Ceylonova Global Tours (“we”, “us”, or “our”) operates ceylonovatours.com and provides tour services in Sri Lanka. This policy explains how we handle personal data when you visit our website, contact us, or book a tour.

We may collect the following types of information:

• Contact details — name, email, phone number, and address when you submit forms or bookings.
• Booking information — travel dates, group size, package preferences, and special requests.
• Communications — messages sent via email, WhatsApp, or our contact forms.

We use your information to:

• Process and confirm tour bookings
• Communicate about your itinerary, payments, and support
• Respond to enquiries and feedback
• Improve our website and services
• Comply with legal obligations

We do not sell your personal data to third parties.

We process your data based on: (a) performance of a contract when you book a tour; (b) your consent when you submit forms or subscribe to communications; (c) our legitimate interests in operating and improving our business; and (d) compliance with legal requirements.

We may share data with:

• Hotels, transport providers, and activity operators needed to fulfil your booking
• Payment processors to handle transactions securely
• Service providers who assist with email, hosting, or analytics
• Authorities when required by law

All partners are required to handle data appropriately and only for agreed purposes.

We retain booking and contact records for as long as needed to provide services, resolve disputes, and meet legal requirements — typically up to seven years for financial records. Marketing data is kept until you unsubscribe or request deletion.

Our website uses essential cookies for functionality and may use analytics cookies to understand how visitors use the site. You can control cookies through your browser settings. Disabling cookies may affect some website features.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal obligations)
• Object to or restrict certain processing
• Withdraw consent where processing is consent-based

To exercise these rights, email hello@ceylonovatours.com. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your data, including secure connections (HTTPS) and access controls. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

Your data may be processed in Sri Lanka and other countries where our service providers operate. We ensure appropriate safeguards are in place when data is transferred internationally.

Our services are not directed at children under 16. We do not knowingly collect data from children. If you believe we have collected a child's data, please contact us to have it removed.

We may update this policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Continued use of our services after changes constitutes acceptance of the revised policy.

For privacy-related questions or requests, contact us at hello@ceylonovatours.com or write to: Ceylonova Global Tours, 91/E 16th Lane, Isurupura, Malabe, Sri Lanka.