Essencylon Tours Privacy Policy

Last Updated: February 7, 2026

At Essencylon Tours, your privacy is important. This Privacy Policy explains how we collect, use, and protect your personal information when you book tours or use our website (essencylon.com).

1. Information We Collect

A. Personal Information (when booking):

  • Full name, email address, phone/WhatsApp number
  • Passport details (for tour confirmation)
  • Travel dates and number of travelers

B. Payment Information:

  • Credit card type, last 4 digits (Stripe/PayPal processes full details securely)
  • Billing address

C. Automatically Collected:

  • IP address, browser type, pages visited
  • Device information (mobile/desktop)

D. Cookies:

  • Session cookies for website functionality
  • Google Analytics for traffic analysis

2. How We Use Your Data

  • To process and confirm your tour bookings
  • To send booking confirmations, itineraries, and updates via email/WhatsApp
  • To arrange hotel pickups and coordinate with guides/drivers
  • To process payments securely through Stripe/PayPal
  • To improve our website and tour offerings (anonymous analytics)
  • To send promotional offers (only if you opt-in via checkbox)
  • To comply with Sri Lanka tourism regulations and tax requirements

3. Data Sharing

  • Tour guides/drivers (name, pickup location, tour date only)
  • Payment processors (Stripe/PayPal – secure, PCI compliant)
  • Sri Lanka Tourism Development Authority (license reporting)
  • Emergency contacts (if medical issue arises during tour)
  • Legal authorities (if required by Sri Lankan law)

We NEVER sell, rent, or share your data with third-party marketers.

4. Data Security

  • All data encrypted with SSL/TLS (https://essencylon.com)
  • Password-protected WordPress admin with 2FA enabled
  • Regular security backups via UpdraftPlus
  • Hosting on secure Sri Lanka/EU servers with firewall protection
  • Payment data never stored on our servers (Stripe/PayPal PCI compliant)
  • Employee access limited to booking staff only
  • Data retention: Booking records kept 2 years per Sri Lanka tax law

5. Your Rights

  • Access: Request copy of your personal data (email info@essencylon.com)
  • Correction: Update inaccurate booking information anytime
  • Deletion: Request data removal after booking completion + 2-year retention
  • Opt-out: Unsubscribe from promotional emails (one-click link)
  • Withdraw consent: Stop marketing communications at any time
  • Complaint: Contact Sri Lanka Tourism Authority or Data Protection Officer
  • Data portability: Receive your booking data in standard format

6. Cookies & Tracking

  • Essential Cookies: Required for website functionality (cart, login, forms)
  • Performance Cookies: Google Analytics (anonymous traffic data only)
  • Functional Cookies: Remember preferences (language, tour selections)
  • No advertising cookies or tracking pixels used
  • Cookie consent banner via WordPress plugin (accept/decline options)
  • Manage cookies: Browser settings or “Clear Data” button in footer
  • Third-party: Stripe/PayPal cookies only during payment process

7. Contact Information

8. Policy Updates

  • We may update this Privacy Policy periodically
  • Material changes notified by email to past customers
  • Continued use of website = acceptance of updated policy
  • Check footer link for latest version

© 2026 Essencylon Tours. Licensed Sri Lanka Tour Operator.
Privacy practices comply with Sri Lanka Personal Data Protection Act 2022.