This Privacy Policy explains how Harithra Journeys collects, uses, stores, shares, and protects your personal data when you visit our website, make an enquiry, or book our Services. We take your privacy seriously, and because most of our guests travel from Germany, the United Kingdom, and France, we apply the standards of the EU General Data Protection Regulation (GDPR) and the UK General Data Protection Regulation (UK GDPR) to how we handle personal data, alongside applicable Sri Lankan law.
Harithra Journeys is the data controller responsible for your personal data described in this Policy. If you have any questions or wish to exercise your privacy rights, you can contact us at info@harithrajourneys.com
We collect the following types of personal data:
We collect personal data through:
Where the GDPR applies to you, we rely on the following legal bases to process your personal data:
We use your personal data to:
We never sell your data, and we do not share it with third parties for their own marketing purposes.
We only share your personal data with local partners where necessary to complete your booking, including:
These partners only receive the information necessary to deliver the relevant part of your trip. We do not sell your personal data, and we do not share it with any third party for marketing purposes.
Our website uses basic cookies to help us understand visitor traffic and improve our website. Where required by applicable law, we will ask for your consent before placing non-essential cookies, and you can manage or withdraw your cookie preferences at any time through your browser settings.
We will only send you marketing communications such as newsletters or special offers if you have opted in to receive them. You can unsubscribe at any time by using the link in any marketing email or by contacting us at info@harithrajourneys.com. Opting out of marketing will not affect service-related communications about a booking you have made with us.
As we are based in Sri Lanka, personal data collected from guests in Germany, the United Kingdom, France, and elsewhere in the EU/EEA may be transferred to and processed there. Where required under the GDPR, we take necessary steps to ensure your data continues to receive an appropriate level of protection in connection with any such transfer, and we share data only with trusted local partners, as described in Section 7 above, strictly for the purpose of delivering your booked Services.
Your data is stored on password-protected servers, with access limited to a small number of authorised personnel who need it to arrange or deliver your Services. We follow modern data protection practices designed to keep your information secure against unauthorised access, loss, or misuse. In the unlikely event of a data breach affecting your personal data, we will notify you and, where required by law, the relevant supervisory authority, without undue delay.
We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, including delivering your booked Services and meeting our legal, accounting, or regulatory obligations. When your data is no longer needed, we take reasonable steps to securely delete or anonymise it.
If the GDPR applies to you, you have the right to:
You can exercise any of these rights or ask us any questions about how we use your data by simply emailing us at info@harithrajourneys.com.We will respond to your request as soon as reasonably possible, and in any case within the timeframes required by applicable law. If you are not satisfied with our response, you also have the right to lodge a complaint with your local data protection authority.
Our Services are planned for adults arranging travel, including on behalf of family members. We do not knowingly collect personal data directly from children without the involvement of a parent or guardian. Where information about a minor is provided, for example, as part of a family booking, this is collected from and with the consent of the accompanying adult.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We encourage you to review this Policy periodically.
If you have any questions about this Privacy Policy, or wish to access, correct, or delete your personal information, please email us. We’re happy to help.
