At Vintage Ceylon, we value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, disclose, and safeguard your information when you visit our website, make a booking, submit an order, contact us, purchase products, or participate in our cultural experiences. It also outlines your rights regarding your personal data and our commitment to handling your information responsibly and transparently.
Effective Date20/07/2026
Last Updated20/07/2026
01
Introduction
Welcome to Vintage Ceylon.
Vintage Ceylon (“we,” “our,” or “us”) is committed to respecting and protecting the privacy of every visitor, customer, and business partner. Whether you are exploring our website, making an enquiry, booking an experience, submitting a shop order, purchasing products, or contacting our team, we are committed to handling your personal information responsibly and securely.
This Privacy Policy explains the types of information we collect, why we collect it, how it is used, how it is protected, and the choices available to you regarding your personal information.
By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy.
02
Information We Collect
Depending on how you interact with Vintage Ceylon, we may collect the following information.
Personal Information
- Full name
- Email address
- Telephone number
- Country of residence
- Postal address (where required)
- Delivery address and recipient details where required for shop orders
- Other information you voluntarily provide to us when making an enquiry, booking, order, or service request
Where a particular experience, service, legal requirement, or operational requirement makes it necessary, we may request additional information relevant to that activity. We will seek to limit such collection to information that is reasonably necessary for the stated purpose.
Booking Information
When you make an enquiry or book an experience, we may collect information including:
- Selected experience(s)
- Preferred dates and times
- Number of participants
- Special requests
- Accessibility requirements
- Emergency contact details (where applicable)
Shop and Order Information
When you submit an order through our website, we may collect information including:
- Products selected or ordered
- Quantities requested
- Order reference or order-related information
- Preferred fulfilment method, such as pickup or delivery
- Delivery address and recipient information where delivery is requested
- Information required to communicate with you about your order
- Information relating to order changes, returns, refunds, replacements, or customer support
Payment Information
Where payments are processed through third-party providers or other payment arrangements, payment information may be handled by the relevant payment service provider. Vintage Ceylon does not store your complete payment card details on its own systems.
For shop orders, where advance payment is selected, we may receive or retain information necessary to verify payment and fulfil the order. Where Cash on Delivery is available for selected products, we may retain information necessary to administer the order and delivery.
Communications
We may retain records of correspondence when you contact us through:
- Contact forms
- Telephone
- Social media
- Customer support enquiries
- Communications relating to bookings, orders, deliveries, returns, refunds, or other services
Website Usage Information
When you browse our website, we may automatically collect certain technical information, including:
- IP address
- Browser type
- Device information
- Operating system
- Pages visited
- Time spent on pages
- Referral sources
- General location information derived from your IP address
This information helps us improve website performance and user experience.
03
How We Use Your Information
We use your personal information only for legitimate business purposes, which includes:
- Managing bookings and reservations
- Processing and managing shop orders
- Arranging product pickup or delivery
- Responding to enquiries
- Providing customer support
- Sending booking confirmations, order acknowledgements, service updates, and delivery-related communications
- Managing returns, refunds, replacements, and other after-sales enquiries
- Improving our website and visitor experience
- Analysing website performance
- Preventing fraud and protecting our systems
- Complying with legal and regulatory obligations
- Maintaining appropriate business and transaction records
Where you have provided your consent, we may also use your information to send promotional communications, special offers, or updates about Vintage Ceylon. You may unsubscribe from these communications at any time.
We may also use information where reasonably necessary to protect the rights, property, safety, and legitimate interests of Vintage Ceylon, our customers, staff, service providers, or other users.
04
Cookies and Website Analytics
Our website may use cookies and similar technologies to improve functionality, personalise user experiences, and understand how visitors interact with our website.
Cookies may be used to:
- Remember user preferences
- Improve website performance
- Analyse visitor behaviour
- Measure marketing effectiveness
- Maintain website security
- Support website functionality, including relevant booking and shop features
You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of parts of the website.
We may also use reputable analytics services to understand visitor behaviour and improve our website and services.
05
Sharing Your Information
Vintage Ceylon respects your privacy and does not sell, rent, or trade your personal information to third parties.
However, we may share information where necessary with trusted service providers, including:
- Payment processing providers
- Website hosting providers
- Technology and software service providers
- Marketing service providers (where consent has been provided)
- Delivery, courier, logistics, or fulfilment providers where required to deliver shop orders
- Service providers supporting bookings, customer communications, or operational activities
- Government authorities or regulatory bodies where required by law
Where necessary for fulfilling a shop order, relevant information such as your name, telephone number, delivery address, and order details may be shared with the service provider responsible for delivery or fulfilment.
All third-party service providers are expected to maintain appropriate confidentiality and security standards.
06
International Visitors
Vintage Ceylon welcomes visitors from around the world. Depending on your location, your personal information may be transferred to and processed in Sri Lanka or in other jurisdictions where our trusted service providers operate.
Where applicable, we aim to process personal information in accordance with internationally recognised privacy principles, including transparency, fairness, data minimisation, purpose limitation, and appropriate security measures.
If you are located in a jurisdiction with specific privacy rights, including the European Economic Area (EEA), we will make reasonable efforts to respect those rights in accordance with applicable laws (particularly GDPR).
Where personal information is transferred internationally, we will take reasonable steps to ensure that appropriate safeguards are applied where required by applicable law.
07
Data Security
Protecting your information is an important priority.
We implement reasonable administrative, technical, and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, misuse, or destruction.
While no online system can guarantee absolute security, we continually review our security practices to help protect the information entrusted to us.
Where third-party service providers process information on our behalf, we expect them to apply appropriate security and confidentiality measures.
08
Data Retention
We retain personal information only for as long as reasonably necessary to:
- Provide requested services
- Complete bookings
- Process and fulfil shop orders
- Manage deliveries, pickups, returns, refunds, and related customer service
- Meet legal or regulatory obligations
- Resolve disputes
- Maintain appropriate business records
The period for which information is retained may depend on the nature of the information, the purpose for which it was collected, applicable legal requirements, and legitimate business needs.
When personal information is no longer required, we take reasonable steps to securely delete, anonymise, or otherwise dispose of the information.
09
Your Privacy Rights
Subject to applicable laws, you may have the right to:
- Request access to your personal information.
- Request correction of inaccurate or incomplete information.
- Request deletion of your personal information where appropriate.
- Withdraw consent for marketing communications.
- Object to certain processing activities.
- Request information about how your personal data is used.
- Request restriction of certain processing where applicable.
- Exercise any other rights available to you under applicable data protection laws.
If you wish to exercise any of these rights, please contact us using the details provided at the end of this policy.
We will respond to legitimate requests within a reasonable timeframe and in accordance with applicable legal requirements. Certain information may need to be retained where we are legally required or otherwise permitted to do so.
10
Third-Party Websites
Our website may contain links to third-party websites, social media platforms, or external services.
Vintage Ceylon is not responsible for the privacy practices or content of external websites. We encourage you to review the privacy policies of any third-party websites before providing personal information.
Where you interact directly with a third-party payment provider, delivery provider, social media platform, analytics service, or other external service, that provider's own privacy policy and terms may also apply.
11
Children’s Privacy
Vintage Ceylon does not knowingly collect personal information from children without appropriate parental or guardian involvement where required by applicable law.
Where bookings involve minors participating in experiences, personal information relating to those bookings should be provided by a parent, legal guardian, or authorised adult.
Where shop orders involve a minor, the order and any related personal information should be submitted or provided by a parent, legal guardian, or other authorised adult where required by applicable law.
If we become aware that personal information has been collected from a child inappropriately, we will take reasonable steps to remove such information.
12
Changes to this Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our services, legal requirements, technology, or business practices.
When significant changes are made, the “Last Updated” date at the top of this page will be revised.
We encourage visitors to review this Privacy Policy periodically to remain informed about how their information is managed.
13
Contact Us
If you have any questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact us.
Vintage Ceylon
- Telephone
- +94 721 005 388
We will make every reasonable effort to respond to privacy-related enquiries promptly and professionally.