Privacy policy.

This page is available in English only. If anything is unclear, message us on WhatsApp and we'll be happy to help.

Last updated: 11 November 2026

1. Who we are

This website is run by Ceyloha Travels, a tour company based in Colombo, Sri Lanka ("we", "us"). We are responsible for the personal information you share with us. You can contact us at [email protected] or on WhatsApp at +94 77 808 0321.

2. What we collect

When you send us a booking request or an enquiry, by our online form, email or WhatsApp, we collect what you choose to give us. That usually includes:

• your name, email address, phone or WhatsApp number and country
• your travel dates, the number of adults and children, and your chosen tour, vehicle, hotel style and extras
• anything you tell us in your message, such as flight times, dietary needs, health or mobility needs, or a special occasion

When you travel with us, we may also need passport details (for hotel check-in and park tickets) and the names of everyone in your group. We only ask for these when your trip is confirmed.

Please only share health information that helps us look after you, for example a food allergy or difficulty with stairs. We use it only for that purpose.

3. How we use it

• to answer your questions and send you an itinerary and price
• to book hotels, safari jeeps, train seats and activities for your trip
• to keep in touch before and during your trip, including by WhatsApp
• to keep records of payments and bookings, as the law requires

We use your information because you asked us to plan or provide a trip (to take steps towards, and perform, our agreement with you), and to meet our legal and accounting duties. We will not send you marketing messages unless you ask us to, and you can stop them at any time.

4. Who we share it with

We share only what each partner needs to provide your trip:

• Hotels, safari operators, Sri Lanka Railways and activity providers receive the names and details needed to make your bookings.
• Your chauffeur-guide receives your itinerary, pickup details and phone number.
• Formspree (formspree.io) delivers online booking requests from this website to our email inbox.
• Google (Gmail) hosts our email, and WhatsApp (Meta) carries our chats.
• Government authorities, but only if the law requires it.

Some of these services store data outside Sri Lanka, including in the United States and the European Union. We only use well-known providers that protect personal data.

5. This website

• No tracking cookies. We don't use advertising cookies or analytics that follow you around the web.
• Your settings. Your chosen language and currency are saved in your own browser (local storage) so the site remembers them. They never leave your device, and you can clear them in your browser settings.
• Fonts and photos. The site loads fonts from Google Fonts and photographs from Wikimedia Commons. Like any website, those services receive your IP address when your browser fetches the files.
• Forms. The contact form doesn't store anything on this website. It opens a ready-written message in WhatsApp or your email app, and nothing is sent until you press send there.

6. How long we keep it

We keep enquiries that don't become a booking for up to two years, in case you come back to plan your trip. For confirmed trips, we keep booking and payment records for as long as Sri Lankan tax and accounting law requires, and delete the rest when it's no longer needed. Passport details are deleted once your trip has ended.

7. Keeping it safe

Only the people who plan and run your trip can see your details. Our accounts are password-protected and we use secure, encrypted services for email and messaging. We never ask for card numbers by email or WhatsApp.

8. Your rights

You can ask us at any time to:

• tell you what information we hold about you and send you a copy
• correct anything that's wrong
• delete your information, unless we have to keep it by law
• stop using it for a particular purpose

Just email [email protected] and we'll reply within 30 days. These rights apply under Sri Lanka's Personal Data Protection Act No. 9 of 2022 and, for guests in the European Union and United Kingdom, the GDPR. If you're unhappy with how we've handled your information, you can also complain to the data protection authority in your country.

9. Children

We only collect information about children when a parent or guardian books a family trip and gives it to us, for example ages for child seats and room planning.

10. Changes to this policy

If we change how we use your information, we'll update this page and the date at the top.