Privacy Policy

1. Introduction

De Ceylonese ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Information You Provide

When you enquire or book with us, we collect:

• Contact details (name, email address, phone number, postal address)
• Travel preferences and requirements (dates, destinations, interests)
• Passport details (for those included in a booking)
• Dietary requirements, health information, or special needs (where relevant to your trip)
• Payment information (processed securely by our payment provider)

2.2 Information Collected Automatically

When you visit our website, we may collect:

• IP address and browser type
• Pages visited and time spent on our site
• Referring website or source

3. How We Use Your Information

We use your personal information to:

• Process and manage your booking
• Communicate with you about your enquiry or booking
• Share necessary details with our travel partners (hotels, guides, transport providers)
• Send you relevant travel updates and information about your trip
• Improve our services and website experience
• Comply with legal and regulatory obligations

4. Legal Basis for Processing

We process your data based on:

• Contract: Processing necessary to fulfil your booking
• Legitimate Interest: To communicate with you, improve our services, and protect our business
• Legal Obligation: Where required by law
• Consent: Where you have opted in to marketing communications

5. Sharing Your Information

We share your information only where necessary to provide our services:

• Travel Partners: Hotels, guides, transport providers in Sri Lanka who require guest details
• Service Providers: Payment processors, email services, and IT support who help us operate our business
• Legal Requirements: Where required by law, court order, or regulatory authority

We never sell your personal information to third parties for marketing purposes.

6. International Transfers

To provide your holiday, some of your data will be transferred to Sri Lanka and potentially other countries. We ensure appropriate safeguards are in place to protect your data during such transfers.

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, typically:

• Booking records: 7 years (for legal and accounting purposes)
• Enquiry data: 3 years (to respond to follow-up queries)
• Marketing preferences: Until you unsubscribe or withdraw consent

8. Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Ask us to correct inaccurate information
• Erasure: Ask us to delete your data (where legally permitted)
• Restriction: Ask us to limit how we use your data
• Portability: Request your data in a portable format
• Objection: Object to processing based on legitimate interests or for marketing

To exercise any of these rights, please contact us at hello@deceylonese.com.

9. Cookies

Our website uses cookies to enhance your browsing experience. You can control cookies through your browser settings. For more information, see our cookie banner when you first visit our site.

10. Security

We take appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Payment information is processed securely through PCI-compliant payment providers.

11. Children's Privacy

Our services are not directed at children under 16. We collect children's information only as necessary for bookings, with parental/guardian consent.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via our website or directly if you have a booking with us.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

De Ceylonese
Email: hello@deceylonese.com
Phone: +44 7000 000000

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your rights have been infringed: ico.org.uk