Privacy Policy
Your data, handled with absolute care.
What We Collect
Data we gather.
The information we collect when you book, enquire, or simply browse our platform.
Booking & Identity Data
When you make a booking we collect your name, email address, phone number, nationality, and — where explicitly required by the Sri Lanka Ports Authority or Department of Wildlife Conservation — passport or National Identity Card number. This critical data is required to operate the booking, issue the official departure manifest, and comply strictly with maritime regulations.
Sensitive & Preference Data
During the reservation process, you may voluntarily provide information regarding dietary requirements, allergies, or specific medical conditions to ensure your safety and comfort on board. We treat this sensitive information with the highest confidentiality and share it only with the operational crew managing your specific voyage.
Payment Data
Payment transactions are securely processed by the Commercial Bank Payment Gateway (IPG) and MintPay. We do not view, process, or store raw card numbers, CVV codes, or sensitive banking credentials. We simply retain a secure transaction reference and payment status flag for booking management and auditing purposes.
Communications & Analytics
When you contact us by email, WhatsApp, or through our website forms, we retain that correspondence to assist you efficiently. Additionally, we collect basic, anonymised analytics data — including general page views and referral sources — to understand how visitors navigate our website. This data cannot identify individuals.
How We Use It
Data utilization.
We use your data strictly for operational needs. We never sell, rent, or secretly profile your personal data.
To Manage Your Voyage
Your personal data is utilized to confirm your booking, issue accurate receipts, send essential pre-departure information, communicate itinerary amendments, and process any subsequent refund requests.
To Meet Regulatory Requirements
Sri Lanka Ports Authority vessel departure manifests require verified guest names and identification. Department of Wildlife Conservation wildlife permits require guest counts and relevant identifiers. This data is shared exclusively with the relevant government authority and only to the absolute extent required by law.
Third-Party Processors & Security
We share data with trusted processors like HubSpot for customer relationship management. All third-party processors operate under binding data processing agreements restricting them to use your data only for our specified purposes. We employ modern cryptographic protocols to ensure your data is stored securely and protected against unauthorized access.
Data Retention Lifecycle
Booking and payment records are retained for a minimum of seven years to ensure strict compliance with Sri Lankan tax and financial reporting regulations. Personal data that is no longer required for legal, compliance, or operational purposes is routinely securely deleted within 12 months of your last meaningful interaction with us.
Your Rights
Taking control.
How to access, rectify, or request the permanent deletion of the personal data we hold.
Right of Access & Correction
You may request a digital copy of the personal data we currently hold about you at any time. We will provide this within 30 days of receiving a written request. If any data is inaccurate or incomplete, please notify us immediately. For active upcoming bookings, please contact us urgently so that any vital regulatory documents can be corrected before boarding.
Right to Erasure (Deletion)
You hold the right to request the deletion of personal data that is no longer strictly required for the original purposes for which it was collected. We will fulfil deletion requests where the data is not bound by a legal retention requirement — such as the mandatory seven-year financial records obligation — within 30 days of receiving your formal written request.
How to Contact Our Privacy Team
To confidently exercise any of these rights, or to raise a formal concern about how your data is handled, please contact our administrative team in writing via the website contact page or by official WhatsApp channels. We aim to officially respond within 30 days. For cookie-related tracking preferences, please consult our Cookie Policy.
Ready to sail?Let’s design your
Let’s design your
journey
Every Sail Lanka voyage is tailored to you. Share your destination, travel companions, and preferred experience, and we'll craft a journey that's uniquely yours.