Privacy Policy
Last updated: October 18, 2026
1. Who we are
Xtreme Tours and Travels (PVT) LTD ("we", "us") is a travel company operating xtremetourslk.com, located at 184/1, Divulpitiya, Boralesgamuwa, Colombo, Sri Lanka. For privacy matters, contact us at info@xtremetourslk.com or +94 77 883 4474.
2. What personal data we collect
You give us: when you submit the Plan My Trip or quote form, we collect your full name, email address, phone number, travel dates, number of days, number of adults and children, and anything you write to us. If you email, phone, message us on WhatsApp, or use our live chat, we collect what you send us (including your name, contact details, and the chat contents).
Collected automatically (only after you consent, where required): device and browser type, IP address, pages viewed, referring site or ad, approximate location, and online identifiers set by cookies and similar technologies.
We do not intentionally collect sensitive data. Please do not send us passport numbers, payment card details, or health details through the website forms or chat. Payments are handled as described in our Payment Policies.
3. Why we use it and our legal basis
| Purpose | Data | Basis |
|---|---|---|
| Reply to enquiries, prepare quotes, plan and book your trip | Form, chat, email, phone, and WhatsApp data | Steps you request before a contract; performance of a contract |
| Operate, secure, and improve the website | Device, usage, and IP data | Legitimate interests; consent for non-essential cookies |
| Measure website visits and the results of our advertising | Cookie and usage data | Consent |
| Show you our ads on Google and other sites (remarketing) | Cookie and usage data | Consent |
| Improve ad measurement by matching your form details to ad clicks (enhanced conversions) | Hashed email and phone number | Consent |
| Legal, tax, and accounting obligations | Booking and payment records | Legal obligation |
4. Cookies and similar technologies
- Strictly necessary cookies to make the site work. No consent needed.
- Analytics (Google Analytics 4) to understand how the site is used.
- Advertising and measurement (Google Ads, Google Tag Manager) to measure ad performance and, if you agree, show you relevant ads and match enquiries to ads.
- Live chat (Zoho SalesIQ), which sets cookies to recognise a chat visitor.
Analytics and advertising cookies are only set after you choose "Accept all" in our cookie banner. You can change your choice at any time using "Cookie settings" in the footer, and you can also block cookies in your browser settings.
5. Advertising, remarketing, and enhanced conversions
If you consent, Google may place cookies or use identifiers so that we can show ads to people who visited our site (remarketing) and measure whether an ad led to an enquiry. When you submit a form, with your consent we may send Google a hashed (irreversibly scrambled) version of your email and phone number to match the enquiry to an ad interaction. Google uses this under its own policies. You can control ad personalisation at adssettings.google.com.
6. Who we share data with
- Service providers who process data for us: Google (Analytics, Tag Manager, Ads, and email), Zoho (live chat), our website hosting provider InMotion Hosting, and WhatsApp/Meta if you message us there.
- Hotels, drivers, guides, and other travel suppliers in Sri Lanka, only as needed to deliver your trip.
- Authorities where the law requires.
We do not sell your personal data.
7. International transfers
Our company is in Sri Lanka, and our providers (such as Google and Zoho) may process data in other countries, including India, the EU, and the United States. Where required, we rely on the safeguards in those providers' contractual terms.
8. How long we keep data
- Enquiry and chat data: for as long as needed to respond to you and plan your trip.
- Booking, invoice, and tax records: for as long as the law requires.
- Analytics and advertising cookies: until they expire (Google Analytics cookies last up to 2 years and Google Ads cookies about 90 days), or until you clear them.
9. Your rights
Depending on where you live, you may have the right to access, correct, erase, or restrict your data, withdraw consent, object to processing, request a copy of your data, and complain to a regulator (Sri Lanka: Data Protection Authority; India: Data Protection Board; EU/UK: your local authority). To exercise a right, email info@xtremetourslk.com. We will respond within the period required by law. Withdrawing consent does not affect processing done before.
10. Security
We use reasonable technical and organisational measures (HTTPS, access controls). No online service is perfectly secure.
11. Children
Our site is for adults planning travel. We do not knowingly collect children's data except the number and ages of travellers you give us to plan a trip, which you must provide as the parent or guardian.
12. Changes
We will post updates on this page and change the "Last updated" date.
13. Contact
info@xtremetourslk.com, +94 77 883 4474, 184/1, Divulpitiya, Boralesgamuwa, Colombo, Sri Lanka.