Protecting Your Privacy on Every Journey
This Privacy Policy for We Stay Ceylon ("Company," "we," "us," or "our"), describes how and why we collect, store, use, and safeguard ("process") your personal data when you visit our website at westayceylon.com (the "Site"), request custom holiday quotes, book travel packages, reserve boutique villas and hotels, arrange private chauffeur-driven transport, or participate in guided experiences across Sri Lanka (collectively, the "Services").
We respect your personal privacy and are committed to safeguarding the confidentiality of our international and local travelers. By accessing our Services or submitting personal information, you acknowledge the terms set out in this notice.
Key Takeaways from This Policy:
- We only collect personal information required to plan, arrange, and manage your Sri Lanka travel bookings and fulfill statutory tourism requirements.
- We strictly do not sell or rent your personal data to third-party advertisers.
- We share necessary booking details solely with vetted travel partners (partnered hotels, licensed chauffeur-guides, national parks) to deliver your itinerary.
- You maintain full rights to access, amend, or request deletion of your personal records at any time.
What Information Do We Collect?
We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about our holiday packages, customize an itinerary, submit an inquiry form, correspond via WhatsApp or email, or book a journey with We Stay Ceylon.
A. Personal Information You Disclose to Us
- Contact & Identification Details: Full name, email address, phone/WhatsApp number, country of residence, and nationality.
- Passport & Visa Documentation: Passport number, expiry date, date of birth, and nationality, when required by Sri Lankan immigration, hotel registrations, domestic flight charters, or national wildlife park entry permits (e.g., Yala, Wilpattu).
- Travel Itinerary & Booking Preferences: Arrival and departure flight details, dates of travel, party size, rooming requirements, dietary restrictions, mobility requirements, and special celebration notes (e.g., honeymoon, anniversary).
- Emergency Contact Information: Names and contact numbers of designated individuals in your home country to contact in case of an unforeseen medical or travel emergency during your trip in Sri Lanka.
- Payment & Billing Data: Transaction references, invoicing address, and payment confirmation details. All online credit/debit card transactions are processed through secure, PCI-DSS compliant third-party payment gateways; We Stay Ceylon does not store raw credit card numbers or CVV codes on our servers.
B. Information Automatically Collected
When you browse our website, certain technical information is automatically collected through server logs and analytics cookies, including your Internet Protocol (IP) address, browser type, device characteristics, operating system, referring URLs, pages viewed, and timestamps. This information is used solely to optimize website performance, security, and user experience.
How Do We Process Your Information?
We process your personal information for legitimate business purposes connected with curating and delivering premier travel experiences across Sri Lanka, including:
Itinerary Execution & Bookings
Confirming hotel and villa reservations, securing train or domestic flight seats, booking licensed chauffeur-guides, and reserving safari jeeps or heritage excursions.
Customer Support & Communication
Sending booking vouchers, quotation updates, travel advice, pre-arrival briefings, and providing 24/7 on-ground assistance during your tour.
Regulatory & Safety Compliance
Meeting requirements mandated by the Sri Lanka Tourism Development Authority (SLTDA), Department of Wildlife Conservation, and local hotel registry laws.
Service Improvement & Marketing
Analyzing visitor trends to curate new itineraries, soliciting feedback post-trip, and sending opt-in newsletters regarding Sri Lanka seasonal highlights.
When & With Whom Do We Share Personal Data?
We do not sell, rent, or lease your personal information to any third parties for advertising or independent marketing purposes. We share your information solely with trusted service providers strictly necessary to execute your travel arrangements:
- Partnered Hotels, Resorts & Boutique Villas: Guest names, arrival dates, room preferences, and passport info where required for check-in compliance.
- Licensed Chauffeur-Guides & Transport Partners: Lead traveler names, contact telephone numbers, and pickup/drop-off schedules to coordinate smooth airport pickups and intercity transfers.
- Excursion, Safari & Activity Operators: Relevant participant information provided to safari jeep drivers, scuba dive masters, or trek guides for permits, safety waivers, and ticketing.
- Payment Gateways & Banking Institutions: Encrypted transaction details necessary to securely authorize and verify payments.
- Legal & Emergency Authorities: If required by law, subpoena, or in urgent medical situations where disclosure is vital to safeguard a traveler's physical safety.
Do We Use Cookies & Tracking Technologies?
Yes, we use cookies, web beacons, and similar tracking technologies (such as Google Tag Manager / Google Analytics) to enhance your browsing experience, remember your preferences, and assess how visitors engage with our travel guides and package itineraries.
You can instruct your browser to decline cookies or alert you when a cookie is being sent. If you disable cookies, please note that some interactive features of our website may have limited functionality.
How Do We Keep Your Information Safe?
We have implemented comprehensive technical, organizational, and physical security measures designed to protect your personal data from unauthorized access, loss, misuse, or alteration. These safeguards include:
SSL/TLS Encryption
All data transmitted through our website is encrypted via modern HTTPS protocols.
Strict Access Controls
Access to customer records is restricted strictly to authorized operations staff.
Secure Infrastructure
Enterprise cloud hosting with routine vulnerability checks and firewalls.
How Long Do We Retain Your Information?
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including completing your tour in Sri Lanka, complying with statutory taxation and accounting obligations, resolving disputes, and enforcing our agreements.
When we no longer have a legitimate business or legal requirement to retain your personal data, we will securely delete, anonymize, or isolate the records.
International Data Transfers
We Stay Ceylon is headquartered in Colombo, Sri Lanka. If you are accessing our Services from outside Sri Lanka (such as the United Kingdom, European Union, United States, Canada, Australia, or elsewhere), please be aware that your personal information will be transferred to, stored, and processed in Sri Lanka and on secure cloud servers located globally.
We take all necessary steps to ensure that your data receives an adequate level of protection consistent with international data privacy standards and applicable regulations.
Do We Collect Information From Minors?
We do not knowingly solicit data from or market to children under 18 years of age without verifiable parental or guardian consent. When families book vacation packages with minor children, the parent or legal guardian provides the necessary details (e.g., names, ages for bed configurations or child safari tickets) on their behalf.
If you become aware of any data we have collected from children under age 18 without parental consent, please contact us at hello@westayceylon.com.
What Are Your Privacy Rights?
Depending on your country or state of residence (including the European Economic Area, United Kingdom, and California), you may hold specific statutory rights regarding your personal data:
- Right to Access: Request a copy of the personal information we hold about you.
- Right to Rectification: Request correction of inaccurate, incomplete, or outdated details.
- Right to Erasure: Request that we delete your personal information, subject to mandatory legal and accounting retention periods.
- Right to Restrict or Object: Object to or request restriction of certain processing activities, including marketing communications.
- Right to Withdraw Consent: Withdraw your consent at any time where processing was based on consent.
To exercise any of these rights, please email us directly at hello@westayceylon.com. We will respond within 30 days.
Controls for Do-Not-Track Features
Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. Because no uniform technological standard for recognizing and implementing DNT signals has been finalized, our Site currently does not alter its data collection practices upon receiving DNT signals.
Third-Party Websites and External Links
Our website and itineraries may contain links to external third-party websites (such as international airlines, Sri Lanka ETA official visa portal, travel insurance providers, or TripAdvisor). We are not responsible for the privacy practices, content, or data protection policies of third-party websites. We encourage you to review their respective privacy notices before providing any personal data.
Updates to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our operational practices, travel products, or applicable legal and regulatory requirements. The revised version will be indicated by an updated "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we safeguard your data.
How Can You Contact Us About This Policy?
If you have questions, comments, or concerns regarding this Privacy Policy or our data handling practices, please contact us through any of the following channels:
We Stay Ceylon (Pvt) Ltd
How Can You Review, Update, or Delete Data?
Based on the applicable laws of your country or jurisdiction, you have the right to request access to the personal information we collect from you, change that information, or delete it in certain circumstances.
To request a review, update, or deletion of your personal data records, please submit a request by contacting us at hello@westayceylon.com. We will review and act upon your request in accordance with applicable data protection laws.