Privacy Policy

1. Introduction

Nimal Safari ("we", "us", "our") is committed to protecting the privacy and personal data of our customers. This Privacy Policy explains how we collect, use, store, and protect your information when you book or enquire about our safari tours at Yala National Park, Sri Lanka, including when you make payments through our website.

By using our website and services, you agree to the collection and use of your information as described in this Policy.

2. Information We Collect

2.1 Personal Information

When you make a booking or enquiry, we may collect:

• Full name and contact details (phone number, email address).
• Billing and payment information (processed securely via our payment gateway).
• Pickup location and travel preferences.
• Number of persons in your party and nationality.
• Health or medical conditions (only when disclosed voluntarily for safety purposes).
• Passport or ID details (if required for park entry documentation).

2.2 Technical & Usage Information

When you visit our website, we may automatically collect:

• IP address and browser type.
• Pages visited and time spent on our website.
• Device and operating system information.
• Referral URLs and cookies.

2.3 Payment Information

All payment card data is processed through our PCI-DSS compliant third-party payment gateway. Nimal Safari does not store, process, or transmit your full card details on our servers. Payment processors may retain transactional data in accordance with their own privacy policies.

3. How We Use Your Information

We use your personal data for the following purposes:

• To confirm, manage, and deliver your safari booking.
• To process online payments securely.
• To communicate booking confirmations, updates, and itinerary details via phone, WhatsApp, or email.
• To coordinate pickup and transportation arrangements.
• To comply with government, park, and immigration regulations.
• To respond to queries, complaints, or refund requests.
• To improve our website, services, and customer experience.
• To send promotional offers or updates (only with your consent; you may opt out at any time).

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contractual necessity – to fulfil your booking and deliver services you have requested.
• Legal obligation – to comply with Sri Lankan laws and park regulations.
• Legitimate interests – to manage our business operations and improve our services.
• Consent – where you have opted into receiving marketing communications.

5. Data Sharing & Disclosure

We do not sell your personal data to third parties. We may share your information with:

• Department of Wildlife Conservation (Sri Lanka) – for mandatory park entry registration.
• Payment gateway providers – to process secure online transactions.
• Authorised transport and logistics partners – to coordinate pickups and drop-offs.
• Law enforcement or government authorities – where required by Sri Lankan law.

All third parties with whom we share data are required to handle your information securely and only for the purpose for which it was shared.

6. Online Payment Security

We take the security of your financial information very seriously. Our website uses:

• SSL/TLS encryption (HTTPS) to protect data in transit.
• PCI-DSS compliant payment gateway for card processing.
• Tokenisation technology to avoid storing sensitive card data.

In the event of a suspected security breach, we will notify affected customers in accordance with applicable Sri Lankan data protection laws.

7. Cookies Policy

Our website uses cookies to enhance your browsing experience. These include:

• Essential cookies – required for the website to function (e.g., session management, booking forms).
• Analytics cookies – to understand how visitors use our website (e.g., Google Analytics).
• Preference cookies – to remember your settings and language preferences.

You may disable cookies through your browser settings. However, disabling essential cookies may affect the functionality of our booking system.

8. Data Retention

We retain your personal data for as long as necessary to fulfil your booking and comply with our legal obligations. Typically:

• Booking records are retained for 3 years after the date of service.
• Payment transaction records are retained for 7 years for tax and accounting purposes.
• Marketing opt-in records are retained until you withdraw consent.

After the retention period, your data will be securely deleted or anonymised.

9. Your Rights

Subject to applicable Sri Lankan law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data (subject to legal obligations).
• Withdraw consent for marketing communications at any time.
• Lodge a complaint with the relevant Sri Lankan authority regarding data processing.

To exercise any of these rights, please contact us using the details below.

10. Third-Party Links

Our website may contain links to third-party websites (e.g., Yala National Park official site, payment gateways). We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies separately.

11. Children's Privacy

Our services are not directed at children under the age of 14 as independent customers. We do not knowingly collect personal information from minors without verifiable parental or guardian consent.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be posted on our website with a revised effective date. Continued use of our services following such changes constitutes your acceptance of the updated policy.

13. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy, please contact:

Nimal Safari

Yala National Park, Sri Lanka

Website: www.nimalsafari.com : contact page