Privacy Policy

Sri Lanka Tourism Hub ("we", "us", "the Platform") operates the marketplace at srilankatourismhub.lk, connecting travelers with tourism suppliers across Sri Lanka. This policy explains what information we collect when you use the Platform, why we collect it, and how it is handled.

1. Information we collect

Depending on how you use the Platform, we collect:

• Account information - your name, email address, and password (stored as a secure one-way hash, never in plain text).
• Profile information you choose to add - country, mobile number, date of birth, address and city.
• Supplier information - if you register a business (hotel, vehicle, guide, spa, restaurant, retail shop, tour agency, surf center, musician, salon or artisan profile), your business details, bank account details (required so we can pay you out), and, for some supplier types, identity or business registration documents submitted for verification before your listing can go live.
• Booking information - what you book, dates, and delivery address/contact details for physical orders.
• Payment confirmation - we never see or store your card number. Card payments are processed directly by our payment partner, PayHere; we only receive confirmation of whether a payment succeeded.

2. How we use your information

• To create and manage your account.
• To process bookings, payments, and supplier payouts.
• To verify supplier businesses before their listings are published.
• To provide customer support and respond to your requests.
• To meet our legal and regulatory obligations.

3. Staying signed in

We use your browser's local storage to keep you logged in between visits, rather than third-party tracking cookies. We do not currently run any third-party advertising or analytics trackers on this site.

4. Who we share information with

• The supplier for any booking you make, so they can fulfil it (your name, contact details, and delivery address where relevant).
• PayHere, our payment processor, to process card payments securely.
• Law enforcement or regulators, only where we are legally required to.

We do not sell your personal information to anyone.

5. Data security

Passwords are never stored in plain text. Sensitive supplier verification documents and bank details are only visible to the account owner and platform administrators, and are never shown on public listing pages.

6. Your rights

You can review and update most of your profile information directly from your account. To request access to, correction of, or deletion of your personal data, email support@srilankatourismhub.lk and we will respond as soon as we can.

7. Children's privacy

The Platform is intended for use by adults aged 18 and over and is not directed at children.

8. Changes to this policy

We may update this policy as the Platform evolves. The "last updated" date at the top of this page always reflects the current version. See also our Terms & Conditions and Return & Cancellation Policy.

9. Contact us

Questions about this policy? Email support@srilankatourismhub.lk, call 076 706 9678, or message us on WhatsApp.