Privacy Policy

Last updated: 21 October 2026

This policy explains what personal information My Sri Lankan Guide collects, why, who we share it with, how long we keep it and the choices you have. We've written it to describe exactly how our website works.

1. Who we are

My Sri Lankan Guide (mysrilankanguide.com, "we", "us") is a Sri Lanka travel planning website based in Sri Lanka. We publish travel guides and run a free service that introduces travellers to verified local travel agencies, who can send them tailored quotes. You can contact us about privacy at info@mysrilankanguide.com.

We aim to follow Sri Lanka's Personal Data Protection Act, No. 9 of 2022, and, where they apply to you, other data protection laws such as the UK and EU General Data Protection Regulation (GDPR).

2. Information we collect

Information you give us

Trip requests (Plan Your Trip): your name, email, optional WhatsApp or phone number, country, preferred language and contact method, travel dates or month, trip length, number of adults and children, budget, interests, travel style, places you mention and any notes you add. Please don't include sensitive information (such as health details) in notes unless it's needed for your trip.
Your trip page: messages you exchange with agencies, offers you accept or decline, and any problem you report.
Contact form: your name, email, optional phone number, subject and message.
Tour booking requests: your name, email, phone number, the tour, preferred date, number of guests and extras.
Newsletter: your email address.
Partner agencies: business and contact details, licence or registration numbers, service areas, languages, logo and profile text, and sign-in details (passwords are stored only in scrambled, one-way form). If lead credits are in use, we also keep a record of credits bought, used and refunded, with payment amounts and bank references.

Information collected automatically

Security and spam prevention: we turn your IP address into a one-way code to limit repeated submissions and protect accounts. We don't store your IP address itself in our database. Our hosting provider keeps standard server logs.
Cookies: a session cookie on sign-in and trip pages, and cookies from Google Analytics and Google AdSense. See our Cookie Policy.

3. How we use your information

To handle your trip request: to match you with suitable agencies, show their quotes on your private trip page, pass messages between you and send you service emails (each includes the link to your trip page). We do this to provide the service you asked for.
To share your trip with agencies, only if you tick the box agreeing to it (see section 4).
To reply to contact messages and tour booking requests.
To send our newsletter, if you subscribed. You can unsubscribe at any time using the link in any newsletter or by emailing us.
To keep the site secure, prevent spam and fraud, and investigate reports. This is in our legitimate interest and yours.
To understand how the site is used and to show ads (Google Analytics and AdSense). Where the law requires it, we ask for your consent first.
To meet legal obligations, for example responding to lawful requests from authorities.

We don't sell your personal information, and we don't use it for automated decisions that have legal or similarly significant effects on you.

4. Who we share it with

Verified partner agencies

If you agree when you send a trip request, we share your trip with up to three verified Sri Lankan travel agencies (or the number shown when you submitted it). Before you accept a quote, agencies see your trip details and your first name, country and preferred language, but not your email address or phone number. You and the agencies can message each other through your trip page.

When you accept a quote, that one agency receives your full name, email, phone number (if you gave one) and preferred contact method, so it can confirm your booking. From then on, that agency handles your information under its own privacy policy as an independent business, and any booking is between you and the agency.

If you don't agree to sharing, your request is handled only by our own team and isn't shown to any agency.

Service providers

Hostinger: hosts our website and database, and delivers our emails.
Google: Google Analytics (visitor statistics) and Google AdSense (advertising). Google may use cookies as described in our Cookie Policy and in how Google uses information from sites that use its services.
WhatsApp (Meta): only if you choose to contact us on WhatsApp, under WhatsApp's own terms and privacy policy.

We may also disclose information if the law requires it, to protect people's safety, or as part of a sale or reorganisation of our business (in which case this policy would continue to apply).

5. International transfers

Our travellers live all over the world, our partner agencies are in Sri Lanka and our service providers may process data in other countries. This means your information may be transferred to and stored in countries other than your own, which may have different data protection laws. Where required, we rely on appropriate safeguards offered by our providers.

6. How long we keep it

Trip requests, offers and messages: until 24 months after your trip date (or after your request, if you didn't give dates). After that, your name, contact details, notes and messages are deleted automatically. We keep anonymous trip facts, such as dates, group size and interests, for statistics.
Contact messages and tour booking requests: 24 months.
Copies of emails we send: 12 months.
Newsletter: until you unsubscribe or ask us to remove you.
Partner agency accounts: while the account is open, and afterwards only as long as needed for records, disputes or legal reasons. Payment and credit records are kept for as long as accounting and tax laws require.
Security records: up to 24 months.

7. Your rights

Depending on where you live, you can ask to see the information we hold about you, correct it, delete it, object to or restrict how we use it, or withdraw consent you've given (this doesn't affect what we did before you withdrew it). You can also complain to a data protection authority: in Sri Lanka, the Data Protection Authority; in the UK, the Information Commissioner's Office; in the EU, the authority in your country.

Delete your trip data yourself: open your trip page and choose Delete my data. This removes your name, email, phone number, notes and messages and withdraws any open request.
Lost your trip page link? Get it emailed again at mysrilankanguide.com/my-trip/lost.php.
Anything else: email info@mysrilankanguide.com. We may need to confirm your identity, and we aim to reply within one month.

If you had already accepted an agency's quote, that agency holds its own copy of your contact details. Please contact it directly too.

8. How we protect it

We use HTTPS encryption for the whole site; private, hard-to-guess links for trip pages; scrambled storage for passwords; encrypted storage for trip-page links; limits on repeated attempts; and access controls so each agency sees only the requests sent to it. No system is perfectly secure, but we work to protect your information and to act quickly if something goes wrong.

9. Children

Our services are for adults planning travel. Trip requests should be made by an adult. When you tell us how many children are travelling, we record only the number.

10. Changes to this policy

We'll update this page if our practices change and show the new date at the top. If a change significantly affects how we use your information, we'll make it clear on the site or tell you by email where appropriate.

11. Contact

Questions or requests about your personal information: info@mysrilankanguide.com.