Legal
Privacy Policy
Last updated: February 2026
1. Who we are
Lanka Travels (“we”, “us”, “our”) operates the website lankatravels.lk, providing tour and travel services in Sri Lanka. We are the data controller for personal information collected through this website.
Contact us at: info@lankatravels.lk
2. What data we collect
- Contact & enquiry data — name, email, phone number, and message when you submit a contact form or trip request.
- Review data — name, optional email, review text, star rating, and an optional travel photo when you submit a direct review.
- Trip planning data — destinations, activities, and preferences you add to your trip plan (stored locally in your browser).
- Usage data — pages visited, browser type, and referring URL, collected via analytics cookies (only with your consent).
3. Cookies we use
Essential cookies (always active)
Session and authentication cookies required for the website to function. These cannot be disabled.
- Session token — keeps you logged in to the admin portal
- Trip plan storage — your selected items saved in your browser's localStorage
- Cookie consent preference — remembers your choice
Optional cookies (with your consent)
- Google Maps — used on the trip request form for location autocomplete. Google may set its own cookies.
- Analytics — if enabled, helps us understand how visitors use the site.
You can change your cookie preference at any time by clearing your browser's localStorage for this site, which will show the consent banner again on your next visit.
4. How we use your data
- To respond to your enquiries and trip requests
- To send personalised travel plans via WhatsApp or email (only when requested)
- To publish approved reviews on our website
- To improve our services and website experience
We do not sell, rent, or share your personal data with third parties for marketing purposes.
5. Data retention
Enquiry and trip request data is retained for up to 2 years to fulfil our service obligations. Published reviews are retained until you request removal. You may contact us at any time to request deletion of your personal data.
6. Your rights (GDPR)
If you are in the European Economic Area (EEA) you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — request deletion of your personal data
- Restriction — ask us to limit how we process your data
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interests
To exercise any of these rights, email us at info@lankatravels.lk. We will respond within 30 days.
7. Third-party services
- Google Maps Platform — used for location autocomplete. Subject to Google's Privacy Policy.
- WhatsApp — used to send trip plan summaries when you request it. Subject to WhatsApp's Privacy Policy.
8. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.
9. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect any changes. Continued use of our website after changes constitutes acceptance of the updated policy.
10. Contact
Questions about this Privacy Policy or your personal data? Contact us: