Introduction
Exotic Ceylonica (a brand of GK Ascentic Pvt Ltd, Sri Lanka — Company Reg. No. PV00305234) respects your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to that data. We are committed to handling your information securely and transparently.
Information we collect
We collect information you provide when you make an enquiry or booking, including name, contact details (email, phone), nationality, passport number (when required for reservations), travel preferences, dietary requirements, medical information you disclose for safety reasons, and payment details (processed via secure payment providers). We may also collect technical data when you visit our website (IP address, device, browser, pages visited).
How we use your data
We use personal data to: process bookings and payments, design and deliver bespoke itineraries, communicate trip details and updates, manage supplier arrangements (hotels, transport, guides), provide customer service, send transactional communications (invoices, confirmations), and comply with legal obligations. With your consent we may send marketing communications; you may opt out at any time.
Legal bases
We process personal data where necessary to perform the booking contract, to comply with legal obligations, for legitimate business interests (improving services, fraud prevention), and where you have given consent (marketing).
Data sharing
To fulfill your travel arrangements, we share necessary information with trusted third parties (hotels, local guides, transport providers). We do not sell personal data. Where we transfer data internationally, we take steps to ensure appropriate safeguards are in place.
Data security
We use administrative, technical, and physical safeguards to protect your data. Payment processing uses secure third-party payment gateways (PCI-compliant providers). No method of transmission is completely secure; we cannot guarantee absolute security.
Data retention
We retain personal data for as long as necessary to fulfill bookings, maintain records required by law, and meet legitimate business needs. If you request deletion, we will remove your data subject to legal and operational constraints.
Your rights
Where applicable, you have the right to access, correct, or request deletion of your personal data, restrict processing, object to processing, or request portability. For EU data subjects, you may lodge a complaint with your local supervisory authority.
Contact
For privacy questions or requests: write an email to hello@exoticlanka.com or WhatsApp +94 74 255 6787. We will respond within a reasonable timeframe.
