Privacy Policy for Grand Tour Sri Lanka
Effective Date: Dec 04, 2024
At Grand Tour Sri Lanka, we prioritize your privacy and are committed to protecting your personal data. This Privacy Policy outlines the types of data we collect, how we use and protect it, and your rights regarding your information.
1. Information We Collect
We collect and process various types of data to provide our services effectively:
a. Personal Data
Information you provide directly, such as:
- Contact Information: Name, email address, WhatsApp number, and mobile number.
- Booking Details: Tour preferences, travel dates, and any other details you provide to facilitate your booking.
b. Non-Personal Data
Data collected automatically when you interact with our website:
- IP address.
- Browser type and version.
- Device information, such as operating system and screen resolution.
- Usage data, including the pages you visit, the time spent on each page, and clickstream data.
c. Payment Data
When you make a payment, we collect the necessary details for transaction processing through our third-party payment gateway. This includes:
- Cardholder name.
- Transaction ID.
- Payment status.
We do not store your full credit/debit card details. Payment information is processed securely by our payment partner.
2. How We Use Your Information
We use your data for the following purposes:
a. Providing Services
- To process bookings, confirm itineraries, and manage your travel arrangements.
- To communicate important updates about your tours via email, phone, or WhatsApp.
b. Improving User Experience
- To analyze website performance and enhance navigation using tools like Google Analytics.
c. Legal and Administrative
- To comply with legal obligations, such as tax reporting and fraud prevention.
- To handle disputes, complaints, or claims.
d. Marketing Communications
With your consent, we may send newsletters, promotions, and updates about new tours or services. You can opt-out of these communications at any time.
3. Sharing Your Information
We do not sell or rent your personal data to third parties. However, we may share your data with:
a. Service Providers
- Hotels, transport operators, and tour guides involved in your booking.
b. Payment Processors
- Our third-party payment gateway securely processes your payment information.
c. Analytics Providers
- Google Analytics is used to track website traffic and user behavior.
d. Legal Obligations
- If required by law, we may share data with law enforcement or government agencies.
4. Your Rights
If you are an EU resident, you have the following rights under GDPR:
a. Right to Access
Request a copy of the personal data we hold about you.
b. Right to Rectification
Correct any inaccurate or incomplete data.
c. Right to Erasure
Request the deletion of your data unless it is required for legal or administrative purposes.
d. Right to Object
Opt-out of data processing for specific purposes, such as marketing.
e. Right to Data Portability
Receive your data in a structured, machine-readable format.
f. Right to Withdraw Consent
Withdraw your consent to data processing at any time.
5. Data Security
We use the following measures to protect your data:
- SSL Encryption: All data transmitted between your browser and our servers is encrypted.
- Access Controls: Only authorized personnel can access your data.
- Regular Security Audits: We periodically review our systems to prevent vulnerabilities.
6. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy or comply with legal obligations.
7. Contact Information
For any questions or concerns about your privacy, contact us at:
- Email: [email protected]
- Phone:+94 71 282 2297
- Address: GrandTour (Pvt) Ltd, No. 46, Balawinna, Pallebedda, Sri Lanka