Last Updated: January 11, 2026

At Garci Lanka Holiday, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://garcilanka.com or use our travel services.

By using our website and services, you consent to the practices described in this Privacy Policy. Please read this policy carefully to understand our views and practices regarding your personal data.

1. Information We Collect

1.1 Personal Information You Provide

We collect information that you voluntarily provide to us when you:

• Fill out inquiry or booking forms on our website
• Contact us via email, phone, or contact forms
• Request customized tour packages or travel information
• Subscribe to our newsletter
• Participate in promotions or surveys
• Provide feedback or testimonials

This information may include but is not limited to:

• Full name
• Email address
• Phone number
• Mailing address
• Travel preferences and requirements
• Passport information (when required for bookings)
• Payment information (processed securely)
• Special requests or dietary requirements
• Emergency contact information

1.2 Information Automatically Collected

When you visit our website, we automatically collect certain information about your device and browsing behavior, including:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent on pages
• Referring website or source
• Geographic location (based on IP address)
• Date and time of visit
• Click patterns and navigation paths

1.3 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance your browsing experience, analyze site traffic, and understand user preferences. For detailed information about our use of cookies, please see Section 5 below.

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Service Delivery

• Processing and managing your tour bookings
• Creating customized travel itineraries
• Arranging accommodations, transportation, and activities
• Communicating important travel updates and information
• Providing customer support and assistance
• Handling inquiries and responding to questions

2.2 Communication

• Sending booking confirmations and travel documents
• Providing pre-travel and post-travel information
• Sending newsletters and promotional offers (with your consent)
• Notifying you about special deals and packages
• Requesting feedback on your travel experience

2.3 Business Operations

• Improving our website functionality and user experience
• Analyzing trends and customer preferences
• Conducting market research and analysis
• Preventing fraud and ensuring security
• Complying with legal and regulatory requirements
• Maintaining business records and accounting

2.4 Marketing and Personalization

• Personalizing your website experience
• Showing relevant tour packages and destinations
• Sending targeted marketing communications
• Measuring the effectiveness of our marketing campaigns

3. How We Share Your Information

We may share your personal information with the following parties:

3.1 Service Providers

We work with trusted third-party service providers to deliver our travel services, including:

• Hotels, resorts, and accommodation providers in Sri Lanka and internationally
• Transportation companies (airlines, car rentals, buses)
• Tour guides and local activity operators
• Payment processors and financial institutions
• Travel insurance providers
• Email marketing platforms (e.g., Mailchimp)
• Website hosting and analytics providers

3.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes or government requests
• Enforce our terms and conditions
• Protect our rights, property, or safety
• Protect the rights and safety of our customers
• Prevent fraud or illegal activities

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

3.4 With Your Consent

We may share your information with other parties when you have given us explicit consent to do so.

4. Data Security

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it, including:

• Encryption of sensitive data during transmission (SSL/TLS)
• Secure storage systems with access controls
• Regular security assessments and updates
• Employee training on data protection practices
• Limited access to personal information on a need-to-know basis
• Secure payment processing through trusted providers

However, please note that no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

5. Cookies and Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files placed on your device when you visit our website. They help us recognize your browser and capture certain information about your preferences and behavior.

5.2 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly, including navigation and access to secure areas
• Performance Cookies: Collect information about how visitors use our website to help us improve functionality
• Functionality Cookies: Remember your preferences and provide enhanced features
• Analytics Cookies: Help us understand user behavior and traffic patterns
• Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness

5.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to:

• View and delete cookies
• Block all cookies
• Block third-party cookies
• Clear cookies when you close your browser

Please note that blocking or deleting cookies may affect your website experience and limit certain functionalities.

6. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, and services, including:

• Facebook, Instagram, and other social networks
• Google Maps for location services
• Payment gateways
• Partner websites and affiliate links

We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review their privacy policies before providing any personal information.

7. Data Retention

We retain your personal information for as long as necessary to:

• Fulfill the purposes outlined in this Privacy Policy
• Provide you with services and support
• Comply with legal, regulatory, or accounting requirements
• Resolve disputes and enforce our agreements
• Maintain business records

Once your information is no longer needed, we will securely delete or anonymize it in accordance with our data retention policies.

8. Your Rights and Choices

Depending on your location and applicable laws, you may have the following rights:

8.1 Access and Correction

You have the right to request access to your personal information and request corrections if it is inaccurate or incomplete.

8.2 Deletion

You can request that we delete your personal information, subject to certain legal exceptions and business requirements.

8.3 Marketing Communications

You can opt out of receiving marketing emails by:

• Clicking the "unsubscribe" link in any marketing email
• Contacting us at hello@garcilanka.com
• Updating your preferences through your account settings

Please note that even if you opt out of marketing communications, we may still send you important service-related messages regarding your bookings.

8.4 Data Portability

You may request a copy of your personal information in a structured, commonly used, and machine-readable format.

8.5 Objection and Restriction

You can object to or request restrictions on certain types of data processing, such as direct marketing or profiling.

To exercise any of these rights, please contact us using the information provided in Section 12 below.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information promptly. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Garci Lanka Holiday is based in Sri Lanka. If you are accessing our services from outside Sri Lanka, please be aware that your information may be transferred to, stored, and processed in Sri Lanka or other countries where our service providers operate. By using our services, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website with a new "Last Updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

13. Your Consent

By using our website and services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our website or services.