This Privacy Policy explains how Trip Lanka, based in Perth, Western Australia, collects, uses, stores, and discloses your personal information. We are committed to handling personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. Our Commitment to Your Privacy
Trip Lanka is committed to protecting the privacy of our clients, website visitors, and enquirers. We collect only the personal information necessary to provide our travel services, and we handle it with care, discretion, and respect.
We will not sell, rent, or trade your personal information to third parties for their marketing purposes. We will only share your information as described in this Policy or as required by law.
2. Information We Collect
We may collect the following categories of personal information:
- Identity information: Full name, date of birth, passport number and expiry date, nationality
- Contact information: Email address, phone number, residential or postal address
- Travel information: Flight details, travel dates, accommodation preferences, dietary requirements, medical conditions relevant to travel
- Financial information: Bank transfer references and payment confirmations (we do not store credit card details)
- Communication records: Enquiries submitted via our website, emails, and phone call notes
- Website usage data: IP address, browser type, pages visited, time spent on site (collected via cookies and analytics tools)
We only collect sensitive information (such as health or medical conditions relevant to your travel) where it is necessary to provide our services and with your consent.
3. How We Collect Your Information
We collect personal information through the following means:
- Directly from you: When you submit an enquiry form on our website, email us, call us, or complete a booking form
- During the booking process: When you provide passport copies, flight details, and other documentation required to process your booking
- Automatically: When you visit our website, certain technical information (such as your IP address and browser information) is collected automatically via cookies and web analytics tools
- From third parties: In limited circumstances, from travel agents or third-party referrers who have your consent to share your information with us
4. Why We Collect Your Information
Trip Lanka collects personal information for the following primary purposes:
- To respond to your enquiries and provide travel quotations
- To process and confirm your tour bookings
- To arrange travel services on your behalf (hotels, transport, activities, guides)
- To communicate with you about your booking, itinerary, and travel requirements
- To comply with our legal and regulatory obligations
- To improve our website and services
- With your consent, to send you travel inspiration and promotional communications
5. How We Use Your Information
Your personal information will be used only for the purposes for which it was collected, or as otherwise permitted by the Australian Privacy Principles. We will not use your information for a secondary purpose unless it is directly related to the original purpose, you have consented, or we are required by law.
Specifically, we use your information to:
- Create and manage your booking file
- Provide your details to hotels, transport operators, national park authorities, and other service providers in Sri Lanka as necessary to fulfil your booking
- Send you booking confirmations, itinerary documents, and pre-departure information
- Contact you in the event of changes, emergencies, or issues affecting your tour
- Process payments and maintain financial records as required by law
- Analyse website usage to improve user experience (in aggregate, anonymised form)
6. Disclosure to Third Parties
We may disclose your personal information to third parties only where necessary to provide our services or as required by law. These third parties include:
- Sri Lanka-based service providers: Hotels, resorts, transport operators, tour guides, national park authorities, and activity providers who need your information to facilitate your tour
- Airline and airfare providers: Where you have requested airfare assistance, your name, passport details, and travel dates will be shared with airlines or airfare consolidators as necessary to obtain quotes and process your booking. Airlines may be based in Australia or overseas (including Sri Lanka, the United Arab Emirates, or other transit countries)
- Technology service providers: Email, cloud storage, and website hosting providers who assist us in operating our business (bound by confidentiality obligations)
- Government and regulatory authorities: Where required by law, court order, or lawful government request
- Emergency services: In situations involving a risk to your health, safety, or welfare
We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.
7. Overseas Disclosure
Because Trip Lanka arranges tours in Sri Lanka, it is necessary for us to share your personal information with service providers located in Sri Lanka. Sri Lanka does not have privacy laws equivalent to Australia's Privacy Act 1988.
By making a booking with Trip Lanka, you acknowledge and consent to your personal information being disclosed to overseas recipients in Sri Lanka for the purpose of arranging your tour. We take reasonable steps to ensure that our Sri Lankan partners handle your information responsibly, however Trip Lanka cannot be held accountable under the Australian Privacy Act for the actions of overseas recipients where we have taken those reasonable steps.
We will only disclose the minimum information necessary for each service provider to deliver their specific component of your tour.
8. Data Security
We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. Our security measures include:
- Secure email communication with clients
- Password-protected systems and file storage
- Limiting access to personal information to staff who need it to perform their duties
- Secure deletion or de-identification of personal information when it is no longer required
While we take all reasonable precautions, no data transmission over the internet or electronic storage system can be guaranteed as completely secure. If you believe your information has been compromised, please contact us immediately at hello@triplanka.com.au.
9. Cookies, Tracking & Third-Party Services
Our website uses cookies and similar tracking technologies to improve your browsing experience and help us understand how visitors use our site. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies do not identify you personally unless you have provided us with personal information.
Types of Cookies We Use
- Essential cookies: Necessary for the website to function correctly. These cannot be disabled.
- Analytics cookies: Collect anonymised information about how visitors use our site — pages visited, time on site, and referral source. Used to improve our website.
- Preference cookies: Remember choices you have made on previous visits to improve your experience.
- Marketing cookies: Set by third-party services (such as Google Tag Manager) to measure the effectiveness of our communications. We do not currently run paid advertising campaigns, but this infrastructure is in place for future use.
Third-Party Services That Collect Data
Our website integrates the following third-party services that may set cookies or collect data about your visit. Each service is governed by its own privacy policy.
-
Google Tag Manager (GTM-5ZJXP6L6): A tag management system that loads and manages other tracking tools on our website. GTM itself collects minimal data but enables the deployment of analytics and other tags. When GTM fires, it may share information with other Google services. Google Privacy Policy.
-
Google Analytics (via Google Tag Manager): Collects anonymised usage data including pages visited, time spent on site, device type, browser, and approximate geographic location (country/city level). This data is processed by Google and used to generate reports about website traffic. Your full IP address is not stored. You can opt out at tools.google.com/dlpage/gaoptout.
-
Google reCAPTCHA v2: Used on our enquiry and quote forms to protect against automated spam and bot submissions. reCAPTCHA collects hardware and software information (such as device and application data), mouse movements, IP address, and cookies to distinguish human users from bots. This data is sent to and processed by Google. By completing a reCAPTCHA challenge, you agree to Google's Privacy Policy and Terms of Service.
-
Google Fonts (via Google CDN): Our website loads fonts (Merriweather and Open Sans) from Google's servers. When your browser requests these fonts, your IP address is transmitted to Google as part of the standard HTTP request. Google may log this request. We use Google Fonts solely for visual presentation. See Google Fonts Privacy FAQ.
How to Control Cookies
You can control and delete cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and be notified when new cookies are set. Disabling certain cookies may affect the functionality of some parts of our website.
For guidance on managing cookies in your browser, visit www.aboutcookies.org. To opt out of Google Analytics tracking specifically, install the Google Analytics Opt-out Browser Add-on.
Please note that Trip Lanka does not currently use a cookie consent banner. Our website is primarily directed at Australasian visitors. If you access this website from within the European Union or United Kingdom and have concerns about cookie tracking, please contact us at hello@triplanka.com.au.
10. Access to & Correction of Your Information
Under the Australian Privacy Principles, you have the right to access the personal information we hold about you and to request corrections if it is inaccurate, incomplete, or out of date.
To request access to or correction of your personal information, please contact us in writing at hello@triplanka.com.au. We will respond to your request within 30 days. In some circumstances we may be required to decline an access request (for example, where providing access would unreasonably impact another individual's privacy) — in such cases we will explain our reasons in writing.
There is no charge for making an access or correction request, however we may charge a reasonable fee for the costs of providing access if the request is complex or time-consuming.
11. Marketing Communications
With your consent, we may from time to time send you travel inspiration, news about Sri Lanka, and information about our tours and special offers. You can withdraw your consent and unsubscribe from marketing communications at any time by:
- Clicking the "unsubscribe" link in any marketing email we send you
- Emailing us at hello@triplanka.com.au with a request to be removed from our mailing list
We will process your unsubscribe request promptly. Please note that even if you unsubscribe from marketing communications, we may still send you transactional emails relating to an active booking.
12. Third-Party Websites
Our website may contain links to external websites operated by third parties, including Sri Lanka Tourism, the Australian Department of Foreign Affairs and Trade (Smartraveller), and hotel or activity providers. This Privacy Policy does not apply to those external websites. We encourage you to review the privacy policies of any third-party sites you visit.
13. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, and reporting obligations. In general:
- Booking and financial records are retained for 7 years as required by Australian tax and accounting law
- Enquiry records where no booking was made are deleted within 2 years
- Marketing contact lists are maintained until you unsubscribe
When personal information is no longer required, we will take reasonable steps to destroy or de-identify it securely.
14. Children's Privacy
Our services are not directed at children under the age of 18. Where a booking includes minor travellers, personal information about those children is collected with the consent of, and on behalf of, the parent or legal guardian who makes the booking. We handle information about minors with additional care.
15. Privacy Complaints
If you believe that Trip Lanka has handled your personal information in a manner that is inconsistent with the Australian Privacy Principles, please contact us first so we have the opportunity to resolve your concern:
We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.
16. Changes to This Policy
Trip Lanka may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Policy periodically.
Continued use of our website or services after any changes to this Policy constitutes your acceptance of the updated Policy.