Privacy Policy | GrandTour (Pvt) Ltd

1Who we are

This website is run by GrandTour (Pvt) Ltd, No. 46, Balawinna, Pallebedda 70170, Sri Lanka. We are responsible for the personal data described in this policy. You can reach us about it at info@grandtour-srilanka.com.

2Information we collect

We collect and process various types of data to provide our services effectively.

Information you give us

When you fill in one of our forms, message us or book with us, you may give us:

Contact information: your name, email address and, if you choose to give it, your WhatsApp or phone number.
Trip details: your country, travel dates, number of travellers and rooms, preferred hotel standard and meal plan, budget, interests, any tour you are enquiring about, and anything you write in your message.
Travel preferences: if you answer the optional questions on our enquiry form, how you like to travel — for example your preferred pace.
Booking details: any other details you provide so that we can arrange your tour.

Our forms only ask for what we need to plan your trip. Optional fields are marked, and you can leave them empty.

Information collected when you send a form

Each enquiry we receive also records your IP address, the time it was sent, and a spam score from Google reCAPTCHA (see below). We use these only to recognise and block abuse of our forms.

Information collected automatically

Server logs: like any website, our hosting provider records standard technical details of each visit, such as your IP address, browser type and the page requested, for security and troubleshooting.
Analytics: only if you allow analytics cookies, Google Analytics collects how you use the site — the pages you visit, how long you spend on them, how you arrived, and your device and approximate location.
Advertising: only if you allow marketing cookies, Google Ads records whether you arrived from one of our adverts and whether you went on to send an enquiry.

If you do not allow analytics or marketing cookies, Google may still receive limited signals without cookies. Our Cookie Policy explains exactly what that means.

3How we use your information

We use your data for the following purposes.

Providing services

To answer your enquiry and plan the trip you asked about.
To process bookings, confirm itineraries and manage your travel arrangements.
To communicate important updates about your tours via email, phone or WhatsApp.

Protecting our website

To keep spam and automated abuse out of our enquiry forms, using Google reCAPTCHA and a hidden anti-spam field.

Improving our website

To understand how the site is used and improve it, using Google Analytics — only if you allow analytics cookies.

Advertising

To learn whether our Google Ads lead to enquiries, and to show our adverts to people who have visited this site — only if you allow marketing cookies.

Legal and administrative

To comply with legal obligations, such as tax reporting and fraud prevention.
To handle disputes, complaints or claims.

Marketing communications

With your consent we may send newsletters, promotions and updates about new tours or services. You can opt out of these communications at any time.

4Cookies and your choices

We use essential cookies that the site needs to work, and optional analytics and marketing cookies that are only set if you agree. On your first visit we ask for your choice, and you can change it at any time from “Cookie settings” at the foot of every page or with the button below. Rejecting optional cookies does not affect your ability to use the site or send an enquiry.

Our Cookie Policy lists every cookie we use, what it is for and how long it lasts.

Cookie Policy

5Sharing your information

We do not sell or rent your personal data to third parties. However, we may share your data with:

Service providers: hotels, transport operators and tour guides involved in your booking.
Our hosting and email provider: Hostinger hosts this website and the mailbox that our enquiries are delivered to.
Google: Google reCAPTCHA protects our forms; Google Tag Manager loads our Google tags; Google Analytics and Google Ads receive data only as described above and in our Cookie Policy; Google Translate receives the text of a page only if you choose to translate it.
Legal obligations: if required by law, we may share data with law enforcement or government agencies.

Google may process data on servers outside your country, including in the United States. Google explains how it handles this data here:

6Your rights

If you are an EU resident, you have the following rights under the GDPR:

Right to access — request a copy of the personal data we hold about you.
Right to rectification — correct any inaccurate or incomplete data.
Right to erasure — request the deletion of your data, unless it is required for legal or administrative purposes.
Right to object — opt out of data processing for specific purposes, such as marketing.
Right to data portability — receive your data in a structured, machine-readable format.
Right to withdraw consent — withdraw your consent to data processing at any time. For cookies, you can do this yourself from “Cookie settings”.
Right to complain — lodge a complaint with the data protection authority in your country.

To use any of these rights, email info@grandtour-srilanka.com.

7Data security

We use the following measures to protect your data:

SSL encryption: all data transmitted between your browser and our servers is encrypted.
Access controls: only authorised personnel can access your data.
Regular security audits: we periodically review our systems to prevent vulnerabilities.

8Data retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, or to comply with legal obligations.

Cookies are kept only for the periods listed in our Cookie Policy. Your cookie choice itself is kept for six months, after which we ask again.