Your Privacy Matters
Privacy Policy
We respect the trust you place in us when you share your information. This policy explains how Kingsbury Tour (Pvt) Ltd collects, uses and protects personal information when you interact with our website and travel-planning services.
01. Who We Are
"Kingsbury Tour (Pvt) Ltd" ("we", "us", "our") is a Sri Lanka–based travel business that designs tailor-made journeys across the island, presented to you through this website. "You" means any visitor to our website, or anyone who contacts us about a journey.
This Privacy Policy applies to personal information we collect through this website — including our Plan Your Journey form — and through the email, WhatsApp and phone conversations that follow from it.
02. Information We Collect
Identity & contact information
When you complete our Plan Your Journey form or otherwise contact us, we may collect your name, country, email address, phone/WhatsApp number, and your preferred way for us to get in touch (WhatsApp call, phone call, or email).
Travel information
To shape a journey around you, our form asks for your intended travel dates and trip length, the number of adults and children travelling (and children's ages, where relevant to planning), the destinations and experiences you're interested in, your preferred accommodation style, travel pace and budget level, and any special requests you choose to share with us in your own words.
A note on special requests: this field is free text, and its description invites you to mention things like special occasions, dietary requirements or accessibility needs. Some of what you choose to share there — for example a health condition, or a dietary requirement linked to religious practice — can be a special category of personal information under data protection law. We ask you to share only what's genuinely useful for planning your journey, and we use it solely for that purpose.
Technical information
Like most websites, our hosting infrastructure automatically logs basic technical details when you visit — such as IP address, browser type, device type, and the date and time of the request. We do not currently use analytics or advertising-tracking scripts on this site (see Cookies and Analytics below), so beyond this baseline server logging, we do not build a profile of how you browse our site. We do not collect precise GPS location.
03. How We Collect Information
We collect information in two ways:
- Directly from you — when you complete and submit our Plan Your Journey form, or contact us directly by email, WhatsApp or phone.
- Automatically — basic technical information logged by our website hosting as part of normal server operation, described above. We do not use cookies or analytics tools to automatically track how you browse our site.
04. How We Use Information
We use the information you share with us to:
- respond to your enquiry and understand what you're looking for;
- shape a proposed itinerary and quotation around your dates, interests, pace and budget;
- communicate with you about your journey, using your preferred contact method;
- coordinate travel arrangements you ask us to organize, such as private transport and accommodation;
- keep an internal record of enquiries so our team can follow up on them;
- protect our website and enquiry form against spam and abuse — for example, automatic rate-limiting and a hidden "honeypot" field that lets us silently ignore automated submissions; and
- meet our legal obligations, where applicable.
We do not currently process payments through this website, and we do not use your information for automated decision-making or profiling.
05. Legal Basis for Processing
Where Sri Lanka's Personal Data Protection Act No. 9 of 2022 and its related regulations apply, we rely on different lawful grounds depending on the specific processing activity. Depending on the circumstances, this may include:
- your consent — for example, when you voluntarily submit the Plan Your Journey form;
- steps you ask us to take before entering into an arrangement with us, such as preparing a quotation at your request;
- performance of an agreement between us, once you confirm a journey;
- our legitimate business interests, such as preventing spam and keeping our systems secure, balanced against your rights; and
- compliance with a legal obligation that applies to us.
The appropriate basis depends on what the information is used for, and more than one basis may apply to a single interaction.
06. Travel Information
As a travel business, almost everything we ask for is about your trip, not about you as an individual beyond what's needed to plan it. Details like your travel dates, the number of people travelling, the destinations and experiences that interest you, your preferred pace, and any accommodation requirements help us understand the journey you have in mind and put together a route, timing and quotation that fits it.
We only ask for what's useful for this purpose. If a question on our form is unclear, or you're not sure why we're asking, you're welcome to leave it blank or ask us directly. If you choose to share sensitive details — for example in the special requests field, because they're relevant to your trip — we use that information only to plan around it.
08. WhatsApp & Electronic Communication
If you choose WhatsApp as your preferred contact method on our Plan Your Journey form — or contact us on WhatsApp directly — your enquiry details may be sent to our team as a WhatsApp Business Platform notification, and we may reply to you there. WhatsApp is operated by Meta, is a separate service from our website, and its own privacy policy and terms govern how it handles messages sent through it. We don't control WhatsApp's practices — please review WhatsApp's privacy policy directly for details of how it processes your information.
09. Email Communication
When you contact us — through our Plan Your Journey form or directly by email — we use your email address to reply to your enquiry, send a proposed itinerary and quotation, and communicate about arrangements for a journey you've asked us to organize. These are service communications tied to something you've asked us for, not marketing.
Emails are sent through a third-party email delivery service, which processes your email address and message content only to deliver that email. See Marketing Communications below for how promotional email is handled separately from this.
11. Analytics
At the time of writing, Kingsbury Tour (Pvt) Ltd does not use Google Analytics, Meta Pixel or any other analytics or advertising-tracking service on this website. If we introduce an analytics tool in future, we will update this Privacy Policy to name the service, explain what it collects, and describe how you can manage your preferences, before it goes live.
12. Third-Party Links & Services
Our website may link to external services — for example WhatsApp, or third-party sites you find through the destinations, tours and experiences we describe. If you follow a link away from our website, that provider's own privacy policy applies to what happens next, not ours. We encourage you to review the privacy practices of any external site or service before sharing information with it.
13. International Data Transfers
Some of the service providers described above — including our email delivery service and WhatsApp's Business Platform — may process information on servers located outside Sri Lanka, depending on their own infrastructure. Our website hosting provider and server location are [CONFIRM HOSTING PROVIDER AND SERVER LOCATION].
Where personal information is transferred outside Sri Lanka, we expect appropriate safeguards to apply as required under applicable Sri Lankan data protection law. We have not conducted a full technical audit of every provider's server locations, so we're not able to list every country involved with certainty.
14. Data Retention
We retain personal information for as long as reasonably necessary for the purpose it was collected for — including planning and delivering a journey you've asked us to organize, keeping business records, resolving any dispute, and meeting legal obligations that apply to us. We have not yet set fixed retention periods for every category of information; where we haven't, we keep information only for as long as it continues to serve one of these purposes.
15. Data Security
We take reasonable steps to protect the information you share with us, including:
- serving our website over HTTPS;
- restricting access to enquiry records and our internal admin dashboard to authorized team members, behind a password-protected sign-in; and
- rate-limiting and a hidden honeypot field on our enquiry form to reduce automated spam and abuse.
No method of transmission over the internet, or method of electronic storage, can be guaranteed to be completely secure. While we work to protect your information, we can't promise absolute security.
16. Your Privacy Rights
Depending on the circumstances and applicable Sri Lankan data protection law, you may have rights in relation to the personal information we hold about you, which can include the ability to:
- ask what personal information we hold about you, and request a copy;
- ask us to correct information that is inaccurate or incomplete;
- withdraw consent, for future processing, where our use of your information relies on consent;
- object to, or ask us to restrict, certain processing, where applicable;
- ask us to delete personal information we no longer have a valid reason to keep, where applicable; and
- raise a concern with the relevant Sri Lankan data protection authority, where applicable.
To make a request about your personal information, contact us at info@kingsburytours.com. We'll respond as promptly as we reasonably can.
17. Marketing Communications
At this time, Kingsbury Tour (Pvt) Ltd does not operate an active email newsletter or marketing program — the newsletter sign-up field on our website does not currently send or store the email addresses entered into it. Every message we currently send is in direct response to an enquiry or journey you've asked us about.
If we introduce email marketing in future, we will only send it on an appropriate legal basis, with a clear way to opt out, and we will update this section accordingly.
18. Children's Privacy
Our website is not directed at children, and we do not knowingly collect personal information directly from children. Because family journeys often include children, our Plan Your Journey form lets a parent or guardian tell us how many children are travelling and their ages, purely to help us plan a suitable itinerary. This information should only be provided by a parent or guardian, on behalf of the children in their travel party.
19. Changes to This Policy
We may update this Privacy Policy from time to time — for example if our website's functionality changes, if we introduce a new service or integration, or if data protection law changes. We'll update the "Last Updated" date at the top of this page whenever we do, and we encourage you to check back periodically.
Last Updated: [CONFIRM DATE]
20. Questions About Your Privacy?
If you have a question about this Privacy Policy, want to make a request about your personal information, or have a concern about how we've handled it, please get in touch:
- info@kingsburytours.com
- Address
- No. 246/3, Malagala, Padukka, Colombo District, Sri Lanka
You're also welcome to reach us through our Plan Your Journey form or the contact details on our About page for anything not related to privacy.