Current as of 20 Jan 2022
Privacy Policy
This Privacy Policy explains how Watching Lanka, operated by Travel AI (PVT) Ltd, collects, uses, shares and protects personal data when you visit the website, contact us or make a booking.
1. Who Is Responsible for Your Data
- Travel AI (PVT) Ltd is responsible for personal data processed through this website, except where an independent supplier or payment provider acts separately under its own privacy policy.
- Privacy questions may be sent to booking@watchinglanka.com.
2. Personal Data We Collect
- Identity and contact details, including name, email address, phone number, country and identification details when required for an activity.
- Booking details, including activity, date, participants, pickup location, special requests and traveler information.
- Payment and transaction information, such as payment status, amount, currency and payment-provider references. We generally do not store full card details.
- Account, login and verification information, including OTP and authentication records.
- Technical information, including IP address, browser, device, cookies, approximate location and website usage.
- Communications, support requests, reviews, survey responses and other information you choose to provide.
3. How We Use Personal Data
- To create, confirm, manage, change and complete bookings.
- To communicate booking details, payment updates, reminders, operational changes and customer support messages.
- To share required information with activity operators, drivers, guides, hotels, payment providers and other service partners.
- To prevent fraud, protect accounts, maintain security and enforce our policies.
- To improve website performance, products, listings and customer experience.
- To send marketing communications where you have consented or where otherwise permitted, with an option to unsubscribe.
- To comply with legal, tax, accounting, regulatory and dispute-resolution obligations.
4. Reasons for Processing
- We process personal data where needed to perform a booking contract, comply with legal obligations, protect legitimate business and security interests, or act with your consent where consent is required.
5. Who We Share Data With
- Relevant tour, activity, transport, accommodation and other service providers.
- Payment processors, cloud hosting, email, messaging, analytics, customer-support and technology providers.
- Professional advisers, insurers, auditors, regulators, law-enforcement bodies or courts where legally required.
- A buyer, investor or successor if our business or assets are reorganized, subject to appropriate confidentiality and legal safeguards.
- We do not sell personal data as a standalone product.
Stripe Payment Processing
- We may use Stripe to process online payments.
- When you make a payment, Stripe may collect and process information such as your name, email address, billing details, payment-method information, IP address, device information and transaction details.
- Stripe may use this information to process payments, prevent fraud, perform security checks and comply with legal requirements.
- When Stripe Checkout or Stripe Payment Element is used, your complete card details are securely submitted directly to Stripe.
- Travel AI (PVT) Ltd does not store your full card number or card security code on its servers.
- Stripe processes personal data according to its own privacy policy and applicable data protection laws.
6. International Data Transfers
- Some suppliers and technology providers may process data outside your country. Where required, we use appropriate contractual, organizational or legal safeguards for international transfers.
7. Cookies and Similar Technologies
- We may use essential cookies for login, cart, security and booking functions.
- With consent where required, we may use analytics, preference and marketing cookies.
- You can manage non-essential cookies through the cookie settings or your browser, although disabling essential cookies may affect website functions.
8. Retention and Security
- We keep personal data only as long as reasonably necessary for bookings, support, accounting, legal compliance, fraud prevention and dispute handling.
- We use reasonable technical and organizational safeguards, but no online system can guarantee absolute security.
9. Your Privacy Rights
- Depending on applicable law, you may request access, correction, deletion, restriction, objection, withdrawal of consent or a copy of certain personal data.
- Some requests may be limited where data must be retained for legal, security, accounting or contractual reasons.
- You may also complain to the relevant data protection or consumer authority.
10. Children's Data
- Our booking services are intended to be used by adults. Information about a child should be submitted only by a parent, guardian or authorized adult and only where needed for the booking.
11. Third-Party Services
- The website may link to independent websites or services. Their privacy practices are controlled by their own policies, not this Privacy Policy.
12. Updates and Contact
- We may update this Privacy Policy and will publish the revised version with a new effective date.
- Privacy requests may be sent to booking@watchinglanka.com. General support requests may be sent to booking@watchinglanka.com.
