka Railways and other suppliers, but only where you ask us to make a booking for you, and only the details they need.
- Our banks and payment providers.
- Communication and email providers we use to talk to you, such as WhatsApp (Meta) and Gmail (Google), each of which applies its own security safeguards.
- Professional advisers, and authorities where the law requires it.
6. International transfers
We are based in Sri Lanka, so if you contact us from the UK, the EU, the USA, Australia, the Middle East or elsewhere, your information will be transferred to and processed in Sri Lanka. Where the UK or EU GDPR applies, we transfer your information because it is necessary to arrange the tour you have asked for (Article 49(1)(b) GDPR), and we protect it with the security measures described below. Service providers we use, such as Google and Meta, maintain their own recognised transfer safeguards.
7. How long we keep it
If you make an enquiry but don't book, we keep your details for up to 2 years, so that we can help if you get back in touch, and then delete them. If you travel with us, we keep booking and payment records for 6 years after your trip to meet accounting and legal requirements. Health and special-requirement information is deleted within 3 months of your return.
8. How we protect it
We use password-protected, two-factor-secured accounts, share information only with people who need it, and never publish your personal details. However, no method of sending information over the internet is completely secure.
9. Your rights
Depending on where you live, you have the right to:
- access the personal information we hold about you;
- ask us to correct or update it;
- ask us to delete it;
- restrict or object to how we use it;
- receive a copy in a portable format; and
- withdraw your consent at any time, where we rely on consent.
To exercise any of these rights, email delightlankatours.info@gmail.com. We'll reply within one month, free of charge. If you're unhappy with how we've handled your information, please tell us first so we can put it right. You can also complain to a data protection authority, such as the UK Information Commissioner's Office (ico.org.uk), the supervisory authority in your EU country, the Office of the Australian Information Commissioner (oaic.gov.au) or the Data Protection Authority of Sri Lanka.
10. Cookies and this website
This website does not use advertising or tracking cookies, and it does not use analytics. Our fonts are hosted on our own server. We store your currency choice and cookie preference in your browser. Live Tripadvisor reviews are loaded only if you allow them. See our Cookie Policy for details.
11. Children
Children's details are collected only from a parent or guardian who is making a family booking, and only as needed for the trip.
12. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.