Privacy policy.

Who we are

Ceylon Envoy is a private travel concierge for Sri Lanka, composing bespoke journeys for a small number of guests at a time. We operate from Colombo, Sri Lanka. For anything to do with your information write to hello@ceylonenvoy.com.

What we collect, and when

Only what you give us, and only for the conversation you have started:

• Your inquiry. When you submit the form at /inquire we receive your name, email address, approximate travel dates, group, the interests you note, and any budget you mention. We also keep a short log entry that records your IP address and browser user agent at the time of submission, purely to defend against abuse.
• Your subscription. If you ask to receive the letter, we keep your email address in our newsletter audience until you ask us to remove it.
• Reading patterns, if you agree to them. We use Google Analytics to see aggregate facts about how the site is used: which pages are read, where readers arrive from, and which routes lead to an enquiry. It sets cookies, so it stays switched off until you accept, and nothing is written to your device before you answer. See our cookies policy.

We do not buy lists, scrape contact information, or accept data about you from third parties.

Why we hold it, our lawful basis

• Legitimate interests. Your inquiry is held under our legitimate interest in responding to a request you initiated. We use it only to compose a personal reply, then to plan your journey if you proceed.
• Consent. The newsletter is sent only because you asked for it. You can withdraw consent at any time using the unsubscribe link in each letter, or by writing to us.
• Legal obligation. Occasionally we keep records to comply with tax, accounting, or anti-fraud requirements.

Who else sees it

Your information stays with your envoy. The few service providers who help us run the site are bound to process it only on our instruction:

• Resend , delivers our inquiry confirmation and the letter. Resend processes the email content and the recipient address.
• Vercel , hosts the website and the small server functions behind the inquiry and newsletter forms.
• Cloudflare , resolves the site's domain and provides DDoS protection at the network edge.
• Google Analytics , aggregates reading patterns, as described above. It sets cookies and therefore runs only with your agreement; until then it operates with every storage permission denied.

We do not sell your information. We do not share it with advertising networks. We do not pass it to other operators in return for referrals.

International transfers

The providers above are based in the United States, the European Union, or the United Kingdom. Where your information leaves the UK or the EEA, we rely on the recipient's standard contractual clauses or equivalent safeguards, in keeping with UK GDPR Articles 46 and 49. A copy of the safeguards in use is available on request.

How long we keep it

• Inquiries. For up to thirty-six months after the journey concludes, so we can answer questions about a trip you took with us. After that, the personal fields are deleted; an anonymised record of the booking may be kept for accounting.
• Inquiries that did not proceed. Held for up to twenty-four months, then deleted.
• Newsletter subscribers. Held until you unsubscribe.
• Abuse logs. IP and user-agent entries on the inquiry endpoint are kept for thirty days, then rotated out.

Your rights

Under UK GDPR you have the right to ask for a copy of the information we hold about you, to ask us to correct or delete it, to restrict or object to how we process it, and to ask for it in a portable form. To exercise any of these, write to hello@ceylonenvoy.com. We will reply within one month.

You may also complain to the UK Information Commissioner's Office at ico.org.uk.

Automated decisions, children

We do not make any decisions about you by automated means. The site is intended for adults; we do not knowingly collect information about anyone under sixteen.

Changes to this policy

If we update this policy materially, the date at the top of this page changes and, if you are on the newsletter, you will hear from us before it takes effect.