Ravana De Ceylon (Pvt) Ltd. (“Ravana De Ceylon”, “we”, “our” or “us”) is a Sri Lankan travel company providing personalised travel planning, tailor-made holidays, accommodation arrangements, transportation and travel experiences in Sri Lanka.
We are committed to protecting your personal information and handling it responsibly, transparently and securely.
This Privacy & Cookies Policy explains how we collect, use, store, disclose and protect your personal data when you visit our website, submit an enquiry, request a personalised itinerary or engage our travel services.
Where applicable, we process personal data in accordance with the EU General Data Protection Regulation (EU GDPR), the UK General Data Protection Regulation (UK GDPR), applicable electronic privacy and cookie requirements, and relevant Sri Lankan data protection legislation.
Website: https://www.ravanadeceylon.com
Company: Ravana De Ceylon (Pvt) Ltd.
Email: info@ravanadeceylon.com
Ravana De Ceylon (Pvt) Ltd. determines the purposes and means of processing personal data collected through our website and in connection with our travel services, where we act as the data controller.
For privacy-related questions or requests concerning your personal information, please contact us using the details provided in Section 15.
Where applicable law requires us to appoint a representative in the European Union or the United Kingdom, we will provide the relevant representative’s contact details.
We may collect and process the following categories of personal information, depending on how you interact with us.
When you request a personalised holiday or travel proposal, we may collect:
Please avoid submitting unnecessary sensitive personal information through general website forms.
Where you proceed with a booking, we may process information reasonably necessary to arrange your travel services, including booking references, traveller details, payment status, invoices and relevant correspondence.
Payment card information is processed by the applicable payment service provider where payment facilities are used. We do not intentionally store complete payment card details unless expressly disclosed and handled through an appropriately secured and compliant process.
When you visit our website, we or our service providers may collect technical information, subject to applicable consent requirements, including:
If website comments or user-uploaded media are enabled, we may collect the information submitted through those features.
Comments may include the information shown in the comments form, the visitor’s IP address and browser user agent to help detect spam.
If images are uploaded, please avoid including embedded GPS location information unless it is necessary and you understand the associated privacy implications.
We process personal information for the following purposes:
| Purpose | Applicable lawful basis, where required |
| Responding to enquiries and requests for itineraries | Taking steps at your request before entering into a contract, or legitimate interests where appropriate |
| Preparing travel proposals and personalised itineraries | Pre-contractual steps or contractual necessity |
| Managing confirmed bookings and delivering travel services | Contractual necessity |
| Communicating booking updates and essential travel information | Contractual necessity or legitimate interests, as appropriate |
| Processing payments, invoices and financial records | Contractual necessity and legal obligations |
| Maintaining website security and preventing fraud or spam | Legitimate interests or legal obligations, where applicable |
| Operating essential website features | Legitimate interests or necessity for the requested service, subject to applicable law |
| Measuring website performance and improving user experience | Consent where required, or another applicable lawful basis |
| Sending promotional emails or marketing communications | Consent where required by applicable marketing and privacy laws |
| Meeting tax, accounting and other legal requirements | Legal obligation |
Where we rely on legitimate interests, these may include operating our business, responding to genuine enquiries, maintaining website security and improving our services, provided those interests are not overridden by your rights and freedoms.
We will not use your personal information for materially different purposes without providing appropriate information and obtaining consent where required.
When you submit a contact form, tailor-made holiday planner or booking enquiry, we use the information you provide to understand your requirements and respond to your request.
Your information may be used to:
Submitting an enquiry does not automatically subscribe you to promotional marketing communications.
You may contact us to request that we stop following up on an enquiry, subject to any contractual or legal requirements.
We do not sell or rent your personal information to third parties.
We may share relevant information with the following categories of recipients when necessary and lawful:
These may include hotels, villas, transportation providers, chauffeurs, guides, activity operators and other service providers involved in arranging your journey.
We share only information reasonably necessary to coordinate the requested or confirmed services.
We may use hosting providers, website maintenance services, email providers, customer communication platforms, spam detection services and other technical service providers to operate our website and manage enquiries.
Where applicable, information may be shared with payment processors, accountants, legal advisers, insurers or other professional service providers when required for legitimate business or legal purposes.
We may disclose information where required by law, a court order, a competent authority or where disclosure is reasonably necessary to establish, exercise or defend legal claims.
Where third parties process personal information on our behalf, we will take appropriate steps to require suitable confidentiality, security and data protection measures.
Independent suppliers may process information under their own privacy policies and contractual arrangements.
Ravana De Ceylon operates from Sri Lanka and may arrange services involving suppliers and service providers in different countries.
Your personal data may therefore be accessed or transferred across national borders where necessary to operate our website, communicate with you or arrange your travel services.
Where the EU GDPR or UK GDPR applies, we will implement the transfer mechanism and safeguards required by the applicable law for relevant restricted international transfers.
Depending on the circumstances, these safeguards may include an applicable adequacy decision, approved standard contractual clauses, the UK International Data Transfer Agreement or Addendum, or another lawful transfer mechanism.
You may contact us to request further information about relevant international transfers and safeguards.
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing services, fulfilling contractual obligations, complying with legal requirements and resolving disputes.
Our retention approach includes:
Retention periods may vary according to the nature of the information, applicable legal requirements and the circumstances of the relevant booking or enquiry.
When personal data is no longer required, we will take reasonable steps to delete it or anonymise it securely, subject to applicable law.
Our website may use cookies and similar technologies to operate its features, remember preferences, protect security and understand website usage.
Cookies are small text files stored on your device by a website.
Some cookies are necessary for the website to function or to provide a service you have requested. These may support login sessions, security, form functionality and other essential website features.
Where permitted by law, these cookies may be used without consent.
Preference cookies may remember choices such as display settings or other website preferences.
Where consent is required, these cookies will be activated only after you provide the appropriate consent.
If analytics tools are used, they may collect information about website traffic, page views, visitor interactions and website performance.
Where applicable law requires consent for these technologies, they will be activated only after you consent.
If advertising, remarketing or similar technologies are implemented, they may be used to measure advertising performance or deliver relevant advertisements.
Such technologies will be used only in accordance with applicable law, including obtaining consent where required.
Where required, our website will provide a cookie consent mechanism allowing you to accept or reject non-essential cookies and manage your preferences.
You may change or withdraw your cookie consent through the available cookie settings tool. You can also manage or delete cookies through your browser settings, although disabling certain cookies may affect website functionality.
Rejecting non-essential cookies should not prevent access to features that do not require those cookies.
The precise cookies used on the website may change as its features and third-party integrations change. We will update this policy and our consent arrangements where necessary.
If user login functionality is available, a temporary cookie may be used to check whether your browser accepts cookies.
When you log in, additional cookies may store authentication and display preferences. Their duration will depend on the website configuration and your selected settings.
If comments are enabled, you may be offered the option to save your name, email address and website in cookies for convenience. Such cookies may remain active for up to one year, depending on the website configuration.
Our website may include third-party content such as videos, maps, images, social media content or articles.
Embedded content may interact with the third-party provider as though you had visited its website directly. That provider may collect information, set cookies or track your interaction according to its own privacy policy and applicable consent requirements.
Where required, we will obtain consent before loading non-essential third-party content or tracking technologies.
We take reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, alteration, disclosure or destruction.
These measures may include access controls, appropriate website security measures, restricted access to business records and the use of reputable service providers.
However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.
If a personal data breach occurs, we will assess the incident and take the steps required by applicable law, including notifying affected individuals or relevant authorities where legally required.
Where the EU GDPR or UK GDPR applies, you may have the following rights, subject to the conditions and exemptions under the applicable law:
You have an unconditional right to object to the processing of your personal data for direct marketing purposes where the relevant GDPR provisions apply.
Exercising your rights will not affect the lawfulness of processing carried out before your request. We may retain information where required by law or where another lawful basis justifies retention.
To exercise your rights, email info@ravanadeceylon.com with the subject line “Data Protection Request.”
We may need to verify your identity before responding. We will respond within the period required by applicable law.
We may send service-related communications concerning your enquiries, itinerary proposals, bookings and travel arrangements.
We will send promotional marketing communications only where we have an appropriate legal basis and have met applicable consent and electronic marketing requirements.
You may unsubscribe from marketing emails by using the unsubscribe link, where available, or by contacting info@ravanadeceylon.com.
Unsubscribing from marketing will not prevent us from sending essential communications relating to an existing booking or service.
Our website and travel services are not intended to encourage children to submit personal information independently without appropriate involvement from a parent or legal guardian.
Where we arrange travel for families, we may need limited information about children to coordinate accommodation, transport or activities.
We will handle such information for appropriate travel-related purposes and in accordance with applicable data protection requirements.
If you have questions about this policy, believe your personal information has been handled improperly, or wish to exercise your data protection rights, please contact:
Ravana De Ceylon (Pvt) Ltd.
Email: info@ravanadeceylon.com
Website: https://www.ravanadeceylon.com
If the EU GDPR or UK GDPR applies to our processing, you may also have the right to lodge a complaint with the relevant data protection supervisory authority, including the authority in the country where you normally live, work or where the alleged infringement occurred.
Individuals in the United Kingdom may contact the Information Commissioner’s Office (ICO): https://ico.org.uk/
Individuals in the European Union may contact their relevant national data protection authority.
We may update this Privacy & Cookies Policy to reflect changes in our business, website features, service providers, applicable legislation or data processing practices.
The latest version will be published on our website with its updated revision date.
Where required by law, we will provide additional notice or obtain consent before introducing material changes to our processing activities.
This policy describes our intended approach to privacy and personal data protection. Its effectiveness depends on the actual operation of our website, the tools and service providers we use, and our internal data handling practices.
Nothing in this policy limits any mandatory rights or protections available to individuals under applicable law.
End of Policy
Ravana De Ceylon (Pvt) Ltd.
Last Updated: October 2026