Company: Holdall Holidays
Business Type: Inbound Tour Operator / Destination Management Company (DMC)
Country of Operation: Sri Lanka

Holdall Holidays is committed to protecting your privacy and safeguarding your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website, make enquiries, or book travel services with us.

1. Who We Are

Holdall Holidays is an inbound tour agent operating in Sri Lanka in compliance with the regulations of the Sri Lanka Tourism Development Authority (SLTDA). We provide travel-related services, including accommodation bookings, transportation, excursions, tour guides, and destination management services.

2. Information We Collect

We may collect and process the following personal data:

• * Full name, nationality, and contact details (email, phone number, address)
• * Passport details required for hotel check-ins and travel arrangements
• * Travel itineraries, preferences, and special requests
• * Payment and billing information (processed securely via banks or payment providers)
• * Website enquiry details and correspondence

We do not intentionally collect sensitive personal data unless it is necessary for service delivery and voluntarily provided by you.

3. How We Use Your Information

Your personal information is used strictly for the following purposes:

• * Responding to enquiries and providing quotations
• * Processing bookings and payments
• * Arranging accommodation, transportation, activities, and guides
• * Communicating essential travel-related information before and during your trip
• * Complying with legal, regulatory, and accounting requirements

4. Legal Basis for Processing (GDPR & UK Clients)

For clients from the UK and EU, we process personal data based on one or more of the following legal grounds:

• * Performance of a contract (travel arrangements requested by you)
• * Compliance with legal obligations
• * Legitimate business interests related to service delivery
• * Your consent, where required

5. Sharing of Information

We share personal data only with trusted third parties strictly for the purpose of delivering your travel services. These may include:

• * Hotels and accommodation providers
• * Transport operators and drivers
• * Tour guides and activity providers
• * Government or regulatory authorities when legally required

We do not sell, rent, or trade your personal information to third parties.

6. International Data Transfers

As Holdall Holidays operates in Sri Lanka, your personal data may be processed outside your country of residence, including outside the UK or European Economic Area (EEA). By using our services, you consent to such transfers for the sole purpose of fulfilling travel arrangements, with appropriate safeguards in place.

7. Data Security

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or disclosure. Access to personal information is restricted to authorised personnel and service providers only.

8. Data Retention

We retain personal data only for as long as necessary to:

• * Complete your travel arrangements
• * Meet legal, tax, and accounting obligations
• * Resolve disputes or enforce agreements

Once no longer required, personal data is securely deleted or anonymised.

9. Your Rights

Subject to applicable data protection laws, you have the right to:

• * Request access to your personal data
• * Request correction of inaccurate or incomplete data
• * Request deletion of your personal data
• * Withdraw consent where processing is based on consent
• * Object to or restrict certain processing activities

Requests relating to your personal data should be made in writing to Holdall Holidays.

10. Cookies and Website Tracking

Our website may use basic cookies to enhance user experience and analyze website traffic. Cookies do not collect personal data unless you voluntarily provide it through forms. You may control or disable cookies through your browser settings.

11. Changes to This Privacy Policy

Holdall Holidays reserves the right to update this Privacy Policy at any time. Any changes will be posted on this page with an updated effective date.

12. Contact Us

If you have any questions regarding this Privacy Policy or how your data is handled, please contact: