Privacy Policy

1. Information We Collect

Depending on how you interact with us, we may collect the following information:

Information you provide

When you contact us or submit a travel inquiry, you may provide:

• Name and email address.
• Telephone number or preferred contact method.
• Travel dates and trip duration.
• Number of travellers and relevant age ranges.
• Destinations, interests, accommodation preferences, and requested activities.
• Budget range and other trip-planning preferences.
• Any additional information you voluntarily include in your message.

Please avoid submitting passport details, payment-card information, medical records, or other sensitive information through a general website inquiry form unless we specifically request it through an appropriate channel.

Information collected automatically

When you visit our website, certain technical information may be processed by our hosting or security providers, such as your IP address, browser type, device information, requested pages, and security-related logs.

The actual information collected depends on the website configuration and the services enabled. We do not claim to use analytics, advertising trackers, or non-essential cookies unless those technologies are actually implemented.

2. How We Use Your Information

We may use your information to:

• Respond to questions and travel inquiries.
• Understand your travel preferences and prepare personalised itineraries.
• Request availability and pricing from relevant travel suppliers.
• Prepare quotations and explain proposed travel arrangements.
• Communicate about a proposed or confirmed booking.
• Coordinate accommodation, transport, guides, activities, and other requested services.
• Provide travel-related assistance and respond to complaints.
• Protect the website, prevent spam, and investigate security incidents.
• Meet applicable legal, accounting, and regulatory obligations.

We will not use your inquiry details for unrelated marketing purposes without an appropriate lawful basis or consent where required.

If you subscribe to our newsletter, we use your email address only to send it, on the basis of your consent. We keep the address until you unsubscribe, which you can do at any time by writing to us.

3. Legal Basis for Processing

Where applicable, we process personal information on one or more of the following grounds:

• Your consent.
• Steps taken at your request before entering into a contract.
• Performance of a contract or provision of requested services.
• Compliance with legal obligations.
• Legitimate interests, where permitted by law and balanced against your rights.

The applicable basis depends on the purpose and circumstances of the processing.

4. Sharing Your Information

We may share relevant information with:

• Hotels, resorts, villas, and other accommodation providers.
• Transport operators, drivers, guides, and tour providers.
• Activity, excursion, and experience providers.
• Overseas travel agencies involved in arranging your trip.
• Website hosting, email, security, and other technical service providers.
• Government authorities or other parties where disclosure is required or permitted by law.

We aim to share only the information reasonably necessary for the relevant purpose. For example, a hotel may need the names and room requirements of travellers, while a transport provider may need pickup details.

Third-party suppliers may process information under their own privacy policies and legal obligations.

5. International Transfers

Planning and providing travel services may require information to be shared with organisations in Sri Lanka or other countries.

Where personal information is transferred internationally, we will take the steps required by applicable data protection law. The safeguards required may depend on the destination country, recipient, and nature of the information.

6. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including handling inquiries, managing bookings, resolving disputes, and meeting legal obligations.

Retention periods may differ between unconverted inquiries, confirmed bookings, financial records, and security logs.

Our final retention periods will be established according to actual business operations and applicable legal requirements. Information that is no longer needed will be securely deleted or anonymised where appropriate.

7. Cookies and Similar Technologies

Our website may use essential technologies required for security, navigation, language preferences, or website functionality.

If we introduce analytics, advertising, embedded third-party media, or other non-essential tracking technologies, we will update this policy and implement any consent mechanisms required by applicable law.

You may also manage cookies through your browser settings. Disabling certain cookies may affect website functionality.

8. Information Security

We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, alteration, disclosure, or destruction.

No website, transmission method, or storage system can be guaranteed to be completely secure. We will handle security incidents in accordance with applicable legal requirements.

9. Your Privacy Rights

Depending on the laws that apply to you, you may have rights to:

• Request access to your personal information.
• Request correction of inaccurate or incomplete information.
• Request deletion or restriction of processing in applicable circumstances.
• Withdraw consent where processing relies on consent.
• Object to certain processing activities.
• Request information about how your data is handled.
• Lodge a complaint with the relevant data protection authority.

To exercise a right, contact us using the details below. We may need to verify your identity before responding. Some requests may be subject to legal exceptions.

10. Children's Privacy

Our website is intended for people planning travel and is not designed to collect personal information directly from children. A parent or responsible adult should provide information about children as needed for travel arrangements.

11. Third-Party Websites

Our website may link to external websites or services. We do not control their privacy practices and encourage you to review their policies before providing personal information.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our services, technology, or legal obligations. The revised version will be published on this page with an updated revision date.

13. Contact Us

For privacy questions or requests, contact:

• Thambili Tours
• Email: thambilitours@gmail.com
• Address: Galle, Sri Lanka
• Website: https://thambilitours.com