Skip to content
Legal

Privacy Policy

How we collect, use, and protect your personal information.

Last updated: June 2026

1. Information We Collect

We collect information you provide directly when booking a trip or creating an account, including your name, email address, phone number, passport details, travel preferences, and payment information. We also collect usage data such as pages visited, browser type, and device information when you use our website.

2. How We Use Your Information

We use your information to:

  • Process and manage your bookings
  • Communicate with you about your trip, including itinerary updates and travel advisories
  • Process payments through our payment partner (PayPal)
  • Send booking confirmations and receipts
  • Improve our services and website experience
  • Comply with legal obligations

We will only send marketing communications if you have opted in. You can unsubscribe at any time.

3. Information Sharing

We share your information only as necessary to deliver your trip experience. This includes sharing relevant details with hotels, transport providers, and activity operators in Sri Lanka. We do not sell your personal information to third parties.

We may also share information with payment processors (PayPal), analytics providers, and law enforcement when required by law.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Payment processing is handled by PayPal and is subject to their security standards and PCI DSS compliance.

5. Cookies & Analytics

We use essential cookies to keep your session active and remember your preferences. We may also use analytics tools (such as Google Analytics and PostHog) to understand how visitors use our website. These tools collect anonymized usage data and do not identify you personally.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, and to comply with our legal and regulatory obligations. Booking records are retained for a minimum of 7 years for accounting and tax purposes.

7. Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your account and personal data (subject to legal retention requirements)
  • Withdraw consent for marketing communications

To exercise any of these rights, contact us at info@helanka.co.

8. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to read their privacy policies before providing any personal information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page. Your continued use of our services after changes are posted constitutes acceptance of the revised policy.

10. Contact

For any privacy-related questions or requests, please contact us at info@helanka.co.

Sri Lanka is waiting

Ready to explore the island?

Let our local specialists design your perfect trip — from hidden beaches to misty highlands. Free consultation, no pressure.