Exploristers

Privacy Policy

1. Introduction

Exploristers is committed to protecting the privacy and personal data of our customers and website visitors. This Privacy Policy explains what personal information we collect, how we use it, how we protect it and your rights in relation to it.

This policy applies to all personal data collected through our website, booking forms, email correspondence and any other means by which you interact with us. By using our services, you consent to the collection and use of your information in accordance with this policy. We process personal data in accordance with applicable Sri Lankan data protection laws and any other applicable legislation.

2. Personal Data We Collect

We collect only the personal data that is necessary for us to provide our services effectively and safely. The categories of personal data we may collect include:

2.1 Identity and Contact Information

We collect basic personal information necessary to identify you and maintain communication throughout your booking. This includes your full name, email address, telephone number and postal address. This information allows us to confirm your reservation, send you relevant tour details and updates, issue invoices and reach you in the event of any changes or emergencies relating to your booking.

2.2 Passport and Identification Information

For certain tours, particularly multi-day or overnight tours, we may collect passport or national identity document details, including document number, nationality, date of birth and date of expiry. This information may be required for local permits, accommodation check-in or legal compliance.

2.3 Payment Information

We collect payment details as necessary to process your booking. Payment card information is handled exclusively by our authorised payment processors and is not stored on our systems.

2.4 Health and Medical Information

For adventure tours or tours with physical demands, we may collect relevant health or medical information to ensure your safety and the safety of others. You are not obliged to provide this information; however, we may be unable to accept your booking if health information is essential for safe participation.

2.5 Website Usage Data

We collect anonymised data about how visitors use our website through Google Analytics. This may include pages visited, duration of visit, browser type, device type and approximate geographic location. This data does not identify you personally.

3. How We Collect Your Data

We collect personal data through the following means:

  • Online booking forms on our website
  • Email, telephone or written correspondence
  • In-person interactions during tours
  • Cookies and website analytics tools

4. How We Use Your Personal Data

We use your personal data for the following purposes:

  • To process and manage your booking and confirm your reservation
  • To communicate with you regarding your tour itinerary, changes or updates
  • To comply with legal requirements, including those relating to permits and immigration
  • To ensure the safety and welfare of all participants on our tours
  • To process payments and issue receipts or invoices
  • To improve our services and website based on aggregated usage data
  • To send you promotional materials or special offers, where you have given your consent to receive such communications

We will not use your personal data for any purpose that is incompatible with the purposes listed above without your consent.

5. Sharing Your Personal Data

We may share your data with the following third parties only to deliver our services.

5.1 Payment Processors

We share payment information with our authorised payment processing partners to facilitate secure transactions. These partners are bound by their own data protection obligations and are prohibited from using your data for any other purpose.

5.2 Local Guides and Tour Partners

Where your tour involves local guides or third-party tour operators, we may share relevant booking and identity information with them to ensure the smooth delivery of your tour.

5.3 Accommodation Providers

For round tours or overnight tours, we may share your name, contact details and identification information with hotels or other accommodation providers, as required for check-in and legal compliance.

5.4 Legal and Regulatory Authorities

We may reveal your personal data to government agencies, law enforcement or other regulatory bodies, where required to do so by law or where we believe such disclosure is necessary to protect the rights, property or safety of Exploristers, our customers or others.

6. Data Storage and Security

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

  • Secure, encrypted storage of personal data
  • Restricted access to personal data on a need-to-know basis
  • Use of secure, reputable payment processors for all financial transactions
  • Regular review of our data security practices

While we take all necessary precautions, no method of electronic storage or transmission is fully secure. We cannot guarantee absolute security and accept no liability for unauthorised access resulting from circumstances beyond our control.

Personal data is retained only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable law. After this period, data will be securely deleted or anonymised.

7. Cookies and Website Analytics

Our website uses cookies and similar tracking technologies to improve your browsing experience and to collect anonymised usage data. We use Google Analytics to understand how visitors interact with our website. Google Analytics sets cookies on your device to collect information such as the number of visitors, pages visited and source of traffic.

The data collected through Google Analytics is anonymised and does not identify you personally. You can opt out of Google Analytics tracking by installing the Google Analytics opt-out browser.

You may adjust your cookie preferences at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

 

8. Your Rights

You have the following rights in relation to your personal data held by Exploristers:

  • Right of Access: You may request a copy of the personal data we hold about you.
  • Right to Rectification: You may request that we correct any inaccurate or incomplete personal data.
  • Right to Erasure: You may request that we delete your personal data, subject to any legal obligations requiring us to retain it.
  • Right to Restriction: You may request that we restrict the processing of your data in certain circumstances.
  • Right to Object: You may object to the use of your data for direct marketing purposes at any time.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us. We will respond to all requests within a reasonable timeframe and in accordance with applicable law.

9. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the handling of your personal data, please contact us at:

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in Sri Lanka.

10. Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The current version will always be available on our website and we encourage you to review this policy periodically.

 

Effective Date: 2 April 2026