Privacy policy

Creative Search Technologies (Private) Limited, a company registered in Sri Lanka and operating under VAT No. PV60752 [hereinafter referred to as “BookLanka” / “We” / “Us” / “Our”], owns and operates the website “BookLanka.com” [the Website] as an Online Travel Agent (OTA).

BookLanka.com is operated for the purpose of assisting users who access the Website [“Users” / “You”] in searching, finding, and booking travel-related services including adventure activities, safaris, tours, excursions, cultural experiences, accommodation, transport, transfers, wellness experiences, and other travel-related services [collectively, “Products”], as well as pre-packaged or customizable itineraries [collectively, “Packages”] within Sri Lanka [the Service], and for no other purpose.

BookLanka provides the Service in collaboration with independent local operators and third-party suppliers who are individually responsible for delivering the respective Products and Packages. Users may access and use the Website in agreement with this Privacy Policy and the general Terms and Conditions of the Website.

1.0 Privacy Policy

We are committed to protecting and respecting your privacy. This Privacy Policy outlines how we collect, use, store, retain, disclose, and protect your personal data.

This Privacy Policy describes the various forms of data processing carried out by BookLanka in relation to your use of the Website. By continuing to use the Website, you agree to the terms of this Privacy Policy.

2.0 Updates to the Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time without prior notice. By continuing to use the Website after such updates, you accept the revised Privacy Policy.

If any update results in a material reduction of your rights, we will endeavor to inform you proactively via email or other appropriate communication channels.

3.0 Data Collection

BookLanka processes personal data in accordance with applicable data protection laws of Sri Lanka and, where applicable, internationally accepted data protection principles including the General Data Protection Regulation (GDPR) for users located in the European Union.

We collect both traffic data and personal data.

The only mandatory personal data we request is the information necessary to provide the Service and complete bookings. Any additional data you choose to provide is optional and clearly indicated as such.

We collect personal data only when you voluntarily provide it on the Website. We do not obtain personal data about you from third-party sources without your consent.

3.1 What Data Is Collected?

Traffic Data
Traffic data consists of anonymous information such as pages visited, time spent on pages, browser type, and device information. This data is collected automatically for analytical and statistical purposes and cannot be used to identify you personally.

Personal Data
Personal data may include your full name, address, email address, telephone number, age, gender, nationality, booking details, and payment-related information necessary to process bookings.

Traffic data is anonymous and is not linked to your personal data.

4.0 Purpose of Collecting Personal Data

The primary purpose of collecting personal data is to enable BookLanka to deliver the Service to you.

We commit to making legitimate use of your personal data and will never sell, rent, lease, or commercially exploit your personal data.

With your consent, we may use your personal data for communication and marketing purposes, including newsletters, booking updates, and promotional content. You may opt out of such communications at any time by following the unsubscribe instructions provided in our communications.

We may disclose personal data if required to comply with legal obligations imposed by Sri Lankan authorities or applicable international regulations.

5.0 Storage and Retention of Personal Data

BookLanka takes appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration.

Personal data is stored securely using industry-standard security measures and trusted cloud infrastructure.

You have the right to:

  • Request access to your personal data

  • Request correction of inaccurate data

  • Request deletion of your personal data

Requests may be made by contacting us at help@booklanka.com.

If you do not create a user account, your personal data will be retained only as long as necessary to fulfill the booked Products and legal obligations.

If you create a user account, we will retain the minimum data required to maintain the account until it is deleted by you or terminated by us. You may request account deletion at any time.

6.0 Disclosure of Personal Data

We do not disclose your personal data except as necessary to deliver the Service.

By making a booking, you consent to BookLanka sharing your personal data with:

  • Local suppliers and service providers

  • Payment processors

  • Technology and operational partners

These third parties are independent entities responsible for their own data protection practices. BookLanka is not responsible for the privacy practices of such third parties.

We may also disclose personal data to our employees, officers, professional advisors, and contractors strictly on a need-to-know basis to operate the Service.

Personal data may also be disclosed if required by law or governmental authorities.

7.0 Login via Third-Party Services

If you choose to log in or register using third-party services (such as social media platforms), we may receive certain profile information including your name, email address, and country of residence, subject to your privacy settings on those platforms.

By using such login methods, you consent to the collection and use of this information in accordance with this Privacy Policy.

8.0 Governing Law

This Privacy Policy and any disputes arising from it shall be governed by and interpreted in accordance with the laws of Sri Lanka.

Thank you for trusting BookLanka.com
Your team at BookLanka.com