Effective July 2026.
At CeylonTide, we value your privacy and are committed to protecting your personal information. We understand that planning a holiday requires trust, and we are dedicated to handling your information responsibly, securely, and transparently.
This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you visit our website, enquire about our services, or book travel arrangements with us.
As an Australian-owned travel company, we aim to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) where applicable.
By using our website or engaging with our services, you agree to the collection and use of information in accordance with this Privacy Policy.
To provide personalised travel planning and booking services, we may collect personal information including, but not limited to:
Where required for travel bookings, we may collect:
Where voluntarily provided, we may collect information regarding:
Payments are processed securely through authorised payment providers.
We do not store complete credit card details on our systems.
We collect information through a variety of channels, including:
We only collect information that is reasonably necessary to provide our services.
Your information helps us provide a smooth and personalised travel experience.
We may use your information to:
With your consent, we may also send promotional emails, newsletters, travel inspiration, or exclusive offers. You may unsubscribe at any time.
We respect your privacy and never sell your personal information.
However, to deliver your travel arrangements, we may share relevant information with trusted third parties, including:
Only the information necessary to provide your booked services will be shared.
All third-party suppliers are expected to handle your information responsibly.
Protecting your personal information is important to us.
We use reasonable administrative, technical, and physical safeguards to protect your information from:
Customer information is stored using reputable cloud-based business systems, secure website hosting, password-protected platforms, and access-controlled environments.
While we take appropriate security measures, no online transmission or storage system can be guaranteed to be completely secure.
Our website may use cookies and similar technologies to improve your browsing experience.
Cookies help us:
Analytics services may collect anonymous information such as:
You may disable cookies through your browser settings, although some website features may not function correctly.
If you choose to subscribe to our mailing list or request travel updates, we may occasionally send:
You may unsubscribe at any time using the unsubscribe link included in our emails or by contacting us directly.
We retain personal information only for as long as necessary to:
When information is no longer required, we take reasonable steps to securely delete or anonymise it.
Subject to applicable laws, you may request to:
To make a request, please contact us using the details provided below.
We aim to respond within 30 days, where reasonably practicable.
Please note that certain information may need to be retained where required by law or for legitimate business purposes.
As we arrange travel services in Sri Lanka while operating as an Australian-owned business, your information may be transferred to trusted suppliers located in Sri Lanka or other countries where necessary to fulfil your booking.
We take reasonable steps to ensure that any overseas recipients handle your personal information responsibly and in accordance with applicable privacy obligations.
Our website may contain links to third-party websites, including accommodation providers, tourism organisations, airlines, or activity operators.
These websites operate independently and have their own privacy practices.
We encourage you to review the privacy policies of any third-party websites before providing personal information.
CeylonTide is not responsible for the privacy practices or content of external websites.
If you believe your privacy has been breached, you may contact us directly via our official email.
We will:
If you are not satisfied, you may escalate the matter to the Office of the Australian Information Commissioner (OAIC).
In the unlikely event of a data breach, CeylonTide will:
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or business practices.
Any updates will be published on this page together with the revised effective date.
Your continued use of our website or services after changes are published constitutes acceptance of the updated Privacy Policy.