Privacy Policy

1. Overview

SerendipTours ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a booking with us.

By using our services, you consent to the data practices described in this policy. If you do not agree, please do not use our website or services.

2. Information We Collect

We collect information you voluntarily provide and information gathered automatically:

3. How We Use Your Information

We use the information we collect for the following purposes:

• To process and manage tour and transfer bookings
• To communicate with you regarding your booking, special requests, or enquiries
• To send confirmation emails and booking reminders
• To improve and personalise our website and service offering
• To send occasional newsletters or promotional offers (only with your consent)
• To comply with legal obligations
• To detect and prevent fraudulent activity

4. Sharing of Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:

• Service Providers: Trusted partners who assist in operating our business (e.g. email providers, analytics tools), bound by confidentiality agreements.
• Operational Partners: Local drivers and guides who need your travel details to deliver your booked service.
• Legal Compliance: When required by law, regulation, or government authority.
• Business Transfer: In the event of a merger or acquisition, your data may be transferred to the new entity under the same protections.

5. Cookies & Tracking

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Types of cookies we use:

• Essential Cookies: Required for the website to function (e.g. session management).
• Analytics Cookies: Help us understand how visitors interact with our site (e.g. Google Analytics).
• Preference Cookies: Remember your settings and preferences for future visits.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of certain parts of our website.

6. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Booking records are typically retained for up to 3 years for accounting and legal compliance purposes. After this period, data is securely deleted or anonymised.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Deletion: Request deletion of your personal data, subject to legal obligations.
• Right to Opt-Out: Unsubscribe from marketing communications at any time.
• Right to Data Portability: Receive your data in a structured, machine-readable format.

8. Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include SSL encryption, access controls, and regular security reviews.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Children's Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will take steps to delete it.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please reach out:

• Email: privacy@serendiptours.lk
• Address: SerendipTours, Colombo, Sri Lanka