Privacy Policy | Chathu Lanka Tours

Last updated: 19 September 2026

Chathu Lanka Tours respects your privacy. This policy explains how we handle personal information when you visit chathulankatours.com, contact us, or arrange a tour with us.

1. Who we are

Chathu Lanka Tours, based at No. 110/1, Pallegunnepana, Polgolla, Kandy, Sri Lanka, is responsible for the personal information described in this policy (the “data controller”).

For privacy questions or requests, email letstravel@chathulankatours.com.

2. Information we collect

Contact information: your name, email address, and phone number, collected when you voluntarily submit our enquiry form. We do not collect these contact details merely because you browse the website.
Correspondence: any additional information you choose to include in your enquiry form submission.
Photos and testimonials: guest photographs and feedback that you give us permission to publish.
Website usage information: information collected through Google Analytics, which may include pages visited, interactions, referral sources, device and browser information, approximate location, and cookie identifiers.

Please do not send passport copies, payment card details, or sensitive personal information through the enquiry form. Payments are made by bank transfer or in cash; we do not collect payment card details through the website.

3. How and why we use information

To answer enquiries, discuss tour options, and communicate with you about your arrangements.
To arrange and provide services you request.
To retain relevant records, resolve queries or disputes, and meet applicable legal obligations.
To understand website use and improve our website through Google Analytics.
To publish guest photographs and testimonials with permission.

Where EU or UK data protection law applies, we rely on taking steps at your request before entering a contract and performing that contract for enquiries and tour arrangements; our legitimate interests in managing correspondence, keeping appropriate records, and resolving disputes; and legal obligations where applicable. We rely on consent for publishing guest photographs and testimonials, Consent is also required for analytics where applicable; the current website does not provide an option to reject Google Analytics. This policy does not itself obtain that consent.

Providing contact information is voluntary, but without sufficient contact details we may be unable to respond to you or arrange your requested services. We do not send promotional emails or WhatsApp messages, sell your personal information, or share it for other companies’ marketing.

4. Google Analytics and cookies

We use Google Analytics, a service provided by Google, to understand how visitors use our website. It uses cookies and similar technologies to measure website activity. Google processes information collected through this service.

The website currently does not offer a cookie control that allows you to reject Google Analytics. Analytics may collect website usage information even if you do not submit an enquiry form.

You can also manage cookies through your browser settings. Google provides an Analytics opt-out browser add-on for supported browsers. These options do not replace any consent controls required on our website.

5. Access to and disclosure of information

Customer enquiries and contact details are handled by the owner of Chathu Lanka Tours. We do not routinely provide those details to drivers, hotels, or other tour providers.

Enquiry form information is stored in our website database, hosted by LankanHost. LankanHost provides the hosting infrastructure and may process stored information as part of providing its hosting service. Google processes website usage information through Google Analytics. These technical services are separate from the owner’s handling of customer enquiries.

We may disclose information where required by law or where necessary to establish, exercise, or defend legal claims.

6. Where information is processed

Our business operates in Sri Lanka, where we handle your enquiries. When you contact us from another country, your information will be received and processed in Sri Lanka. Our website database is hosted by LankanHost, which advertises US-based servers. Enquiry information may therefore be stored in the United States; the location of our specific hosting account has not yet been confirmed. Google may also process analytics information in other countries.

7. How long we keep information

We retain customer contact and enquiry information in our website database for five years after your last enquiry. This period applies to information submitted through the enquiry form. We do not store booking records in the website database.

Google Analytics user-level and event-level data is retained for 2 months under our Analytics retention setting. This setting does not affect standard aggregated reports. If the reset-on-new-activity setting is enabled, new activity can restart the retention period for a user identifier. This is separate from the five-year retention period for enquiry information.

We publish photographs and testimonials with your permission. You can ask us to stop using them by contacting us. Where a legal obligation or an unresolved legal claim requires particular records to be retained longer, we retain the relevant information for that purpose.

8. Your privacy rights

Depending on the law that applies to you, you may have the right to request access to your personal information, correction of inaccurate information, deletion, restriction of processing, or a portable copy of information. You may also have the right to object to processing based on legitimate interests.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal. For photographs or testimonials, contact us to withdraw permission for future use and request removal from channels we control.

To make a request, email letstravel@chathulankatours.com. We may need to verify your identity and will respond within the period required by applicable law. These rights are subject to applicable conditions and exceptions.

You may complain to the data protection authority where you live or work, or where an alleged infringement occurred. UK visitors can contact the Information Commissioner’s Office. EU visitors can contact their national supervisory authority. Sri Lankan visitors can contact the Data Protection Authority of Sri Lanka.

9. Children

Tour bookings must be made by an adult. Our website is not intended for children to make bookings independently. If you believe a child has provided personal information without appropriate parental or guardian involvement, please contact us.

10. Changes to this policy

We may update this policy to reflect changes in our services, practices, or applicable requirements. The latest version will appear on this page with an updated revision date.