Privacy Policy

Top Guide Sri Lanka is a private tour operator based in Agalawatta, Western Province, Sri Lanka. When this policy says "we", "us" or "our", it means Top Guide Sri Lanka acting as the controller of your personal information. This policy covers the website topguidesrilanka.com, the enquiries and bookings made through it, and enquiries you send us directly — by email, WhatsApp, or through the lead forms in our Facebook and Instagram ads.

We only collect what we need to answer your enquiry and arrange your trip. That includes:

• Information you give us — your name, email address, phone or WhatsApp number, country, travel dates, party size, and any details you share about the trip you want.
• Messages and correspondence — the content of your enquiry form, emails, or WhatsApp messages.
• Information from Facebook and Instagram lead forms — if you fill in one of our lead forms on Facebook or Instagram, we receive the answers you submit: your full name, email address, and, if you choose to give them, your phone or WhatsApp number. We also receive your preferred travel package, planned travel dates and number of travellers, and, if you choose to give them, your arrival or departure airport and an approximate travel budget. Meta may pre-fill some fields (such as your name and email) from your profile; you can review and edit them before you submit. We do not receive your Facebook or Instagram password, and we do not receive other information from your profile beyond what is shown in the form.
• Information collected automatically — basic technical data such as your IP address, browser and device type, and pages visited, gathered through standard analytics and cookies to keep the site working and understand how it is used.

We do not collect payment card details on this website. Any payment for a confirmed booking is arranged separately and handled through the method agreed with you at the time.

We use your information to:

• Respond to your enquiry and prepare a tailored itinerary and quote.
• Contact you about your enquiry using the channels you gave us — email, phone or WhatsApp.
• Arrange and coordinate your trip with the relevant suppliers (accommodation, safari operators, guides, transport).
• Communicate with you before, during and after your trip.
• Keep records required for our business and to meet legal obligations.
• Maintain, secure and improve the website.

If you contact us through a Facebook or Instagram lead form, we use your answers only to reply to that enquiry, prepare a suitable itinerary or quotation, and follow up with you about it through the contact details you provided.

Where data-protection law such as the GDPR or UK GDPR applies to you, we rely on these legal bases: steps taken at your request before entering into a contract (to answer your enquiry — including a lead-form enquiry — and prepare an itinerary or quote), performance of a contract (to plan and deliver a trip you have booked), your consent (for example, optional marketing or certain cookies), our legitimate interests (to run and improve our business and respond to enquiries), and compliance with legal obligations.

We share your information only where it is needed to deliver your trip or run the website:

• Travel suppliers — hotels and guesthouses, safari and boat operators, licensed guides and transport providers involved in your itinerary.
• Service providers — our email delivery provider (Resend), our email and messaging services (Google Gmail and WhatsApp), and our website hosting and analytics (Google Analytics) providers, who process data for us to provide their services.
• Meta Platforms — if you use a Facebook or Instagram lead form, the form is provided by Meta (for users in the EU, Meta Platforms Ireland Limited), which collects your answers and makes them available to us. Meta also processes this information under its own terms and Privacy Policy.
• Authorities — where we are required to by law, or to protect our rights.

We do not sell your personal information, and we do not share it for third-party advertising.

We are based in Sri Lanka, and some of our service providers operate in other countries. This means your information may be processed outside the country you live in, including places whose data-protection laws differ from your own. In particular, we manage enquiries from Sri Lanka, and our service providers — including Meta, Google and Resend — may process data in the United States and other countries. Where required, we take reasonable steps to ensure your information remains protected when it is transferred.

The site uses a small number of cookies and similar technologies to function properly and, through Google Analytics, to understand in aggregate how visitors use it. For visitors in the EEA, the UK and Switzerland, analytics cookies are only used if you accept them in our cookie banner. We do not currently use advertising cookies or tracking pixels on this website. You can control or block cookies through your browser settings; blocking some may affect how parts of the site work.

We keep your information for as long as we need it to handle your enquiry and, if you travel with us, to deliver and support your trip and keep the records our business and the law require. If an enquiry — including a lead-form enquiry — does not lead to a booking, we keep it only for as long as it is reasonably useful to follow up on that enquiry or respond to a renewed request from you, and then delete it. When we no longer need your information, we delete it or anonymise it.

Depending on where you live — including under the GDPR, the UK GDPR, and Sri Lanka's Personal Data Protection Act No. 9 of 2022 — you may have the right to access the personal information we hold about you, to have it corrected or deleted, to object to or restrict how we use it, to receive a copy in a portable format, and to withdraw consent where we rely on it (this does not affect processing that took place before you withdrew it).

To exercise any of these rights, email us at topguidesrilanka@gmail.com. We will respond within one month, as the GDPR requires where it applies. If you are in the EU or UK, you also have the right to complain to your local data-protection supervisory authority — in France, the CNIL (cnil.fr).

We take reasonable technical and organisational measures to protect your information. No website or transmission over the internet is completely secure, so while we work to protect your data we cannot guarantee absolute security.

This website and our services are intended for adults. We do not knowingly collect information directly from children. Family trips are booked by an adult, who is responsible for the details provided for any minors in the party.

Our site may link to third-party websites (for example, social media or supplier pages). We are not responsible for their content or privacy practices; please review their own policies.

We may update this policy from time to time. The date at the top shows when it was last revised, and any changes take effect once posted here.

If you have any questions about this policy or your personal information, or want to make a privacy request, contact us directly: email topguidesrilanka@gmail.com, WhatsApp or phone +94 76 271 9699, or write to Top Guide Sri Lanka, Thannepita RD, 12/200 Street, Pimbura, Agalawatta, Sri Lanka. You can also reach us through our Contact page.