Overview
DiscoverSri ("we", "us", "our") operates the discoversri.com website and related travel planning services for Sri Lanka. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the choices you have.
By using our website, AI planner, booking tools, or contacting us, you agree to the practices described here. If you do not agree, please do not use our services.
Who we are
DiscoverSri is a travel planning and booking facilitation platform focused on Sri Lanka. We help guests research destinations, build itineraries, request quotes, and manage bookings with our team.
For privacy-related questions or requests, contact us via WhatsApp at +94 77 772 8255 or email hello@discoversri.com.
Information we collect
Information you provide directly
- Contact details — name, email address, phone number, and WhatsApp number when you submit enquiries, custom package requests, tour requests, or vehicle bookings.
- Travel preferences — dates, group size, budget, interests, pickup locations, and messages you share with our AI concierge or booking forms.
- Booking information — tour or vehicle selections, deposit status, and correspondence related to your trip.
Information collected automatically
- Visitor identifier — a first-party cookie or local storage token so we can remember your AI chat session and booking progress without requiring account registration.
- Approximate location — city and country derived from your IP address when you use the homepage concierge (raw IP addresses are not stored for this feature).
- Usage analytics — pages viewed, buttons clicked, and planner interactions to improve the website. We use first-party analytics and do not sell this data to advertisers.
- Technical data — browser type, device type, referring URL, and timestamps for security and troubleshooting.
How we use your information
We use personal data to:
- Respond to your travel enquiries and prepare quotes or custom tour packages.
- Operate the AI concierge and itinerary tools, including restoring chat history for up to 24 hours.
- Process and manage tour and vehicle booking requests.
- Send booking confirmations, payment instructions, and trip updates by email or WhatsApp where you have provided contact details.
- Improve website content, routes, and user experience through aggregated analytics.
- Protect against fraud, abuse, and technical issues.
- Comply with applicable law.
AI and automated processing
Our AI tools generate travel suggestions based on the information you provide and content from our database. AI outputs are planning aids only and are reviewed by our team before any paid booking is confirmed. See our AI disclaimer for important limitations.
We do not use your personal data to train public third-party AI models. Processing is limited to delivering the service you request.
Legal bases for processing
Depending on your location, we rely on one or more of the following:
- Contract — to respond to booking requests and deliver services you ask for.
- Legitimate interests — to operate, secure, and improve our platform, and to communicate about your enquiry.
- Consent — where required for optional marketing or non-essential cookies.
- Legal obligation — where we must retain or disclose information under law.
How we share information
We do not sell your personal data. We may share information with:
- Service providers — hosting, email delivery, analytics, maps, and AI infrastructure providers who process data on our instructions.
- Travel partners — drivers, hotels, activity operators, or guides when necessary to fulfil a booking you have confirmed with us.
- Payment facilitators — when you follow an external payment link we provide; payment pages are operated by the payment provider, not DiscoverSri.
- Authorities — if required by law or to protect rights, safety, or security.
All partners are expected to handle data securely and only for the agreed purpose.
International transfers
Our servers and service providers may be located outside Sri Lanka. Where data is transferred internationally, we take reasonable steps to ensure appropriate safeguards are in place.
Data retention
- AI chat sessions — retained for up to 24 hours for session continuity, unless linked to a custom package or booking request.
- Enquiries and bookings — retained for as long as needed to manage your trip, resolve disputes, and meet accounting or legal requirements.
- Analytics — kept in aggregated or pseudonymised form where possible.
Your rights
Depending on applicable law, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data, subject to legal and booking obligations.
- Object to or restrict certain processing.
- Withdraw consent where processing is consent-based.
To exercise these rights, contact us using the details above. We may need to verify your identity before responding.
Children
Our services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us so we can delete it.
Security
We use reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls, and secure hosting. No online service can guarantee absolute security.
Changes to this policy
We may update this Privacy Policy from time to time. The "last updated" date on this page will change when we do. Continued use of the website after changes means you accept the updated policy.
Contact
DiscoverSri — privacy enquiries
WhatsApp: +94 77 772 8255
Email: hello@discoversri.com