Privacy Policy
Vintage Ceylon (“we,” “our,” or “us”) is committed to respecting and protecting the privacy of every visitor, customer, and business partner. Whether you are exploring our website, making an enquiry, booking an experience, or contacting our team, we are committed to handling your personal information responsibly and securely. This Privacy Policy explains the types of information we collect, why we collect it, how it is used, how it is protected, and the choices available to you regarding your personal information. By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy.
Last Updated2026
JurisdictionSri Lanka
01
Introduction
Vintage Ceylon (“we,” “our,” or “us”) is committed to respecting and protecting the privacy of every visitor, customer, and business partner. Whether you are exploring our website, making an enquiry, booking an experience, or contacting our team, we are committed to handling your personal information responsibly and securely.
This Privacy Policy explains the types of information we collect, why we collect it, how it is used, how it is protected, and the choices available to you regarding your personal information.
By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy.
02
Information We Collect
Depending on how you interact with Vintage Ceylon, we may collect the following information.
Personal Information
- Full name
- Email address
- Telephone number
- Country of residence
- Passport (for foreign tourists) or National Identity Card Number
- Air-Ticket Number (for foreign tourists)
- Postal address (where required)
Booking Information
When you make an enquiry or book an experience, we may collect information including:
- Selected experience(s)
- Preferred dates and times
- Number of participants
- Special requests
- Accessibility requirements
- Emergency contact details (where applicable)
Payment Information
Where payments are processed online, payment information is handled through secure third-party payment providers. Vintage Ceylon does not store your complete payment card details on its own systems.
Communications
We may retain records of correspondence when you contact us through:
- Contact forms
- Telephone
- Social media
- Customer support enquiries
Website Usage Information
When you browse our website, we may automatically collect certain technical information, including:
- IP address
- Browser type
- Device information
- Operating system
- Pages visited
- Time spent on pages
- Referral sources
- General location information derived from your IP address
This information helps us improve website performance and user experience.
03
How We Use Your Information
We use your personal information only for legitimate business purposes, which includes:
- Managing bookings and reservations
- Responding to enquiries
- Providing customer support
- Sending booking confirmations and service updates
- Improving our website and visitor experience
- Analysing website performance
- Preventing fraud and protecting our systems
- Complying with legal and regulatory obligations
Where you have provided your consent, we may also use your information to send promotional communications, special offers, or updates about Vintage Ceylon. You may unsubscribe from these communications at any time.
04
Cookies and Website Analytics
Our website may use cookies and similar technologies to improve functionality, personalise user experiences, and understand how visitors interact with our website.
Cookies may be used to:
- Remember user preferences
- Improve website performance
- Analyse visitor behaviour
- Measure marketing effectiveness
- Maintain website security
You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of parts of the website.
We may also use reputable analytics services to understand visitor behaviour and improve our website and services.
05
Sharing Your Information
Vintage Ceylon respects your privacy and does not sell, rent, or trade your personal information to third parties.
However, we may share information where necessary with trusted service providers, including:
- Payment processing providers
- Website hosting providers
- Technology and software service providers
- Marketing service providers (where consent has been provided)
- Government authorities or regulatory bodies where required by law
All third-party service providers are expected to maintain appropriate confidentiality and security standards.
06
International Visitors
Vintage Ceylon welcomes visitors from around the world. Depending on your location, your personal information may be transferred to and processed in Sri Lanka or in other jurisdictions where our trusted service providers operate.
Where applicable, we aim to process personal information in accordance with internationally recognised privacy principles, including transparency, fairness, data minimisation, purpose limitation, and appropriate security measures.
If you are located in a jurisdiction with specific privacy rights, including the European Economic Area (EEA), we will make reasonable efforts to respect those rights in accordance with applicable laws (particularly GDPR).
07
Data Security
Protecting your information is an important priority.
We implement reasonable administrative, technical, and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, misuse, or destruction.
While no online system can guarantee absolute security, we continually review our security practices to help protect the information entrusted to us.
08
Data Retention
We retain personal information only for as long as reasonably necessary to:
- Provide requested services
- Complete bookings
- Meet legal or regulatory obligations
- Resolve disputes
- Maintain appropriate business records
When personal information is no longer required, we take reasonable steps to securely delete, anonymise, or otherwise dispose of the information.
09
Your Privacy Rights
Subject to applicable laws, you may have the right to:
- Request access to your personal information.
- Request correction of inaccurate or incomplete information.
- Request deletion of your personal information where appropriate.
- Withdraw consent for marketing communications.
- Object to certain processing activities.
- Request information about how your personal data is used.
If you wish to exercise any of these rights, please contact us using the details provided at the end of this policy. We will respond to legitimate requests within a reasonable timeframe and in accordance with applicable legal requirements.
10
Third-Party Websites
Our website may contain links to third-party websites, social media platforms, or external services.
Vintage Ceylon is not responsible for the privacy practices or content of external websites. We encourage you to review the privacy policies of any third-party websites before providing personal information.
11
Children’s Privacy
Vintage Ceylon does not knowingly collect personal information from children without appropriate parental or guardian involvement where required by applicable law.
Where bookings involve minors participating in experiences, personal information relating to those bookings should be provided by a parent, legal guardian, or authorised adult.
If we become aware that personal information has been collected from a child inappropriately, we will take reasonable steps to remove such information.
12
Changes to this Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our services, legal requirements, technology, or business practices.
When significant changes are made, the “Last Updated” date at the top of this page will be revised.
We encourage visitors to review this Privacy Policy periodically to remain informed about how their information is managed.
13
Contact Us
If you have any questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact us.
Vintage Ceylon
- Telephone
- +94 721 005 388
We will make every reasonable effort to respond to privacy-related enquiries promptly and professionally.

