Privacy Policy
Effective date: 1 August 2026 — Exemplary Voyages (Pvt) LtdExemplary Voyages ("we", "us", "our") is committed to protecting and respecting your privacy in accordance with the EU General Data Protection Regulation (GDPR) and applicable Sri Lankan data protection law. This policy explains how we collect, use, store and protect your personal data when you visit our website or enquire about our services.
1. Who We Are
Data Controller: Exemplary Voyages (Pvt) Ltd, No. 36, Temple Lane, Colombo 03, Sri Lanka. Contact: inquiries@exemplaryvoyages.com
2. What Data We Collect
We may collect the following categories of personal data:
- Contact information: name, email address, telephone number and country of residence provided through our enquiry or planning forms.
- Travel preferences: destination interests, travel dates, group size, dietary requirements and special requests you share with us.
- Correspondence: emails, WhatsApp messages and other communications with our team.
- Website usage data: pages visited, time on site and device/browser information collected via cookies (subject to your consent).
3. Legal Basis for Processing
We process your data on the following legal bases: (a) your consent, given freely and withdrawable at any time; (b) the performance of a contract or pre contractual steps at your request; (c) our legitimate interests in operating a travel consultancy business; and (d) compliance with legal obligations.
4. How We Use Your Data
Your data is used to: respond to enquiries; design and confirm travel itineraries; send relevant updates about your journey; improve our website and services; and comply with legal and regulatory requirements. We do not use your data for unsolicited direct marketing without your explicit consent.
5. Data Sharing
We share your data only with: hotels, airlines, ground operators and service providers necessary to fulfil your journey; regulatory or government authorities as required by law; and our technology partners (e.g. Google Analytics) under strict data processing agreements. We do not sell your personal data to any third party.
6. International Transfers
As a Sri Lanka based business serving European clients, some data transfers occur between the EU and Sri Lanka. Where required by GDPR, we rely on Standard Contractual Clauses or equivalent safeguards for such transfers.
7. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected: enquiry data is retained for 12 months; booking and financial records are retained for 7 years to meet statutory requirements; marketing consent records are retained until consent is withdrawn.
8. Your Rights (GDPR)
If you are based in the European Economic Area, you have the right to: access your personal data; correct inaccurate data; request erasure ("right to be forgotten"); restrict or object to processing; data portability; and withdraw consent at any time. To exercise any of these rights, contact us at inquiries@exemplaryvoyages.com. You also have the right to lodge a complaint with your national data protection authority.
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. Our website uses HTTPS encryption for all data in transit.
10. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via our website or by email. Continued use of our services after an update constitutes acceptance of the revised policy.
Questions? Contact our privacy team at inquiries@exemplaryvoyages.com.