Privacy Policy
Home » Privacy Policy
Last updated: 10 November 2026
Wander Ceylon designs tailor-made journeys across Sri Lanka and the Maldives. To plan your trip we need some information about you. This policy explains what we collect, why we collect it, who we share it with, and the choices you have.
1. Who we are
This website, wanderceylon.lk, is operated by Wander Ceylon (“Wander Ceylon”, “we”, “us”), a travel company based in Sri Lanka.
We decide how and why your personal information is used, which makes us the controller of that information.
- Address: Angampitiya Road, Ethul Kotte, Colombo, Sri Lanka 10100
- Email: hello@wanderceylon.lk
- Phone: +94 71 540 0337 or +94 11 288 3723
2. Information we collect
We only collect what we need to answer your enquiry and arrange your journey.
| When | What we collect |
|---|---|
| You send our enquiry form | Name, phone number, email address, referral code if you have one, subject and your message |
| You email, call or message us on WhatsApp | Your contact details and whatever you choose to tell us |
| You book a journey with us | Names of all travellers, nationality, passport details where a supplier or authority requires them, travel dates, flight details, room and transport preferences, and special occasions |
| You tell us about particular needs | Dietary requirements, allergies, mobility or medical needs, and similar details that affect your trip |
| You pay for a journey | Billing name and address, and a record of the payment. We do not collect or store card numbers on this website. |
| You browse our website | IP address, browser and device type, pages viewed, referring site, approximate location, and your language choice |
| You travel with us | Feedback, reviews and, with your permission, photographs |
If you give us information about other people in your travel party, please make sure they are happy for you to share it.
3. How we use your information
We use your information to plan and deliver your trip, and to run our business properly.
| Purpose | Why we are allowed to do it |
|---|---|
| Reply to your enquiry and prepare an itinerary and quote | Steps you ask us to take before a contract |
| Book hotels, transport, guides, activities and flights for you | To carry out our contract with you |
| Send booking confirmations, travel documents and service messages | To carry out our contract with you |
| Look after your health, safety and comfort during the trip | Your consent, or to protect your vital interests in an emergency |
| Keep accounts, tax and booking records | Legal obligation |
| Understand how our website is used and improve it | Our legitimate interest, or your consent where cookies are involved |
| Send travel ideas and offers by email | Your consent. You can unsubscribe at any time |
| Prevent fraud and protect our website | Our legitimate interest |
We do not sell your personal information. We do not make decisions about you by automated means alone.
4. Sensitive information
Some details you share, such as medical conditions, allergies or mobility needs, are sensitive. We ask for them only when they are needed to arrange your trip safely.
We use them with your consent and pass them only to the suppliers who need them, such as a hotel kitchen or a guide. You can withdraw consent at any time, although this may limit what we can arrange for you.
5. Who we share your information with
We share your information only where it is needed to deliver your journey or run our business.
- Travel suppliers. Hotels, villas and resorts, chauffeur-guides and transport providers, activity and safari operators, airlines, and our partners in the Maldives.
- Service providers. Companies that host our website, provide our email, process payments, and supply analytics.
- Professional advisers. Our accountants, auditors, insurers and lawyers, where necessary.
- Authorities. Government, immigration, tax or law enforcement bodies, where the law requires it.
- A new owner. If the business is sold or merged, your information may pass to the new owner under the same protections.
Each supplier receives only the details it needs for its part of your trip.
6. International transfers
We are based in Sri Lanka, so your information is processed here. Some of our service providers and travel suppliers are in other countries, including the Maldives, the United States and countries in the European Union.
Data protection laws in these countries may differ from those where you live. Where we transfer information abroad, we take reasonable steps to make sure it is protected, including contractual safeguards where the law requires them.
7. Cookies and similar technologies
Our website uses cookies, which are small files stored on your device.
| Type | What it does |
|---|---|
| Essential | Keeps the site working and remembers your language choice (English, Chinese, Russian or Italian) |
| Analytics | Google Analytics tells us how visitors find and use the site, in aggregate |
| Third-party content | The Google Map on our Contact page and fonts loaded from Google may share your IP address with Google |
Where the law requires it, we ask for your consent before setting non-essential cookies. You can change your choice at any time through your browser settings. Blocking essential cookies may stop parts of the site from working.
When you contact us on WhatsApp, or follow us on Facebook or Instagram, those platforms handle your information under their own privacy policies.
8. How long we keep your information
We keep information only for as long as we need it for the purposes in this policy.
| Information | How long we keep it |
|---|---|
| Enquiries that do not become a booking | 24 months after our last contact |
| Booking and travel records | 7 years after your trip, for accounting, tax and legal reasons |
| Passport and health details | Deleted within 90 days of the end of your trip, unless the law requires longer |
| Marketing contact details | Until you unsubscribe or ask us to stop |
| Website analytics data | 14 months |
After these periods we delete the information or make it anonymous.
9. How we protect your information
We use technical and organisational measures to protect your information. These include an encrypted website connection (HTTPS), restricted staff access, password-protected systems, and sharing with suppliers only what they need.
No method of sending or storing information is completely secure. If a breach is likely to affect you seriously, we will tell you and the relevant authority as the law requires.
10. Your rights
You have rights over your personal information. Depending on where you live, these may include the right to:
- ask for a copy of the information we hold about you
- ask us to correct information that is wrong or incomplete
- ask us to delete your information
- object to, or ask us to restrict, how we use it
- withdraw consent you have given, at any time
- receive your information in a portable format
- stop marketing messages at any time
These rights come from laws such as Sri Lanka’s Personal Data Protection Act, No. 9 of 2022, and, for visitors in the European Union or United Kingdom, the GDPR and UK GDPR.
To use any of these rights, email hello@wanderceylon.lk. We may ask you to confirm your identity. We aim to reply within 21 working days.
If you are unhappy with how we have handled your information, please contact us first. You also have the right to complain to the Data Protection Authority of Sri Lanka, or to the data protection authority in your own country.
11. Children
Our website and services are meant for adults. We do not knowingly collect information from anyone under 18 directly.
We do collect details of children travelling with a parent or guardian, supplied by that adult, so that we can arrange the trip.
12. Links to other websites
Our website links to other sites, including hotels, social media and maps. We are not responsible for how those sites use your information. Please read their privacy policies.
13. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. If a change is significant, we will highlight it on our website or tell you by email.
14. Contact us
For any question about this policy or your personal information, contact us:
- Email: hello@wanderceylon.lk
- Phone: +94 71 540 0337
- Post: Wander Ceylon, Angampitiya Road, Ethul Kotte, Colombo, Sri Lanka 10100
