Privacy Policy

1. Key Definitions

• Personal Data: Any information relating to an identified or identifiable individual (e.g., name, contact number, passport details, email address).
• Data Controller: Wanderlust Trails determines the purposes and lawful means of processing your travel-related personal data.
• Processing: Any operation performed on personal data such as collection, recording, storage, consultation, transmission, or deletion.

2. Personal Data We Collect

We collect different categories of personal information depending on how you interact with us:

• Identity & Contact Data: Full name, nationality, email address, contact phone/WhatsApp number, and residential address.
• Travel & Booking Details: Chosen tour packages, travel dates, passenger count, hotel room preferences, dietary/medical requirements, and flight arrival/departure schedules.
• Technical & Usage Data: IP address, device type, browser settings, operating system, and website traffic patterns collected through cookies and Google Analytics to enhance website speed and security.

3. How Your Data is Collected

• Direct Interactions: Data voluntarily provided by you when submitting our website contact forms, WhatsApp inquiries, emails, or phone discussions.
• Automated Technologies: Analytics and cookie tracking when browsing our website pages and tour packages.
• Third-Party Inquiries: If you provide details on behalf of travel companions or group members, you confirm that you have obtained their explicit consent to share their information with us.

4. Lawful Basis for Using Your Data

We process personal data strictly in compliance with applicable data protection principles under the following legal bases:

• Performance of Contract: To prepare customized travel quotations, execute hotel reservations, coordinate private transport, and secure national park or train permits.
• Legitimate Business Interests: To improve our website performance, provide ongoing customer care, and evaluate marketing campaign effectiveness.
• Legal & Regulatory Compliance: To satisfy mandatory statutory tax, safety, and government reporting obligations in Sri Lanka.

5. Cookies & Digital Analytics

Our website utilizes standard cookies (including Google Analytics and Google Ads conversion tracking) to record anonymous usage patterns, measure ad campaign performance, and improve navigation. You may adjust your browser settings to refuse cookies without impacting your ability to browse our itineraries.

6. Disclosures of Your Data

To fulfill your confirmed travel itinerary, essential details are shared only with authorized partners under strict confidentiality:

• Partner Hotels, Eco-Lodges, and Luxury Boutique Resorts for room reservations.
• Licensed Sri Lankan Chauffeur Guides and Transport Coordinators.
• Government Wildlife & Heritage Authorities (e.g., Department of Wildlife Conservation for safari entry permits).
• Law enforcement or regulatory bodies when mandatorily required under Sri Lankan law.

7. Data Security & Cross-Border Transfers

We maintain technical and organizational safeguards, including SSL (Secure Sockets Layer) 256-bit encryption, to protect your data against unauthorized access, loss, or misuse. As we serve international clients globally, data may occasionally be securely processed through cloud infrastructure hosted outside Sri Lanka.

8. Data Retention Period

We retain personal information only for as long as necessary to fulfill your travel arrangements and to satisfy legitimate legal, accounting, and taxation requirements under Sri Lankan law, after which it is securely deleted or anonymized.

9. Your Privacy Rights

Under international data protection standards (including GDPR principles), you possess the following rights regarding your personal records:

• Right to Access: Request a copy of the personal records we hold about you.
• Right to Rectification: Request correction of incomplete or outdated details.
• Right to Erasure: Request the deletion of your personal records where no statutory reason exists for ongoing retention.
• Right to Withdraw Consent: Opt-out of any marketing communications at any time.