Privacy Notice

1. Who We Are

LAND OF CEYLON (PVT) LTD is a Sri Lanka-based travel company providing tailor-made travel services, tour planning, transport arrangements and related services.

If you have any questions about this Privacy Notice or your personal data, you can contact us at:

2. What Data We Collect

We may collect the following types of personal data:

a) Information You Provide Directly

• Full name, Email address, Phone number / WhatsApp number
• Country of residence
• Travel preferences, plans, and budget range
• Number of travellers
• Special requests (dietary, medical, accessibility)

b) Booking Information

• Passport details (if required for bookings)
• Travel dates and itinerary details
• Accommodation preferences
• Payment-related information (processed securely via third parties)

c) Automatically Collected Data

When you use our website, we may collect:

• IP address, device type, browser, operating system
• Pages visited and time spent
• Click behavior (packages viewed, filters used, etc.)
• Referral source (how you found our site)

3. Legal Basis for Processing (EU/UK Users)

If you are located in the EU or UK, we process your data under one or more of the following legal bases to comply with GDPR laws:

• Contract - to provide travel services you requested.
• Consent - for cookies, tracking or marketing (where required).
• Legitimate interest - to improve services and operate our business securely.
• Legal obligation - where required by local or international law.

4. How We Share Your Data

To deliver your luxury travel experience, we may share relevant information strictly with:

• Hotels, villas and accommodation providers
• Drivers, guides and transport providers
• Tour operators and activity providers
• Payment processors and IT service providers

We only share necessary data required to deliver the service. We do not sell your personal data to third parties.

5. Your Privacy Rights

Depending on your location, you may have the right to:

• Access your personal data and request a copy.
• Request correction of inaccurate data.
• Request deletion of your data (Right to be Forgotten).
• Object to or restrict processing.
• Withdraw consent (where applicable) at any time.

To exercise any of these rights, contact us using the details provided above. We will respond within a reasonable timeframe.