Privacy Policy

Top Guide Sri Lanka is a private tour operator based in Agalawatta, Western Province, Sri Lanka. When this policy says "we", "us" or "our", it means Top Guide Sri Lanka acting as the controller of your personal information. This policy covers the website topguidesrilanka.com and the enquiries and bookings made through it.

We only collect what we need to answer your enquiry and arrange your trip. That includes:

• Information you give us — your name, email address, phone or WhatsApp number, country, travel dates, party size, and any details you share about the trip you want.
• Messages and correspondence — the content of your enquiry form, emails, or WhatsApp messages.
• Information collected automatically — basic technical data such as your IP address, browser and device type, and pages visited, gathered through standard analytics and cookies to keep the site working and understand how it is used.

We do not collect payment card details on this website. Any payment for a confirmed booking is arranged separately and handled through the method agreed with you at the time.

We use your information to:

• Respond to your enquiry and prepare a tailored itinerary and quote.
• Arrange and coordinate your trip with the relevant suppliers (accommodation, safari operators, guides, transport).
• Communicate with you before, during and after your trip.
• Keep records required for our business and to meet legal obligations.
• Maintain, secure and improve the website.

Where data-protection law such as the GDPR or UK GDPR applies to you, we rely on these legal bases: performance of a contract (to plan and deliver a trip you have asked for), your consent (for example, optional marketing or certain cookies), our legitimate interests (to run and improve our business and respond to enquiries), and compliance with legal obligations.

We share your information only where it is needed to deliver your trip or run the website:

• Travel suppliers — hotels and guesthouses, safari and boat operators, licensed guides and transport providers involved in your itinerary.
• Service providers — our email delivery provider (Resend) and our website hosting and analytics providers, who process data on our behalf.
• Authorities — where we are required to by law, or to protect our rights.

We do not sell your personal information, and we do not share it for third-party advertising.

We are based in Sri Lanka, and some of our service providers operate in other countries. This means your information may be processed outside the country you live in, including places whose data-protection laws differ from your own. Where required, we take reasonable steps to ensure your information remains protected when it is transferred.

The site uses a small number of cookies and similar technologies to function properly and to understand, in aggregate, how visitors use it. You can control or block cookies through your browser settings; blocking some may affect how parts of the site work.

We keep your information for as long as we need it to handle your enquiry and, if you travel with us, to deliver and support your trip and keep the records our business and the law require. When we no longer need it, we delete it or anonymise it.

Depending on where you live — including under the GDPR, the UK GDPR, and Sri Lanka's Personal Data Protection Act No. 9 of 2022 — you may have the right to access the personal information we hold about you, to have it corrected or deleted, to object to or restrict how we use it, and to withdraw consent where we rely on it. To exercise any of these, contact us using the details on our Contact page and we will respond within a reasonable time.

We take reasonable technical and organisational measures to protect your information. No website or transmission over the internet is completely secure, so while we work to protect your data we cannot guarantee absolute security.

This website and our services are intended for adults. We do not knowingly collect information directly from children. Family trips are booked by an adult, who is responsible for the details provided for any minors in the party.

Our site may link to third-party websites (for example, social media or supplier pages). We are not responsible for their content or privacy practices; please review their own policies.

We may update this policy from time to time. The date at the top shows when it was last revised, and any changes take effect once posted here.

If you have any questions about this policy or your personal information, please reach us through our Contact page. We are happy to help.