Privacy Policy
Effective From August 2026
At Grace Ceylon, we value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and protect your personal data when you enquire about or book our travel services.
By using our website or booking with Grace Ceylon, you agree to the practices described in this Privacy Policy.
1. Information We Collect
To arrange and manage your travel experience, we may collect personal information including:
- Full name, nationality and date of birth
- Residential address
- Email address and telephone number
- Passport and visa information
- Flight arrival and departure details
- Travel dates and itinerary information
- Hotel preferences and room requirements
- Number and details of travellers
- Dietary requirements and accessibility needs
- Emergency contact information
- Payment and billing details
- Communications, enquiries, reviews and feedback
- Website usage information, cookies, IP address and device information
Where necessary, we may collect limited health-related information solely for arranging requested travel services or ensuring your safety during your journey.
2. How We Collect Information
We collect personal information through:
- Website enquiry and booking forms
- Email correspondence
- Telephone and WhatsApp communications
- Social media enquiries
- Online payment systems
- Travel agents and overseas partners
- Booking platforms
- Direct communication with travellers
- Website cookies and analytics tools
3. How We Use Your Information
Your information is used to:
- Process bookings and reservations
- Arrange accommodation, transport and activities
- Communicate regarding your travel plans
- Process payments
- Provide customer support
- Improve our services and website
- Meet legal and regulatory requirements
- Ensure traveller safety where applicable
4. Sharing Your Information
We only share your personal information when necessary to deliver your travel services. This may include:
- Hotels and accommodation providers
- Transport companies and drivers
- Licensed tour guides
- Airlines and ticketing providers
- Safari and activity operators
- Attraction and event providers
- Overseas travel partners
- Banks and payment processors
- IT service providers and booking systems
- Insurance providers (where requested)
- Government or regulatory authorities where legally required
We never sell your personal information to advertisers or unrelated third parties.
5. Data Security
We maintain appropriate administrative, technical and physical safeguards to protect your personal information. Data is stored securely within our booking systems, authorised business records and secure digital platforms.
Access is restricted to authorised personnel only.
6. Data Retention
We retain your information only for as long as necessary to:
- Complete your booking
- Fulfil contractual obligations
- Resolve disputes
- Meet accounting and legal requirements
After this period, information is securely deleted or anonymised where appropriate.
7. Cookies
Our website may use cookies to improve functionality, analyse website performance and enhance your browsing experience.
You may disable cookies through your browser settings; however, certain website features may not function correctly.
8. Your Rights
You may request to:
- Access your personal information
- Correct inaccurate information
- Request deletion of personal information where legally permitted
- Withdraw consent where applicable
Proof of identity may be required before processing requests.
9. Third-Party Websites
Our website may contain links to external websites. Grace Ceylon is not responsible for the privacy practices or content of third-party websites.
10. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with the updated effective date.