Privacy Policy & GDPR Compliance
Our commitment to protecting the confidentiality, security, and integrity of your personal information.
1. Commitment to Client Privacy
At **Holiday Lanka**, protecting the confidentiality, security, and integrity of our global guests' personal information is of paramount importance. As a licensed destination management company serving High-Net-Worth Individuals (HNWIs) and Western European travelers, we adhere strictly to the **EU General Data Protection Regulation (GDPR)** and international data security standards.
2. Information We Collect
To curate bespoke itineraries, secure private helicopter charters, and reserve 5-star boutique accommodations, we collect only essential personal data:
- **Personal Identifiers:** Full names, nationalities, email addresses, and phone numbers.
- **Travel Documentation:** Passport information required for aviation clearances and luxury hotel check-ins.
- **Customisation Preferences:** Dietary preferences, medical requirements, and specific interest details to tailor your concierge service.
3. How We Process & Protect Your Data
Your data is never sold, leased, or distributed to third-party marketers. Data is shared exclusively with vetted operational partners (such as private chauffeur drivers, charter pilots, and luxury estate managers) strictly on a need-to-know basis.
4. Your European Rights Under GDPR
As a European resident, you retain the following statutory rights under GDPR:
- **Right of Access:** Request a complete transcript of all personal data held by Holiday Lanka.
- **Right to Rectification:** Request immediate corrections to any inaccurate profile details.
- **Right to Erasure ("Right to be Forgotten"):** Request full deletion of your client records upon completion of your journey.
5. Data Protection Officer Contact
If you have questions regarding our privacy practices or wish to exercise your GDPR rights, please contact our Data Protection Officer: