Last updated: date]

Who we are

Ceylon Routes ("we", "us", "our") is a UK-based travel company.

Registered company name] | Company number: Companies House number] | Registered address: address] | Contact: email address] / phone number]

We are the data controller for the personal information described in this policy.

What information we collect

• Contact details: name, email address, phone number, postal address
• Booking details: travel dates, destinations, passenger names, passport and visa information where required by a supplier, visa authority, or by law
• Payment information: processed securely by our payment provider — we do not store full card details ourselves
• Special requirements: dietary, accessibility, or medical information you choose to share, only where relevant to your booking
• Communications: records of emails, calls, or messages between us
• Website usage data: collected via cookies and similar technologies (see Cookies section below)

How we use your information

• To arrange and manage your travel booking or visa application
• To communicate with you about your booking, including changes or important updates from suppliers
• To meet legal and regulatory obligations, including immigration, customs, and security requirements imposed by airlines, governments, or relevant visa and immigration authorities
• To send you marketing communications, only where you have given consent, and you may withdraw this at any time
• To improve our website and services

Who we share your information with

We share the minimum information necessary with:

• Airlines, hotels, tour operators, cruise lines, and our trusted travel and booking partners, in order to fulfil your booking
• Relevant visa or immigration authorities, where you engage our visa facilitation services
• Payment processors, to handle transactions securely
• Government authorities, where required by law (e.g. border control, visa processing)
• Professional advisors (e.g. accountants, solicitors), where necessary for our business operations

We do not sell your personal information to third parties.

International transfers

Because travel bookings inherently involve suppliers based outside the UK, your information may be transferred to countries outside the UK/EEA. Where this happens, we take reasonable steps to ensure it is handled securely and in line with applicable data protection law.

How long we keep your information

We retain personal information for as long as necessary to fulfil the purposes described in this policy, and to meet our legal, accounting, or reporting obligations, after which it is securely deleted or anonymised.

Your rights

Under UK data protection law, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information, where applicable
• Object to or restrict certain processing
• Request a copy of your information in a portable format
• Withdraw consent for marketing at any time
• Complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled

Cookies

Our website uses cookies to help it function properly and to understand how visitors use our site. You can control cookie preferences through your browser settings.

(Add specific cookie categories/names once the website's cookie audit is complete

Children's data

Where a booking includes a child dependant, we only collect the minimum information necessary (e.g. name, date of birth, passport details) and only with the consent and involvement of a parent or legal guardian.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect the most recent changes.

Contact us

stephani@ceylonroutes.com | +44 7865 056 555 | No 7 Silver Street, Enfield EN1 3EF