Last updated: July 2026

1. Information We Collect

Kit Lanka Tours ("we", "us", "our") collects information you provide directly to us when you:

  • Submit an enquiry or contact form
  • Make a booking or payment
  • Subscribe to our newsletter
  • Create an account on our website
  • Use our AI Tour Builder tool

This information may include your name, email address, phone number, travel preferences, passport details (for booking), and payment information.

2. How We Use Your Information

We use the information we collect to:

  • Process and manage your tour bookings
  • Respond to enquiries and provide customer support
  • Send booking confirmations and travel documentation
  • Send newsletter updates (with your consent)
  • Improve our website and services
  • Comply with legal obligations

3. Payment Information

Payment transactions are processed securely through Stripe. We do not store your full credit card details on our servers. Stripe's privacy policy is available at stripe.com/privacy.

4. Cookies

Our website uses cookies to improve your browsing experience, remember your language preference, and analyse site traffic. You can control cookie settings through your browser preferences.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information with:

  • Our tour guides and drivers (only information necessary to deliver your tour)
  • Hotels or accommodation providers, where you have specifically requested us to connect you with them
  • Payment processors (Stripe) for secure transactions
  • Email service providers for booking communications
  • Legal authorities if required by law

6. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal requirements. Booking records are retained for a minimum of 7 years for tax and legal compliance.

7. Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your information (subject to legal requirements)
  • Withdraw consent for newsletter communications at any time
  • Lodge a complaint with a supervisory authority

8. Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our website uses SSL encryption for all data transmission.

9. Contact Us

For any privacy-related questions or to exercise your rights, please contact us:

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "last updated" date at the top. We encourage you to review this policy periodically.