Privacy Policy

This Privacy Policy explains how NH Lanka Holidays (“we”, “us”, “our”) collects, uses and protects your personal information when you visit nhlankatours.com, send us an enquiry or book a tour with us. We only collect what we need to plan and run your trip, and we never sell your personal data.

01Who we are

NH Lanka Holidays is a Sri Lankan tour operator based on Main Road, Negombo, Sri Lanka. We are responsible for the personal information you share with us through this website, by email, by phone or on WhatsApp.

• Email: info@nhlankatours.com
• Phone / WhatsApp: +94 74 221 4272
• Address: Main Road, Negombo, Sri Lanka

02Information we collect

Information you give us. When you send an enquiry, contact us on WhatsApp or book a tour, we may collect:

• Your name, email address, phone or WhatsApp number and country of residence
• Travel details such as dates, number of travellers, ages of children, hotel or pickup location and flight details
• Preferences and special requests, for example dietary needs, accessibility requirements or child seats
• Passport details, only where hotels, parks or authorities require them for your booking
• Payment and billing details needed to confirm and pay for your tour

Information collected automatically. When you browse our website, our servers and cookies may record technical information such as your IP address, browser type, device, the pages you visit and the date and time of your visit.

Information from others. If a travel agent, partner or friend makes a booking on your behalf, they may share your details with us so we can arrange your trip.

03How we use your information

• To reply to your enquiries and send you a personalised itinerary and quote
• To book and manage your tour, including hotels, drivers, safaris, train tickets and activities
• To arrange airport, port and hotel pickups and keep in touch before and during your trip
• To process payments, issue invoices and keep accounting records
• To meet our legal, tax and regulatory obligations
• To keep our website secure and improve how it works
• To send you travel news or offers, but only if you have agreed to receive them

04Legal basis for using your data

Where data protection laws such as Sri Lanka’s Personal Data Protection Act No. 9 of 2022 or the EU/UK General Data Protection Regulation (GDPR) apply, we rely on the following grounds: to take steps at your request before a booking and to perform our contract with you; your consent, for example for marketing or non-essential cookies; our legitimate interests in running and improving our business; and compliance with our legal obligations.

05Who we share it with

We share only the information needed to deliver your trip and run our business:

• Travel suppliers such as hotels, transport providers, safari jeep operators, boat and activity providers, and railway or park ticket offices
• Service providers who help us operate, such as our website host, email provider and messaging services like WhatsApp
• Authorities where we are legally required to do so, or to protect the safety of our guests and staff

We do not sell, rent or trade your personal information to anyone.

06International transfers

Because your trip takes place in Sri Lanka and you may be contacting us from abroad, your information may be transferred to and processed in Sri Lanka and in other countries where our service providers operate. We take reasonable steps to make sure your information stays protected wherever it is processed.

07Cookies

Our website uses cookies and similar technologies. Essential cookies keep the site working and remember your cookie choices. With your consent, we may also use cookies that help us understand how visitors use the site. When you first visit, a cookie banner lets you accept or decline non-essential cookies, and you can change your choice at any time from the cookie settings on our site or in your browser.

Some features rely on third-party services, for example the WhatsApp chat button (operated by Meta) and code libraries loaded from content delivery networks. These services may receive technical information such as your IP address when you use them, under their own privacy policies.

08How long we keep it

We keep enquiry details for up to two years if no booking is made, so we can answer follow-up questions. Booking, payment and accounting records are kept for as long as Sri Lankan tax and accounting laws require. After that, we securely delete or anonymise your information.

09How we protect it

Our website uses an encrypted HTTPS connection, and access to your information is limited to the people who need it to plan and run your trip. No method of transmission or storage is completely secure, but we take reasonable technical and organisational measures to protect your data.

10Your rights

Depending on where you live, you may have the right to:

• Ask for a copy of the personal information we hold about you
• Ask us to correct information that is wrong or incomplete
• Ask us to delete your information, where we no longer need it
• Object to or restrict how we use your information
• Withdraw your consent at any time, for example to marketing messages
• Receive your information in a portable format

To use any of these rights, email us at info@nhlankatours.com. We will reply within one month. You also have the right to complain to a data protection authority, such as the Data Protection Authority of Sri Lanka or the authority in your own country.

11Children

Our website is not aimed at children under 16. When families travel with us, a parent or guardian provides the details we need for children in the group.

12Links to other websites

Our website may link to other websites, such as social media or partner sites. We are not responsible for their content or privacy practices, so please read their privacy policies.

13Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.

14Contact us