Privacy Policy

Last Updated: May 2026

We respect your privacy and are committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, create an account, or book a tour reservation. By using our platform, you consent to the data practices described in this policy.

1. Information We Collect

We collect information that identifies, relates to, or could reasonably be linked to you. This includes:

Account & Identity DataFirst name, last name, email address, and profile details provided securely via our authentication provider, Clerk.
Booking DetailsCheck-in/arrival dates, traveler counts, destination preferences, custom trip notes, tour reviews, and scheduling details.
Transaction MetadataWhen you initiate payments, we store your dynamic tracking IDs, payment methods used (PayHere), billing indicators, and raw transaction statuses. We do not collect or store credit/debit card numbers on our servers.

2. How We Use Your Information

We utilize the collected information strictly for business operational integrity:

To authenticate user accounts and manage active traveler profile contexts.
To process, modify, and display your tour itineraries inside your /reservations dashboard.
To coordinate securely with our financial payment processors to verify successful transactions.
To communicate essential updates, service adjustments, or customer support responses regarding your bookings.

3. Data Protection & Secure Third-Party Services

We partner with industry-leading, compliant platforms to process your data safely:

User Authentication (Clerk)Your login credentials, multi-factor settings, and identity assertions are managed safely by Clerk's secure infrastructure.

Payment Gateways (PayHere)All credit card numbers, CVVs, and secure bank processing protocols take place entirely inside PayHere’s encrypted iframe/hosted modal windows. Our platform only receives an encrypted tracking string token and a success/failure status code webhook response.

Data StorageYour platform application records are securely housed in an encrypted PostgreSQL database. All internal data transitions are secured using standard SSL/HTTPS protocols.

4. Cookies and Session Management

We use standard local browser storage tokens and essential cookies to maintain secure user login states, remember booking form inputs while you customize packages, and optimize page performance. You can choose to disable cookies through your browser settings, though doing so may prevent you from logging in or retaining active reservation items.

5. Data Retention & Your Rights

We retain your account profile and booking logs for as long as your account remains active or as required to fulfill legal tax and accounting requirements. You retain full rights to:

Access, update, or correct your personal information directly through your dashboard profile settings.
Request the absolute deletion of your personal account records and reservation logs by dropping an electronic query to our data support queue.

6. Updates to This Policy

We reserve the right to modify this Privacy Policy at any time to align with changing digital regulations or structural upgrades. The "Last Updated" date at the bottom of this page will reflect the latest version timeline.

For data inquiries or privacy-related questions, contact us at [email protected]