Who we are

Ceyltra (PVT) LTD is a Sri Lanka based travel and tourism company providing curated tours, travel experiences, and related services.

Comments

When visitors leave comments on the site, we collect the data shown in the comments form, along with the visitor’s IP address and browser user agent string to help with spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to check if you are using it. The Gravatar service privacy policy is available at | https://automattic.com/privacy/

After approval of your comment, your profile picture (if available) may be visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images available on the site.

Cookies

If you leave a comment on our site, you may opt in to saving your name, email address, and website in cookies. These cookies are for your convenience so you do not have to fill in your details again when leaving another comment. These cookies will last for one year.

If you visit our login page, a temporary cookie will be set to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we set several cookies to save your login information and your screen display preferences. Login cookies last for two days, and screen option cookies last for one year. If you select “Remember Me,” your login will persist for two weeks. Logging out of your account removes the login cookies.

If you edit or publish content on the website, an additional cookie may be stored in your browser. This cookie contains no personal data and simply indicates the ID of the content you edited. It expires after one day.

Embedded content from other websites

Articles or pages on this site may include embedded content (such as videos, images, maps, or articles). Embedded content from other websites behaves in the same way as if you visited that external website directly.

These websites may collect data about you, use cookies, embed third-party tracking, and monitor your interaction with the embedded content, especially if you are logged in to that external service.

Who we share your data with

If you request a password reset, your IP address may be included in the password reset email for security purposes.

We do not sell or rent your personal data to third parties. Data may only be shared with trusted service providers where necessary to operate the website or deliver our services.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This helps us recognize and approve follow-up comments automatically instead of holding them in a moderation queue.

For users who register on our website (if applicable), we store the personal information provided in their user profile. Users can view, edit, or delete their personal information at any time (except their username). Website administrators can also view and edit this information.

What rights you have over your data

If you have an account on this site or have left comments, you may request an exported file of the personal data we hold about you, including any data you have provided.

You may also request that we erase your personal data. This does not include data we are required to keep for administrative, legal, or security purposes.

Where we send your data

Visitor comments may be checked through an automated spam detection service to maintain the security and integrity of our website.

Legal Basis for Processing Personal Data (GDPR)

If you are located in the European Economic Area (EEA), Ceyltra (PVT) LTD processes your personal data under the following lawful bases, as defined by the General Data Protection Regulation (GDPR):

  • Consent | When you voluntarily provide personal information (such as through contact forms, comments, or account registration)
  • Contractual necessity | When data processing is required to provide travel services, bookings, or customer support
  • Legitimate interests | To improve our services, ensure website security, prevent fraud, and enhance user experience
  • Legal obligations | When we must comply with applicable laws and regulations

International Travelers

Ceyltra serves travelers from around the world. By using our website or services, you acknowledge that your information may be transferred to, stored, or processed in Sri Lanka or other countries where our service providers operate.

We take appropriate measures to ensure that your personal data is handled securely and in accordance with this Privacy Policy, regardless of your location.

Your GDPR Rights (EEA Users)

If you are a resident of the EEA, you have the right to:

  • Access | Request a copy of the personal data we hold about you
  • Rectification | Request correction of inaccurate or incomplete data
  • Erasure | Request deletion of your personal data (“Right to be Forgotten”)
  • Restriction | Request limited processing of your data
  • Data Portability | Request transfer of your data to another service provider
  • Objection | Object to processing based on legitimate interests
  • Withdraw Consent | Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us using the details provided on our website.

Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Third-Party Services & Payments

Ceyltra may use trusted third-party services to operate and enhance our website and travel services. These may include booking platforms, payment gateways, analytics tools, and mapping services.

For payment processing, we currently use 2Checkout (a Verifone company) and PayPal. When you make a payment through our website, certain personal and payment-related information (such as your name, email address, billing details, and transaction data) is securely processed directly by these payment providers. Ceyltra does not store or process your full payment card details on its own servers.

These third-party payment providers process your data in accordance with their own privacy policies and applicable data protection laws, including GDPR where applicable. We encourage you to review their privacy policies for more information on how your data is handled:

2Checkout (Verifone) Privacy Policy | https://www.verifone.com/en/privacy

PayPal Privacy Policy | https://www.paypal.com/webapps/mpp/ua/privacy-full

These third parties are authorized to use your personal data only as necessary to provide their services to us and are contractually obligated to safeguard your information.

Children’s Information

Ceyltra does not knowingly collect personal data from children under the age of 16. The only exception is that we may record a child’s name if it is provided as part of a booking. If you believe that a child has provided additional personal information on our website, please contact us immediately, and we will take appropriate steps to remove such information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. Any updates will be posted on this page with a revised effective date.

Contact Information

If you have questions about this Privacy Policy or how your data is handled, you may contact Ceyltra (PVT) LTD through the contact details provided on our website.