Privacy Policy
This Privacy Policy explains how SriLankaX, operating SriLankaX, collects, uses and protects your personal data. It is baselined on the EU General Data Protection Regulation (GDPR) and the Sri Lanka Personal Data Protection Act No. 9 of 2022 (PDPA).
1. Data controller
The data controller responsible for your personal data is SriLankaX. You can reach us at help@srilankax.com.
2. Data we collect
- Reservation details — your name, email address, and optional phone number, plus the details of the reservation you make.
- Account data — if you choose to create an account, the information associated with it.
- Basic usage data — limited technical and usage information needed to operate and secure the platform.
3. Purposes and legal bases
- To fulfil your reservation and connect you with the partner — performance of a contract.
- To communicate with you about your reservations — performance of a contract and our legitimate interests.
- To operate, secure and improve the platform — our legitimate interests.
- To meet legal obligations — compliance with applicable law.
Where we rely on consent (for example, optional communications), you may withdraw it at any time.
4. Sharing your data
- With the partner you reserve with, so they can fulfil your reservation.
- With processors who act on our instructions: our authentication provider, our email provider, and our payment provider (for the reservation fee).
We do not sell your personal data.
5. Retention
We keep personal data only as long as necessary for the purposes above or as required by law, after which it is deleted or anonymised.
6. Your rights
Subject to applicable law, you have the right to access, rectification, erasure, restriction, portability, and to object to processing, as well as the right to withdraw consent where processing is based on it. To exercise any right, contact help@srilankax.com.
7. International transfers
Because guests, partners and our providers may be in different countries, your data may be transferred across borders. Where it is, we apply appropriate safeguards consistent with GDPR and the PDPA.
8. Security
We use appropriate technical and organisational measures to protect your personal data. Account credentials are handled by our authentication provider; we never store your password in plain text.
9. Cookies
We use a small number of cookies to operate the platform. See our Cookie Policy for details.
10. Children
The platform is not directed to children, and we do not knowingly collect personal data from children.
11. Changes to this policy
We may update this policy from time to time. Material changes will be reflected on this page.
12. Contact
For any privacy question or request, email help@srilankax.com.