Holdall Holidays is committed to protecting your personal data and complying with applicable data protection laws ( GDPR) and other relevant privacy regulations.

Personal Data We Collect

We may collect and process personal information including, but not limited to:

• * Names, contact details, and passport information
• * Travel preferences, itineraries, and booking details
• * Payment and billing information
• * Special requirements shared for service delivery

Purpose of Data Processing

Personal data is collected and used solely for the purposes of:

• * Processing and managing travel bookings
• * Arranging accommodation, transportation, and related services
• * Communicating essential travel information before and during your trip
• * Fulfilling legal and regulatory obligations

Data Sharing

Personal data is shared only with trusted third-party service providers (such as hotels, transport operators, and guides) strictly as required to deliver contracted travel services. We do not sell or trade personal data to third parties.

International Data Transfers

As an inbound tour operator based in Sri Lanka, personal data may be processed outside the UK or EEA. By confirming a booking, you consent to such transfers for the purpose of fulfilling travel arrangements, with appropriate safeguards in place.

Data Retention

We retain personal data only for as long as necessary to fulfil booking requirements, comply with legal obligations, or resolve disputes.

Your Rights

Subject to applicable law, you have the right to:

• * Request access to your personal data
• * Request correction or deletion of your data
• * Withdraw consent where processing is based on consent
• * Request restriction of processing or raise objections

Requests related to personal data should be submitted in writing to Holdall Holidays.

Governing Law & Jurisdiction

These Terms & Conditions are governed by the laws of Sri Lanka, and any disputes shall be subject to the exclusive jurisdiction of the courts of Sri Lanka.