At Ceylon Escape Holidays, your privacy matters deeply to us. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding that information. We are committed to handling your data responsibly and in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR), where applicable.
To provide our services and ensure a seamless travel experience, we may collect the following types of personal information:
We collect your personal data through a variety of channels, including:
Where we use cookies, we will always provide you with the option to manage your preferences via our cookie consent banner. Please refer to our Cookie Policy for further details.
Under the GDPR and applicable data protection law, we are required to identify a lawful basis for processing your personal data. We rely on the following bases:
| Lawful Basis | When We Use It |
| Contractual necessity | Processing your booking and delivering your travel services |
| Legal obligation | Complying with financial, tax or regulatory requirements |
| Legitimate interests | Improving our services, fraud prevention and security |
| Consent | Marketing communications and non-essential cookies |
Where we rely on your consent (e.g., for marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
The security of your personal information is a top priority. Your data is stored in secure, encrypted systems with access restricted to authorised personnel only. We apply industry-standard technical and organisational security measures to protect your information against unauthorised access, accidental loss or misuse.
Retention: We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. In general, booking records are retained for seven years in accordance with Sri Lankan financial regulations. Marketing data is retained until you withdraw your consent.
We respect your information and will never sell your personal data to third parties. We may, however, share relevant details with trusted partners and service providers where necessary to deliver your travel experience, including:
International Transfers: Where data is transferred to service providers outside the EU/EEA or Sri Lanka, we ensure that appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions, in line with applicable data protection law.
All third parties with whom we share your data are required to handle it responsibly and in accordance with applicable data protection standards.
You have a number of rights in relation to the personal data we hold about you, including the right to:
To exercise any of these rights, please contact us by email at info@ceylonescapeholidays.com or via the dedicated request form on our website. We will acknowledge all requests within 5 working days and aim to respond fully within 30 days. Where a request is complex or numerous, we may extend this period by up to two further months and will notify you accordingly.
Right to Complain: If you are located in the EU/EEA and believe we have not handled your data in accordance with the GDPR, you have the right to lodge a complaint with your local supervisory authority.
Our website uses cookies and analytics tools to improve your browsing experience and help us understand how our site is being used. These may include:
You can manage your cookie preferences at any time through your browser settings or via our cookie consent banner when you first visit the site. For full details, please visit our Cookie Policy at www.ceylonescapeholidays.com/cookie-policy.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable legislation. Any updates will be posted on our website with the effective date. We encourage you to review this page periodically. Where changes are material, we will make reasonable efforts to notify you directly.
If you have any questions about these terms or how we handle your data, we’d love to hear from you.