Privacy Policy

Last updated: 4 November 2026

This policy explains what personal information Paradise Holidays collects when you visit this website, send us an enquiry or travel with us, how we use it, and the choices and rights you have. If anything is unclear, please contact us using the details below.

1. Who we are

Paradise Holidays Pvt Ltd is a tour operator based in Sri Lanka. We are responsible for the personal information described in this policy.

Paradise Holidays Pvt Ltd
No 35/29, Fathima Gardens, Makola, Sri Lanka
Email: sam@paradiseholidays.lk
Telephone / WhatsApp: +94 77 748 5364

2. Information we collect

When you send an enquiry through our website, we collect the details you enter in the form: your name, email address, phone or WhatsApp number (optional), home country, preferred travel month, length of trip, number of adults and children, the types of holiday that interest you, an approximate budget (optional) and any message you write. We also record which page of our website you sent the enquiry from.

When you contact us directly by email, telephone or WhatsApp, we receive the information you choose to share in that conversation.

If you book a holiday with us, we will ask for the further details needed to arrange and operate your trip. We will explain what is needed at that stage.

When you browse our website, some technical information (such as your browser type, device, approximate location derived from your IP address and the pages you view) may be collected through cookies and similar technologies. See sections 6 and 10.

3. How we use your information

To reply to your enquiry and prepare a tailor-made itinerary and quotation for you.
To arrange, confirm and operate your holiday if you decide to book.
To keep records needed for accounting, tax and other legal requirements.
To protect our website and enquiry form from spam and misuse.
To understand, in general terms, how visitors use our website so that we can improve it.

We do not sell your personal information.

4. Our legal bases (for visitors in the UK and European Economic Area)

Where the UK or EU General Data Protection Regulation (GDPR) applies, we rely on the following legal bases:

Steps you ask us to take before a contract, and performance of a contract: replying to your enquiry, preparing a quote and arranging a booked trip.
Legal obligation: keeping records we are required to keep by law.
Legitimate interests: protecting our website from spam and misuse and understanding how our website is used, balanced against your rights.
Consent: where the law requires your consent, for example for certain cookies. You can withdraw consent at any time.

5. Who we share your information with

Suppliers who provide your holiday: if you book, we share the details they need with the hotels, drivers, guides and activity providers who deliver the services in your itinerary.
Service providers who help us run our business: for example, the companies that host our website and provide our email and the online tools described in section 6. They may only use your information to provide their services to us.
Authorities: where we are required to do so by law.

6. Third-party services used on this website

Our website uses the following third-party services, which may collect information about your visit under their own privacy policies:

Google Analytics (Google), to produce statistics about how our website is used.
Jetpack and WordPress.com (Automattic), for website statistics, security and site features.
Akismet (Automattic) and the spam protection built into our enquiry form, to check submissions for spam.
Google Maps (Google), for maps embedded on some pages.
Instagram and Facebook (Meta), for social media content, sharing buttons and chat features on our website.
WhatsApp (Meta), if you choose to message us on WhatsApp.

7. International transfers

We are based in Sri Lanka, so if you contact us from another country your information will be transferred to and handled in Sri Lanka. Some of the service providers listed above may also process information in other countries. Where the law requires it, we take reasonable steps to make sure your information remains protected.

8. How long we keep your information

We keep your information only for as long as we need it for the purposes described in this policy. This includes the time needed to answer your enquiry and follow it up, to arrange and operate any holiday you book, and to meet our legal, accounting and tax obligations. After that, we delete it or keep it in a form that no longer identifies you.

9. Keeping your information secure

We take reasonable technical and organisational measures to protect your personal information. Our website uses an encrypted (HTTPS) connection. No method of sending or storing information over the internet is completely secure, but we work to protect the information you give us.

10. Cookies

Cookies are small text files stored on your device when you visit a website. We and the third-party services listed in section 6 use cookies to make the website work, to keep it secure and to understand how it is used. You can block or delete cookies through your browser settings. If you block cookies, some parts of the website may not work as expected.

11. Your rights

Depending on where you live, you may have the right to:

ask for a copy of the personal information we hold about you;
ask us to correct information that is inaccurate or incomplete;
ask us to delete your information;
object to, or ask us to restrict, how we use your information;
ask us to transfer your information to another organisation;
withdraw your consent where we rely on consent.

To make a request, email sam@paradiseholidays.lk. We may need to confirm your identity before acting on a request. We will respond within the time limits required by law.

If you are not satisfied with how we have handled your information, you may also complain to the data protection authority where you live. For example, this is the Information Commissioner’s Office (ICO) in the UK, your national supervisory authority in the EU, or the Office of the Australian Information Commissioner (OAIC) in Australia. We would appreciate the chance to resolve your concern first.

12. Children

Our website is not intended for children. We only collect information about children when a parent or guardian provides it as part of a family enquiry or booking.

13. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page, with the date it was last updated shown at the top.