Privacy Policy

Depending on how you interact with us, we may collect:

• Identity and contact details, such as your name, email address, telephone number, country of residence, and preferred contact method;
• Trip-planning details, including intended travel dates, party composition, interests, budget, accommodation preferences, special requests, and notes;
• Traveller informationneeded to arrange a confirmed journey, which may include passport details, dietary needs, accessibility requirements, or other information you choose to provide;
• Communications, such as emails, WhatsApp messages, call notes, feedback, and support requests; and
• Technical information, such as IP address, device and browser type, pages requested, and basic security or server-log information generated when the website is accessed.

Please avoid sending sensitive information that is not needed for your enquiry. If health, dietary, mobility, or similar information is necessary for safe travel arrangements, we will use it only for that purpose and with an appropriate legal basis.

We collect information:

• directly from you when you complete the trip planner, email, call, message, or make a booking;
• from another person arranging travel on your behalf, where they are authorised to provide your details;
• from travel suppliers when needed to manage a booking or respond to a service issue; and
• automatically through website hosting, security, and server logs.

We may use personal information to:

• respond to enquiries and communicate with you;
• design, quote, book, and manage a personalised journey;
• coordinate accommodation, transport, guides, activities, and other travel services;
• provide support before, during, and after travel;
• manage payments, records, complaints, and legal obligations;
• protect the website, our guests, and our business from misuse;
• improve our website and travel-planning service; and
• send marketing only where you have requested it or where otherwise permitted by applicable law, with a way to opt out.

Where applicable law requires a legal basis, we rely on one or more of the following: your consent; steps taken at your request before entering a contract; performance of a contract; compliance with a legal obligation; protection of a person’s vital interests; or our legitimate interests in operating, securing, and improving our services where those interests are not overridden by your rights.

We may share relevant information with:

• hotels, transport providers, guides, activity operators, and other suppliers involved in your requested or confirmed journey;
• website hosting, communications, payment, IT, and professional service providers working for us;
• insurers, emergency services, or relevant authorities where needed to protect travellers or comply with law; and
• a purchaser, investor, or successor if our business is reorganised or transferred, subject to appropriate confidentiality protections.

We do not sell personal information. We share only what is reasonably needed for the relevant purpose and expect service providers to protect it appropriately.

Travel planning and website services may involve providers located in Sri Lanka and other countries. Where personal information is transferred across borders, we take reasonable steps to use an appropriate legal mechanism and safeguards required by applicable law. Data-protection standards may differ between countries.

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including responding to an enquiry, managing a journey, maintaining financial and business records, resolving disputes, and meeting legal obligations. Retention periods vary according to the type of information and the applicable requirements. When information is no longer needed, we take reasonable steps to delete, anonymise, or securely dispose of it.

We use reasonable technical and organisational measures designed to protect personal information against accidental loss, misuse, unauthorised access, alteration, or disclosure. No website, email, or internet transmission can be guaranteed completely secure, so please use care when deciding what to send electronically.

Depending on the law that applies to you, you may have rights to ask whether we process your personal information, request access or a copy, correct inaccurate information, withdraw consent, object to certain processing, request erasure, or seek review of a decision. Some rights are subject to legal conditions and exceptions.

To make a request, email info@cheescapes.com. We may need to verify your identity before acting. You may also have the right to contact the Data Protection Authority of Sri Lanka, or another regulator available under applicable law.

Our website is intended for adults arranging travel. A parent, guardian, or authorised adult may provide information about a child where needed to plan family travel. Please do not allow a child to submit personal information directly without appropriate adult involvement.

This version of the website does not intentionally use advertising or behavioural-analytics cookies. Our hosting and security providers may process basic technical logs needed to deliver and protect the website. If we introduce non-essential cookies, we will update this Policy and provide any consent controls required by law.

Links to WhatsApp, social networks, travel suppliers, or other external services take you to websites governed by their own privacy policies. We encourage you to review those policies before providing information.

We may update this Privacy Policy when our practices, services, or legal obligations change. We will publish the revised version on this page and update the date above. If a change materially affects how we use information already collected, we will take any additional steps required by applicable law.

For privacy questions, requests, or concerns, contact CHÉ Escapes at:

Email: info@cheescapes.com
Phone: +94 77 849 3085
Location: Sri Lanka