Pearl of Ceylon (Pvt) Ltd 

1.  Introduction

Pearl of Ceylon (Pvt) Ltd (“we,” “Our,” “us”) is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in compliance with the General Data Protection Regulation (GDPR), Sri Lanka’s Personal Data Protection Act (PDPA 2022), and other applicable laws when you engage with our tourism services, website, and communications.

2.  Information We Collect

We may collect the following categories of personal data:

3.  Legal Basis for Processing (GDPR & PDPA)

We process personal data under the following lawful bases:

• Consent : When you opt-in for marketing or newsletters.
• Contractual Necessity : To fulfill bookings and provide tourism services.
• Legal Obligation : To comply with tax, immigration, and regulatory requirements.
• Legitimate Interests : To improve services, prevent fraud, and ensure security.

4.  How We Use Your Information

• Manage bookings, payments, and customer support.
• Share necessary details with hotels, airlines, and tour operators.
• Send updates, offers, and travel-related communications (with consent).
• Ensure compliance with GDPR and PDPA obligations.
• Internal record-keeping, audits, and service improvements.
• Customize itineraries and services to meet your preferences

5.   Sharing of Information

We may share data with

• Service Providers : Hotels, airlines, transport companies.
• Business Partners : Travel agents and tourism boards.
• Authorities            : Immigration, customs, or law enforcement when required.
• Third-Party Payment Processors : For secure transaction handling.

We do not sell or rent your personal information to unauthorized third parties.

6.  International Data Transfers

• Your data may be transferred outside Sri Lanka or the EU/UK.
• We ensure adequate safeguards such as Standard Contractual Clauses (SCCs) or PDPAapproved mechanisms.
• All transfers comply with applicable data protection standards.

7.  Data Subject Rights

Under GDPR and PDPA 2022, you have the right to:

• Access your personal data.
• Request correction or deletion.
• Restrict or object to processing.
• Withdraw consent at any time.
• Request data portability.
• Lodge a complaint with the Data Protection Authority of Sri Lanka or your local supervisory authority (e.g., UK ICO).

Requests can be made via info@pearlofceylon.ignitemv12.com.

8.  Data Security

• We use encryption, secure servers, and restricted access to protect your data.
• Access to personal information is restricted to authorized staff only.
• While we strive for high security, no system is completely immune to breaches.
• Clients are advised to use secure networks when sharing sensitive information.

9.  Cookies & Website Tracking

• Our website uses cookies to improve user experience and analyze traffic.
• You may disable cookies in your browser settings, though some features may not function properly.

10.  Data Rétention

• We retain personal data only as long as necessary for service provision, legal compliance, or until you request deletion.
• Non-essential data may be anonymized or securely deleted after use.

11.   Children’s Privacy

• We do not knowingly collect personal data from individuals under 16 without parental consent.
• This is in line with GDPR and PDPA requirements.

12.   Changes to This Policy

• Pearl of Ceylon reserves the right to update this Privacy Policy at any time.
• Updated versions will be published on our official website and apply immediately.

13.   Contact Information

For questions or requests regarding this Privacy Policy, please contact:

• Pearl of Ceylon (Pvt) Ltd, Colombo, Sri Lanka.
• 📧 Email: info@pearlofceylon.ignitemv12.com
• 📞 Phone: +94 112340370