Privacy Policy

We collect only what we need to plan and run your trip:

• Enquiries and contact forms: your name, email address, phone number and message.
• Bookings: the lead traveller's name, email and phone number, the names of everyone travelling, your travel date and group size, and any special requests (for example, dietary or accessibility needs).
• Newsletter: your email address, if you choose to subscribe.
• Payments: the payment status, amount and PayHere payment reference. We never receive your card number, expiry date or security code.

We use your details to process bookings, respond to enquiries, send trip-related updates, and - with your consent - share offers and travel inspiration. Every marketing email includes a way to unsubscribe.

Card payments are processed by PayHere, a licensed Sri Lankan payment gateway. You enter your card details on PayHere's secure checkout page, and PayHere handles them under the PCI DSS card-security standard. PayHere then tells us whether your payment succeeded so we can confirm your booking. PayHere's use of your information is covered by its own privacy policy.

Our public website doesn't use advertising, analytics or social-media tracking cookies. The only cookies we set are strictly necessary ones for signing in to our staff-only admin area. Our forms use a hidden spam-prevention field instead of tracking you.

We do not sell or rent your personal data. We share only what's needed with trusted service providers - our payment gateway, website hosting and database providers, and email delivery - and with hotels, drivers and guides only as far as needed to run your tour.

We keep booking and payment records for as long as Sri Lankan tax and accounting law requires. We delete enquiries that don't lead to a booking once they're no longer needed. If you unsubscribe from our newsletter, we stop emailing you straight away.

Our website is served only over encrypted HTTPS connections, and only authorised staff can access booking data. We apply reasonable technical and organisational safeguards against unauthorised access, alteration or loss. No method of transmission over the internet is completely secure, but we work to keep your data safe.

In line with Sri Lanka's Personal Data Protection Act No. 9 of 2022, you can ask us to access, correct or delete your personal data at any time, and unsubscribe from our emails with a single click. We may need to keep some booking records where the law requires it. To exercise any of these rights, contact us using the details below.

Our website isn't aimed at children under 16, and we don't knowingly collect their information online. If children are travelling, the adult making the booking gives us their names.

VRJ Ceylon Tours is based in Sri Lanka, and your information may be processed here or by our service providers in other countries. By using our site, you consent to this transfer and processing.

As our services evolve, this policy may be updated to reflect new features. We'll post any changes on this page with a new "last updated" date.

Questions about this policy? Reach us at vrjceylontours@gmail.com or +94 777 810 814, or write to us at 240 B, Sriyani, Pothuwatawana. 61162