Last updated: 26 October 2026
Privacy Policy for Lanka Tour Host (Pvt) Ltd
1. Introduction
Lanka Tour Host (Pvt) Ltd (company registration no. PV 00229100) (“we”, “our”, “us”) arranges private tours in Sri Lanka, mostly for visitors from abroad. We are committed to protecting the privacy and security of your personal information. This Privacy Policy explains what we collect, why we collect it, who receives it and what rights you have when you visit our website www.lankatourhost.com (the “Site”), contact us or book a tour.
We follow Sri Lanka’s Personal Data Protection Act No. 9 of 2022. If you live in the UK or the European Union, the UK GDPR or the EU GDPR also gives you rights, which are explained in section 10. We are the “controller” of your personal information, which means we decide how and why it is used.
2. Information We Collect
- Enquiries and bookings: the details you give us through our enquiry forms (built with Contact Form 7), at checkout, or by email, phone or WhatsApp. This can include your name, email address, phone or WhatsApp number, billing details, travel dates, number of travellers and the message you write to us.
- Payment information: when you pay for a booking online by card, the payment is handled by our payment provider. Please do not send card details to us by email or WhatsApp.
- Technical information: your IP address, browser type and device, language preference, referring site, the pages you view, and the date and time of each visit. We collect this automatically through cookies and similar tools (see section 5).
3. How We Use Your Information and Why
We use your information only for the reasons below. In brackets is the legal basis we rely on. Sri Lankan law uses similar grounds: consent, contract, legal duty and legitimate interests.
- To answer your enquiries and send you a quote (to take steps at your request before a booking, and our legitimate interest in replying to you).
- To take and manage your booking, arrange your tour and process your payment (to carry out our contract with you).
- To keep booking and accounting records and meet tax and other legal duties (legal obligation).
- To send you promotional emails and newsletters (your consent, or where the law allows it). You can unsubscribe at any time using the link in our emails.
- To keep the Site secure and working, and to prevent fraud and misuse (our legitimate interests).
- To see how the Site is used, improve it, and measure and run our advertising (your consent where the law requires it, otherwise our legitimate interests; see section 5).
4. Sharing Your Information
We share your information only when we need to:
- With hotels, drivers, guides and other suppliers who help us carry out your tour. They get only the details they need, such as your name and the number of travellers.
- With our payment provider, to process your card payment.
- With the companies whose tools run on our Site (Google, Meta, Mailchimp, GoAffPro and Cloudflare), as described in section 5.
- With website hosting and IT providers who help us run the Site.
- With authorities or other third parties when the law requires it, or to protect our rights.
- With your consent or at your direction.
5. Cookies and Tracking Tools
Cookies are small files saved on your device when you visit a website. Pixels and scripts do a similar job. Our Site uses the tools below. The companies behind them may receive your IP address and information about your browser, your device and the pages you view.
- Shopping cart and booking (WooCommerce): a session cookie keeps your cart and booking steps working, and a cookie called change_currencyds remembers the currency you choose. These are needed to run the Site.
- Google Analytics (through Google Site Kit): counts visits and shows us which pages are used. See Google’s Privacy Policy. Google also offers a browser add-on to opt out of Google Analytics.
- Google AdSense (blog articles): shows ads on our blog articles. Google and its advertising partners may use cookies to show ads based on your visits to this and other websites. See how Google uses information from sites that use its services and Google’s ad settings.
- Meta (Facebook) pixel: added with the PixelYourSite plug-in. It tells Meta which pages you view and what you do on the Site, for example adding a tour to the cart, so that we can measure our ads and show them to people who may be interested. The plug-in also sends page views from our own server to Meta (called the Conversions API). If you are logged in to Meta, it may link this information to your account. See Meta’s Privacy Policy and your ad preferences.
- Mailchimp for WooCommerce: a tracking pixel that records visits and booking activity on the Site for our email marketing with Mailchimp. See Mailchimp’s Privacy Policy.
- GoAffPro (affiliate tracking): records when you arrive through a partner (affiliate) link and whether a booking follows, so that we can credit the partner.
- Cloudflare: protects the Site from attacks and helps it load faster, so your requests pass through Cloudflare, which sees technical data such as your IP address. Cloudflare Web Analytics also counts page views for us. See Cloudflare’s Privacy Policy.
- WhatsApp chat links: when you tap a WhatsApp link on the Site, WhatsApp (owned by Meta) opens and your messages are handled by WhatsApp under its privacy policy. We see your number and your messages so that we can reply.
How long a cookie lasts is set by the company that provides it. Please see their policies for details.
6. Your Cookie Choices
You can block or delete cookies at any time in your browser settings. If you block all cookies, the cart and booking steps may not work properly. Visitors in the European Economic Area, the UK and Switzerland see a consent message from Google on their first visit. Until you agree, the Facebook (Meta) pixel, Google Tag Manager and the affiliate tracking do not start, and Google Analytics and Google ads follow the choice you make in the message. You can change your choice at any time with the “Privacy and cookie settings” link at the bottom of every page. The links in section 5 show how to opt out of Google and Meta advertising.
7. Information Sent Outside Your Country
We are based in Sri Lanka, so the information you send us is handled in Sri Lanka. Google, Meta, Mailchimp, Cloudflare and our payment provider may handle information in other countries, including the United States. If you are in the UK or the EU, we rely on the safeguards these companies describe in their own policies. For the information you send us, we also rely on the fact that we need it to answer your enquiry or carry out your booking.
8. How Long We Keep Your Information
- Booking and payment records: for as long as tax and accounting rules require.
- Enquiries that do not lead to a booking: we delete them after two years.
- Your email address for marketing: until you unsubscribe or ask us to delete it.
- Information held by Google, Meta, Mailchimp, GoAffPro and Cloudflare: kept under their own rules and settings.
9. Security of Your Information
We use appropriate technical and organizational measures to protect the personal information we collect and store. However, please be aware that no method of transmission over the internet or method of electronic storage is completely secure.
10. Your Choices and Rights
Under Sri Lankan law you have the right to access, correct or delete your personal information, to object to its use in certain cases, and to withdraw any consent you gave us. If you are in the UK or the EU, the UK GDPR and EU GDPR give you the same rights, and also the right to ask us to restrict how we use your information and to receive it in a portable format. Withdrawing consent does not affect what we did with your information before you withdrew it.
To use any of these rights, email us at bookmytour@lankatourhost.com. We may ask you to confirm who you are, and we aim to reply within one month. You can use the same address from any other country, such as the USA or Australia.
If you are not happy with how we handle your information, please tell us first so that we can put it right. You also have the right to complain to the data protection authority: in Sri Lanka, the Data Protection Authority of Sri Lanka; in the UK, the Information Commissioner’s Office; in the EU, the data protection authority of your country.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated Privacy Policy on our website and changing the “Last updated” date at the top of this page.
12. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, or if you want to use your rights, please contact us at:
Lanka Tour Host (Pvt) Ltd (Reg No PV 00229100)
119/8, Kakunauyana, Loolwala Road, Madapatha
Piliyandala, Sri Lanka
Email: bookmytour@lankatourhost.com
Phone / WhatsApp: +94 71 524 8524
