Your details,kept with care.

Island Adventures (Pvt) Ltd is a destination management company and special interest tour operator based in Colombo, Sri Lanka. We are the controller of the personal data described in this policy, which means we decide how it is used and we are responsible for looking after it.

This policy covers this website, the enquiry forms on it and the conversations that follow when you contact us, whether you are a traveller planning a journey or a tour operator looking for a partner in Sri Lanka.

We follow the data protection laws that apply to us, including Sri Lanka’s Personal Data Protection Act and, when we deal with travellers and partners in the United Kingdom and the European Union, the UK GDPR and the EU General Data Protection Regulation.

We collect only what you choose to send us. Each form asks for a few details we need in order to reply; everything else is optional.

• Plan Your Trip: your first and last name and email address and, if you wish, a phone or WhatsApp number, your country of residence and the best way to reach you. You can also tell us about the trip itself: travel styles and interests, a journey idea, your dates or month of travel, trip length, the number of adults and children and the children’s ages, fitness level, accommodation style, budget per person and currency, and anything else you would like us to know.
• Contact: your name and email address, an optional phone or WhatsApp number, the topic of your message and the message itself.
• For Tour Operators: your company, its website and country, your name and role, your email address, an optional phone number, the services you are interested in, group sizes and volumes, and your message.
• Every form also asks you to tick a box confirming that we may use your details to reply to you, as this policy describes.
• Newsletter: your email address, if you sign up in the footer of any page, with the date you signed up.

If children are travelling, we ask only for their ages at this stage, not their names.

Please do not put passport numbers, payment details or medical information into a form. If we need any of these to arrange your journey, we will ask for them separately and explain why.

• To reply to your enquiry and answer your questions.
• To design a proposal and, if you go ahead, to arrange and run your journey.
• To discuss working together, if you are a tour operator.
• To send you our newsletter, if you have signed up for it.
• To count how many people visit this website and which pages they read, without identifying anyone (see Cookies and statistics).
• To keep this website and its forms secure and free of spam.
• To keep the records that accounting, tax and other laws require.

We do not sell your details or use them for advertising. We will not add you to a mailing list or send you marketing emails unless you sign up for our newsletter yourself.

If you choose to tell us about a health condition, dietary need or mobility requirement so that we can plan your journey safely, we use that information only for that purpose and share it only with the people who need it to look after you, such as your guide.

Data protection law asks us to have a lawful reason for using personal data. Depending on what you send us, we rely on:

• Steps you ask us to take before a contract: answering a trip enquiry and preparing a proposal, and then carrying out the contract if you book.
• Our legitimate interests: replying to general messages and enquiries from tour operators, running our business and keeping this website secure, always balanced against your rights.
• Your consent: you tick a box to agree before sending any form, you sign up for the newsletter yourself, and we rely on your explicit consent for any health information you share. You can withdraw your consent at any time.
• Legal obligations: keeping the records the law requires.

When you press send, your enquiry travels over an encrypted (HTTPS) connection to Netlify, the company that hosts our website. Netlify keeps it in our website’s form records, which only our team can see, and sends it to our team by email. A copy is also kept in our website’s own database (run by Supabase), which only our team can see, so that we can keep track of our replies.

To keep out spam, each form contains a hidden field that people never see. Automated programs tend to fill it in, and when that happens the submission is discarded and never reaches us. Netlify also screens submissions for spam. These checks do not use cookies and do not track you.

Your enquiry reaches us as an email at our own address. We may also connect the forms to a business tool, such as a customer relationship system, which would then receive a copy of each enquiry in the same way.

If you sign up for our newsletter, we keep your email address, the date you signed up and where on the website you did so, and use them only to send you the newsletter.

Every newsletter has a link to unsubscribe; you can also ask us to take you off the list at any time. After you unsubscribe we keep a note of your address, marked as unsubscribed, so that we do not add it again by mistake, unless you ask us to delete it completely.

Your details are read by our team in Colombo, and shared only where that is needed to help you:

• The service providers who run this website and deliver our email: our website host, Netlify (which also receives and keeps form submissions), Supabase (which stores the website’s content, a copy of each enquiry, newsletter addresses and visit statistics), our email provider and, if we connect one, a customer relationship or workflow tool. They act on our instructions and may not use your data for their own purposes.
• When you travel with us, the hotels, guides, drivers and other local suppliers who provide your arrangements, who receive only what they need, such as the names for a room booking.
• If you booked through a tour operator or travel agent, that company, so that we can work together on your journey.
• Authorities, insurers or professional advisers, where the law requires it or where it is needed to protect your safety or our legal rights.

This website does not set any cookies for visitors, so there is no cookie banner to accept. It does not use advertising or social media tracking, and we do not build profiles of the people who visit it. The only cookie is a sign-in cookie for our own team when they manage the website.

We count visits ourselves, without cookies and without any third-party service. When a page opens, the website records the page, the website that sent you there (if any), your country (worked out from your IP address, which we do not store), the kind of device and the browser. To count how many different people visited, we also store a code made from your IP address and browser that changes every day, so it cannot be used to recognise you from one day to the next or to find out who you are. If your browser asks websites not to track you (Global Privacy Control or Do Not Track), your visits are not counted at all.

Our fonts and photographs are served from our own website, so opening a page does not send your details to font or image services.

Like any website, ours is delivered by a hosting provider whose servers record basic technical information when a page is requested, such as your IP address, browser type and the time of the request. These logs are used to deliver the site and protect it from misuse.

If we add other analytics or any cookies in the future, we will update this policy first and, where the law requires, ask for your consent before setting any cookie that is not strictly necessary.

If you message us on WhatsApp, a service run by Meta under its own terms and privacy policy, we receive your phone number, your WhatsApp profile name and what you send us, and we use them in the same way as an enquiry made through our forms.

Our links to WhatsApp and to other websites take you away from this site. We are not responsible for how those websites handle your data, so please read their privacy policies.

We keep enquiry details only for as long as we need them to reply to you and plan your trip. If you travel with us, we keep booking and payment records for as long as accounting, tax and other laws require.

We keep your newsletter address until you unsubscribe or ask us to delete it, and visit statistics for about thirteen months.

When we no longer need your details, we delete them or make them anonymous.

Our team works in Sri Lanka, so when you contact us from the United Kingdom, the European Economic Area or anywhere else, your details are transferred to Sri Lanka. They may also pass through our service providers in other countries, such as the United States.

We transfer your details because it is necessary to answer your enquiry and to arrange the journey you ask us for. We protect them with the same care wherever they are handled, and we choose providers that offer recognised safeguards for international transfers, such as standard contractual clauses.

Enquiries travel over an encrypted connection and are seen only by the members of our team who need them. No system is perfectly secure, but we take sensible steps to protect your data, and if something goes wrong we will act promptly and tell you where the law requires.

Depending on where you live, you have the right to:

• See the personal data we hold about you.
• Have it corrected if it is wrong or incomplete.
• Have it deleted.
• Restrict or object to how we use it.
• Receive the data you gave us in a portable format.
• Withdraw your consent at any time, without affecting what we did before.

To use any of these rights, contact us as described below. We will reply as quickly as we can and within the time the law allows, and there is normally no charge.

If you are unhappy with how we have handled your data, please tell us first so that we can put it right. You also have the right to complain to a data protection authority: in the United Kingdom, the Information Commissioner’s Office (ICO); in the European Union, the authority in the country where you live or work.

We will update this policy when our website or the way we work changes, for example if we add a new form or another kind of statistics. The “Last updated” date on this page shows when it last changed.

For any question about this policy or your personal data, or to use your rights, please email us at info@islandadventures.lk, or write to us through the form on our Contact page, choosing “Something else” as the topic. A member of our team will reply personally.

Island Adventures (Pvt) Ltd, 01st Floor, Bartleet House, 65 Braybrooke Place, Colombo 02, Sri Lanka. Telephone +94 11 4063640.