Wild Outside ("we," "us," or "our") respects your privacy and is committed to protecting the personal data of everyone who visits wildoutside.travel or contacts us regarding our Sri Lanka wildlife and nature tours. This Privacy Policy explains what personal data we collect, why, how we use it, and the rights you have over it.

This Policy is written with reference to Sri Lanka's Personal Data Protection Act, No. 9 of 2022 ("PDPA"). If you are visiting from the European Economic Area, United Kingdom, or another jurisdiction with its own data protection laws (such as the GDPR), we also aim to honour the equivalent rights and principles set out below.

1. Who We Are

This website is operated by [Registered Company Name], trading as Wild Outside, registered in Sri Lanka, with its registered office at [Registered Address].

For any questions about this Privacy Policy or how we handle your data, contact us at [Contact/Privacy Email].

2. What Personal Data We Collect

We collect personal data in the following ways:

a) Information you give us directly, such as when you:

• Submit an enquiry, contact, or itinerary-request form (e.g. name, email address, phone number, country of residence, travel dates, group size, and any preferences or messages you include);

• Subscribe to our newsletter (email address, and name if provided);

• Email or message us directly.

  
  

b) Information collected automatically, when you browse the website, including:

• IP address, browser type and device information;

• Pages visited, time spent on the site, and referring/exit pages;

• General location data (typically country or city level, inferred from IP address);

• Cookie and analytics identifiers (see Section 6, Cookies).

We do not collect payment card details, passport numbers, or other sensitive identity documents through this website, as bookings and payments are not processed online. Any such information is only ever collected separately, directly, and securely as part of confirming an actual booking.

3. How We Use Your Personal Data

We use the personal data we collect to:

• Respond to your enquiries and prepare tailored itineraries or quotations;

• Communicate with you about your travel plans, packages, or requested information;

• Send you our newsletter and occasional updates about tours, destinations, or offers, where you have opted in — you may unsubscribe at any time;

• Understand how visitors use our website, via analytics, so we can improve site content, navigation, and performance;

• Maintain the security of our website and prevent misuse;

• Comply with applicable legal or regulatory obligations.

We do not use your personal data for any automated decision-making that produces legal or similarly significant effects on you.

4. Legal Basis for Processing

Where the PDPA or an equivalent framework (such as GDPR) applies, we rely on the following legal bases:

• Consent — for newsletter sign-ups and non-essential cookies, which you can withdraw at any time;

• Legitimate interests — for responding to enquiries, general website analytics, and improving our services, in each case balanced against your rights and expectations;

• Contractual necessity — where processing is needed to take steps you request prior to a booking (e.g. preparing a quotation);

• Legal obligation — where we are required to retain or disclose information under applicable law.

5. Who We Share Your Data With

We do not sell your personal data. We may share it with:

• Service providers who support our operations, such as website hosting (Framer), email/newsletter platforms, and analytics providers, who process data on our behalf and under appropriate confidentiality and data protection terms;

• Local partners and suppliers (such as accommodation providers, drivers, or park authorities) — but only once you have made an actual booking, and only the details necessary to deliver your trip (this website's enquiry data is not shared with third-party suppliers);

• Legal or regulatory authorities, where required by law, to protect our rights, or to protect the safety of any person.

6. Cookies and Analytics

We use cookies and similar technologies to operate the site and understand how it's used:

• Essential cookies — required for the website to function correctly.

• Analytics cookies — help us understand visitor numbers and behaviour, so we can improve the site (e.g. Google Analytics or a similar tool). These may collect information such as pages viewed, time on site, and general location.

• Newsletter/marketing cookies — used if you interact with our newsletter sign-up, to manage your subscription preferences.

You can control or disable cookies through your browser settings at any time; note that disabling essential cookies may affect site functionality. Where required, we will ask for your consent to non-essential cookies via a cookie banner before they are set.

7. International Data Transfers

As a Sri Lanka-based tourism business serving international travellers, your data may be processed or stored outside Sri Lanka — for example, by our website host, email, or analytics providers, who may operate servers in other countries. Where we transfer personal data outside Sri Lanka, we take reasonable steps to ensure it is protected to a standard consistent with the PDPA, including relying on providers with appropriate data protection safeguards in place.

8. Data Retention

We retain enquiry and newsletter data only for as long as necessary to fulfil the purposes described in this Policy — for example, to respond to your enquiry, follow up on a potential trip, or while you remain subscribed to our newsletter. You can ask us to delete your data at any time (see Section 9), and we will do so unless we are required to retain it for legal or legitimate business record-keeping purposes.

9. Your Rights

Depending on your location, you have some or all of the following rights over your personal data:

• Access — request a copy of the personal data we hold about you;

• Rectification — ask us to correct inaccurate or incomplete data;

• Erasure — ask us to delete your personal data, subject to legal exceptions;

• Withdraw consent — for newsletter subscriptions or any consent-based processing, at any time;

• Object — object to processing based on legitimate interests, including direct marketing;

• Restriction — ask us to limit how we use your data in certain circumstances;

• Complain — lodge a complaint with the Data Protection Authority of Sri Lanka, or your relevant local data protection authority, if you believe your data has been mishandled.

To exercise any of these rights, contact us at [Contact/Privacy Email]. We will respond within a reasonable time and in accordance with applicable law.

10. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

11. Children's Privacy

This website is not directed at children, and we do not knowingly collect personal data from children under 16 without parental consent. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to remove it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically.

13. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or how your data is handled, please contact:

Wild Outside Email: [Contact/Privacy Email] Phone: [Contact Phone Number] Address: [Registered/Office Address]