Last updated: 24 July 2026
Information we collect
We collect information you provide when you contact us, request or arrange travel services, subscribe to updates, or submit a review. Depending on the form, this can include your name, email address, phone number, country, travel dates and preferences, traveller numbers, pickup details, message, newsletter choice, review text, rating, travel date, and an optional photo.
For security and abuse prevention, our systems also process limited technical information. This includes a shortened hash derived from your IP address for short-lived rate limiting and information processed by Firebase App Check and Google reCAPTCHA v3.
How we use and share information
We use this information to answer enquiries, arrange requested travel services, manage bookings and reviews, send requested updates, protect the website, and meet legal or security obligations.
Information is available only to authorised staff and service providers that help us host, secure, store, or deliver the requested service or communications. We may also disclose information when required by law.
Cookies and analytics
The public website may use a language-preference cookie and, in production, Firebase App Check with Google reCAPTCHA v3 to protect forms from abuse. reCAPTCHA may store or access cookies and process browser, device, and network information for security purposes. The restricted administration area also uses browser storage for sign-in and interface preferences, including a seven-day sidebar-preference cookie.
We do not currently use Google Analytics, advertising pixels, or cookies for behavioural advertising. If that changes, we will update this policy and, where required, request consent before enabling non-essential tracking.
Retention and your choices
We retain information only for as long as reasonably needed for the purpose for which it was collected, to protect our services, and to meet applicable record-keeping obligations. The period varies by record and purpose.
You may ask to access, correct, or delete personal information we hold about you, or unsubscribe from marketing messages. Requests are handled subject to applicable law.
Contact
For privacy questions or requests, contact us at hello@gaman.lk.