Privacy Policy

1. Information We Collect

To perfectly tailor your journey, we collect essential personal parameters. This is done with your explicit consent when you interact with our concierge, application, or website.

• Identity Data: Full name, date of birth, passport details, and nationality (required for hotel bookings and transport permits).
• Contact Data: Primary email address, billing address, and direct telephone/WhatsApp numbers.
• Preference Data: Dietary requirements, medical conditions relevant to travel, room preferences, and specific lifestyle requirements to ensure a flawless experience.
• Technical Data: IP address, browser type, device identifiers, and anonymous usage telemetry collected via our digital platforms.

2. How We Use Your Data

We process your data exclusively to deliver our luxury services and maintain our high standards of hospitality. Specifically, your data is utilized to:

• Fulfill your booking, secure accommodations, and arrange ground transportation.
• Communicate itinerary updates, payment links, and critical journey advisories.
• Personalize your experience (e.g., ensuring dietary needs are met at all partner restaurants).
• Comply with statutory obligations under Sri Lankan law regarding foreign tourists.

3. Payment Security & PayHere

Yatara Ceylon operates a strict Zero-Knowledge Payment Protocol. We do not digitally collect, process, or store your credit card numbers, CVV codes, or banking passwords on our servers.

All financial transactions are seamlessly securely routed to PayHere, a Central Bank of Sri Lanka approved and PCI-DSS compliant payment gateway. When you make a payment, you interact directly with sophisticated banking infrastructure designed to protect your financial assets.

4. Third-Party Sharing

We operate under strict confidentiality. We do not sell, trade, or recklessly share your data with advertisers. However, to execute your journey, necessary operational data is securely transmitted to our verified partners on a need-to-know basis:

• Boutique Hotels & Villas: Names, passport details, and dietary preferences for check-in and bespoke service.
• Private Chauffeurs: Contact numbers and precise itinerary details to ensure seamless transfers.
• Legal Authorities: If legally compelled by a court of law or government mandate within the Democratic Socialist Republic of Sri Lanka.

5. Cookies & Tracking Technology

Our luxury digital platform employs minimal cookies to ensure technical functionality and observe aggregate user interactions. We use these purely to refine our website's performance and design. You retain the absolute right to configure your browser to decline all cookies, though this may restrict certain bespoke features of our site.

6. Data Retention Protocols

Your personal data is retained only for the duration required to fulfill the purposes detailed in this policy, including post-journey support and satisfying imperative legal, accounting, or reporting requirements. Standard financial transaction records are retained for a stipulated period of seven years as per corporate law.

7. Your Privacy Rights

We recognize and respect global data protection standards, extending the following rights to our international clientele:

• The Right to Access: You may request a comprehensive dossier of the personal data we hold associated with you.
• The Right to Rectification: You may instantaneously request the correction of any inaccurate or incomplete data.
• The Right to Erasure: Also known as "the right to be forgotten", you may request the deletion of your personal data, subject strictly to our overriding legal retention obligations.

8. Contact the Data Controller

For all inquiries, formal requests concerning your data, or to enact your privacy rights, please contact our dedicated data privacy office:

• Email info@yataraceylon.me
• Address Yatara Ceylon Headquarters, Colombo, Sri Lanka