Chris Lanka Holidays is committed to protecting the privacy of everyone who visits our website or uses our services. This Privacy Policy explains what personal information we collect, how we use and protect it, who we may share it with, and the rights you have in relation to your information. This Policy is intended to be consistent with Sri Lanka’s Personal Data Protection Act, No. 9 of 2022 (PDPA), and reflects data protection practices generally expected by international travellers, including those from Australia, the United Kingdom, Canada, and the European Union.
By using our website or providing us with your personal information, you agree to the collection and use of information in accordance with this Policy.
Last updated · August 2026
Used only to plan and deliver your journey
Reasonable safeguards protect guest details
We do not sell or rent personal information
Request access, correction or deletion
Our website may use essential and analytical cookies to operate correctly and understand general site usage. You can manage cookies through your browser settings.
Chris Lanka Holidays respects your privacy. We aim to be clear about the information we need, why we need it and how it helps us deliver attentive, personalised travel services.
Depending on how you interact with us, we may collect the following categories of personal information:
We collect personal information through:
We use the personal information we collect to:
process payments and issue invoices or receipts
We process your personal information on the basis that it is necessary to perform a contract with you, such as arranging your booking, to comply with a legal obligation, on the basis of your consent or because it is in our legitimate business interests to do so, such as improving our services, provided this does not override your fundamental rights and interests.
We take the security of your personal information seriously. Customer information is stored using password-protected systems, encrypted cloud storage, secure email platforms, and CRM software, with access limited to authorised personnel who require it to perform their role. We use secure payment gateways for processing payments and apply regular security updates to the systems we use. While we take reasonable technical and organisational measures to protect your information, no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.
We share personal information with third parties only where necessary to deliver your travel arrangements, or where required by law. This may include:
We share only the information necessary for these third parties to fulfil their part of your booking or to allow us to comply with a legal obligation. We do not sell your personal information to third parties.
As an inbound tour operator based in Sri Lanka serving clients from around the world, your personal information may be transferred to, stored, or processed in Sri Lanka and in other countries where our suppliers, service providers, or cloud storage providers are located. Where we transfer personal information internationally, we take reasonable steps to ensure it is treated securely and in accordance with this Privacy Policy.
Our website uses cookies and similar tracking technologies to improve your browsing experience, understand how visitors use our site, and support our marketing efforts.
You can control or disable cookies through your browser settings at any time; please note that disabling certain cookies may affect the functionality of our website.
Subject to applicable law, including the Sri Lanka Personal Data Protection Act, you have the right to:
To exercise any of these rights, please contact us at info@chrislankaholidays.com. We will normally respond to and process such requests within 30 days.
We retain personal information for as long as necessary to fulfil the purposes described in this Policy, including to provide services you have booked, to comply with our legal, tax, and accounting obligations, and to resolve disputes. Where information is no longer needed for these purposes, we take reasonable steps to securely delete or anonymise it.
Where a booking includes travellers under the age of 18, we collect personal information about those children only as provided to us by a parent, legal guardian, or authorised adult, and solely for the purpose of arranging and delivering the relevant travel services. We do not knowingly collect personal information directly from children through our website.
We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable law. Any updates will be posted on our website with a revised effective date, and we encourage you to review this Policy periodically.
Contact our team at info@chrislanka.com for access, correction, deletion or any question about this policy.
