Effective Date: 29 March 2025

1. Introduction

Walk Lanka Holidays (“we,” “us,” or “our”), operating via privatedriverlanka.com, is committed to protecting your privacy and ensuring that your personal data is handled responsibly and transparently. This Privacy Policy explains our practices regarding the collection, use, storage, transfer, and disclosure of your personal information. Our policies are designed to comply with applicable Sri Lankan privacy laws, the European Union’s General Data Protection Regulation (GDPR), and other relevant privacy legislation. By using our services, you acknowledge and agree to the collection and use of information as described in this document.

2. Our Commitment to Data Protection

We recognize that privacy is a fundamental right. We are committed to maintaining robust data protection standards to safeguard your information from unauthorized access, loss, or misuse. Our practices are built on a foundation of trust, transparency, and accountability. To achieve this, we have implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including but not limited to, encryption, access controls, and regular system reviews.

3. Scope and Applicability

This policy applies to all personal data that we collect from you when you access or use our services via privatedriverlanka.com, whether directly or indirectly, through our websites, mobile applications, or other online services. It also applies to data obtained from third-party sources where relevant.

4. Data Collection

4.1 Personal Data

When you engage with our services, we may request that you provide us with personal information that can be used to contact or identify you (“Personal Data”). This information may include, but is not limited to:

• Contact Information:

  • Email address

  • First name and last name

  • Phone number

  • Physical address, including state, province, ZIP/postal code, and city

• Travel and Booking Information:

  • Passport details (required for booking and identity verification purposes)

  • Travel preferences and itinerary details

  • Information related to your booking history and interactions with our services

• Special Requirements:

  • Dietary preferences

  • Health information where relevant (to accommodate specific travel needs or requirements)

• Financial Information:

  • Payment details such as credit or debit card information

  • Billing addresses and transaction records

4.2 Usage Data

In addition to Personal Data, we automatically collect information regarding your interactions with our website and services (“Usage Data”). This data helps us understand how you use our services and enables us to improve your experience. Usage Data may include:

• Technical Data:

  • Internet Protocol (IP) address

  • Browser type and version

  • Device identifiers and operating system details

  • Screen resolution and language settings

• Interaction Data:

  • Pages visited and navigation paths

  • Date and time of visits

  • Duration of your sessions

  • Clicks, scrolling, and other behavioral data

• Diagnostic Data:

  • Log files and error reports

  • Performance and usage statistics collected through cookies and similar tracking technologies

5. Use of Analytics Tools

To enhance our service delivery and understand user behavior, we employ several third-party analytics tools. These tools help us gather aggregated and anonymized data, which is used solely for improving user experience and service performance. The primary analytics tools we use include:

5.1 Google Analytics

We use Google Analytics to monitor and analyze how users interact with our website. This tool provides insights into visitor demographics, session duration, pages viewed, and other performance metrics. Google Analytics may use cookies and similar technologies to collect this data, which is processed in an anonymized form to ensure that personal identifiers are not disclosed.

5.2 Hotjar Analytics

Hotjar is utilized to capture user behavior on our website through heatmaps, session recordings, and surveys. These insights allow us to improve our site layout, navigation, and overall usability. Like Google Analytics, Hotjar collects data in aggregate, ensuring that individual users remain anonymous.

5.3 Microsoft Analytics

We also deploy Microsoft Analytics for performance monitoring and diagnostic purposes. This tool aids in identifying technical issues and optimizing our services for better reliability and speed. Data collected via Microsoft Analytics is used exclusively for internal improvements and does not compromise user privacy.

6. Legal Bases for Processing Personal Data

In accordance with GDPR and other privacy regulations, we process your personal data only when we have a legal basis for doing so. These legal bases include:

• Consent:
  By providing your data, you consent to our processing activities as described in this policy. You have the right to withdraw your consent at any time, subject to legal or contractual restrictions.

• Contractual Necessity:
  Processing is necessary for the performance of a contract to which you are a party, such as facilitating your travel bookings and managing reservations.

• Legal Obligations:
  We may process your data to comply with legal obligations, including tax laws, anti-fraud measures, and record-keeping requirements.

• Legitimate Interests:
  In cases where processing is based on our legitimate interests (such as improving our services, marketing, and security), we ensure that such interests are balanced against your rights and freedoms.

7. Data Sharing and Disclosure

We understand that your personal data is sensitive, and we are committed to protecting it. Your data is not sold or rented to third parties. However, there are circumstances where disclosure may be necessary:

7.1 Service Providers

We may share your data with trusted third-party service providers who perform functions on our behalf, such as payment processing, data analytics, marketing, and customer support. These providers are contractually obligated to protect your data and use it only for the purposes specified by us.

7.2 Legal and Regulatory Requirements

We may disclose your data when required by law, regulation, or legal process. This includes situations where disclosure is necessary to:

• Comply with court orders, subpoenas, or government requests

• Protect the rights, property, or safety of Walk Lanka Holidays, our users, or the public

• Investigate and prevent fraudulent activities, security breaches, or other potentially illegal actions

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your data may be transferred as part of the transaction. We will ensure that any such transfer is conducted in compliance with applicable privacy laws and that your data remains protected under a similar privacy policy.

8. Data Retention

We retain your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, to comply with legal obligations, resolve disputes, and enforce our agreements. The retention period may vary depending on the nature of the data and the relevant legal requirements. Once your data is no longer required, we will securely delete or anonymize it.

9. International Data Transfers

Given that our services are accessible globally, your personal data may be transferred to and stored in countries outside your home jurisdiction. These countries may have data protection laws that differ from those in your country. When such transfers occur, we ensure that appropriate safeguards are in place, including standard contractual clauses and other mechanisms approved by relevant authorities, to ensure that your data remains protected.

10. Your Rights as a Data Subject

We are committed to upholding your rights under applicable data protection laws. Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of Access:
  You can request access to the personal data we hold about you, including information on how it is processed.

• Right to Rectification:
  If any of your data is inaccurate or incomplete, you have the right to request its correction or completion.

• Right to Erasure:
  Under certain circumstances, you have the right to request that your personal data be deleted, subject to legal and contractual obligations.

• Right to Restrict Processing:
  You may request that we restrict the processing of your personal data in certain situations.

• Right to Data Portability:
  You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transfer it to another controller.

• Right to Object:
  You may object to the processing of your personal data, particularly where processing is based on our legitimate interests or for direct marketing purposes.

To exercise these rights or if you have any questions regarding your data, please contact our Data Protection Officer using the contact details provided in Section 12 below.

11. Cookies and Tracking Technologies

Our website uses cookies and other tracking technologies to enhance your browsing experience, analyze site usage, and deliver personalized content. Cookies are small data files stored on your device that enable us to remember your preferences and track usage patterns. You have the option to accept or reject cookies through your browser settings; however, please note that disabling cookies may affect the functionality of our website.

12. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the following details:

Walk Lanka Holidays (Pvt) Ltd

• Website: privatedriverlanka.com
• Email: [email protected] / [email protected]
• Phone: +94762475645
• Address: 196/1 A28, Habarana 50150

For data protection inquiries or to exercise your rights as a data subject, please reach out directly to our Data Protection Officer at the email address provided above. We will respond to your inquiry promptly and take all necessary steps to address your concerns.

13. Policy Updates

We periodically review and update this Privacy Policy to reflect changes in our practices, legal requirements, or technological advancements. We encourage you to review this policy regularly to stay informed about how we protect your data. In the event of any significant changes to our privacy practices, we will notify you through our website or via email before the changes become effective.

14. Balancing User Interests and Company Needs

At Walk Lanka Holidays, we believe that data protection is a two-way street. Our commitment extends not only to complying with legal requirements but also to ensuring that your rights and interests are at the forefront of our data practices. We carefully balance our need to collect and process data for legitimate business purposes—including providing superior travel services, personalized experiences, and maintaining the security and performance of our digital platforms—with your right to privacy and control over your personal information.

This balance is maintained by:

• Transparency: We clearly inform you about the data we collect, why we collect it, and how it is used.

• User Control: We provide mechanisms for you to access, correct, or delete your data, as well as options to manage your communication preferences.

• Data Minimization: We limit the data we collect to what is strictly necessary for the purposes outlined in this policy.

• Accountability: We regularly review our data processing activities and update our security measures to protect your personal information.

15. Compliance with International and Local Laws

Walk Lanka Holidays is dedicated to complying with all relevant privacy and data protection laws, including:

• Sri Lankan Privacy Laws: Our practices adhere to the legal requirements and guidelines set forth by regulatory authorities in Sri Lanka.

• GDPR: For users from the European Union, we ensure that your data is processed in accordance with the GDPR. This includes granting you rights over your personal data, such as access, rectification, deletion, and data portability.

• Other Privacy Acts: We continuously monitor and adapt our policies to align with any other applicable international privacy regulations and best practices.

16. Conclusion

Your privacy is of paramount importance to us. Walk Lanka Holidays is dedicated to ensuring that your personal data is managed with the highest standards of security, transparency, and integrity. By using our services at privatedriverlanka.com, you agree to the terms outlined in this Privacy Policy. We thank you for your trust and remain committed to protecting your privacy while delivering exceptional travel services.

Should you have any questions or require further clarification about our privacy practices, please do not hesitate to contact us using the information provided above. We value your feedback and are always striving to improve our processes in line with both regulatory requirements and your expectations.