Privacy Policy

1. Introduction – Privacy Policy (New & Updated on 22-04-2025)

Welcome to SWKK Adventure Sri Lanka. Our website, www.swkkadventuresrilanka.com, is operated as an online travel agency registered with the London Borough of Barking and Dagenham (LBBD), Essex, United Kingdom. We operate under and comply with the UK General Data Protection Regulation (UK GDPR) and relevant UK data privacy laws and standards.

This travel agency is directed by Dr. S. Wijewardana, PhD (Queen Mary, University of London), who is currently responsible for all executive and administrative decisions. Unless otherwise stated, Dr. Wijewardana remains the acting Travel Director, overseeing all matters related to this agency’s operations. Our team consists of dedicated volunteer staff, except for those located in Sri Lanka, who are compensated through the commission generated from confirmed bookings made through our UK website.

For clarity and ease of reference, terms such as "we", "our", "us", "me", "our company", "our agency", and "online travel agency" all refer to SWKK Adventure Sri Lanka, the company represented by this website.

As a UK-based travel company, we are committed to protecting your personal information and upholding the highest standards of privacy and data security. This Privacy Policy outlines how we collect, use, store, and safeguard the personal information you share with us—whether you are browsing, booking travel, or engaging with any of our services.

We are fully compliant with the regulations enforced by the UK Information Commissioner’s Office (ICO), headquartered at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.

If you have questions or concerns about how UK data protection laws apply, you may contact the ICO directly at 0303 123 1113 or email casework@ico.org.uk.

By continuing to use our website and booking services, you acknowledge and consent to the data practices outlined in this policy. If you do not agree with any part of our Privacy Policy or the applicable data protection regulations (UK GDPR, EU GDPR, or others), we kindly request that you refrain from using our services.

2. Information We Collect

To provide reliable travel services and comply with legal travel regulations, we may collect both personal and non-personal information when you engage with our website or travel services. This includes when you make an enquiry, submit a booking, or simply browse our site.

a) When You Make an Enquiry or Booking:

We may collect the following information to process and confirm your travel plans:

Full name, title, date of birth, and gender

Postal address, phone number, and email address

Passport details (including nationality and city of birth)

Travel insurance information (where applicable)

Flight and accommodation details (if not arranged by us)

Dietary preferences and medical conditions (only if disclosed to us for travel purposes)

Emergency contact information (next of kin)

b) When You Visit Our Website:

Certain information is automatically collected for website functionality and analytics:

IP address and browser type

Device information (such as operating system and screen resolution)

Cookies and tracking data (refer to Section 7 for more details)

Referral source (e.g., how you found our website)

c) When You Interact with Us on Social Media:

If you engage with us through platforms like Facebook, Instagram, or YouTube:We may collect information you’ve made publicly available through your profile

We may also receive any messages, feedback, or comments you provide on those platforms

Note: The information collected is consistent with industry standards for travel agencies and complies with legal travel and identification requirements—especially for international bookings.

3. How We Use Your Information

We collect and process your personal information with utmost care and only for legitimate purposes necessary to provide you with a safe, efficient, and personalised travel experience. Your information is handled securely and used in the following ways:

a) To Facilitate and Manage Travel Services:

To confirm and manage your bookings (flights, accommodations, tours)

To prepare and issue travel documentation such as itineraries and receipts

To contact you regarding changes, confirmations, or assistance related to your travel plans

b) To Provide Effective Customer Support:

To respond to your enquiries or concerns promptly

To provide you with personalised travel recommendations

To offer guidance or help during the booking process or your travel experience

c) To Process Payments and Ensure Secure Transactions:

To process credit or debit card payments securely through trusted third-party gateways

To detect and prevent fraudulent activities or unauthorised transactions

d) To Meet Legal and Regulatory Obligations:

To comply with relevant immigration, taxation, and health & safety regulations

To maintain travel records in accordance with local and international travel laws

To share required information with legal or governmental authorities, when necessary

e) To Improve User Experience:

To enhance website functionality based on visitor behaviour and analytics

To optimise our site layout and performance for user convenience

To troubleshoot technical issues and maintain website integrity

f) With Your Consent – For Marketing and Communication:

To send you travel updates, promotional offers, and destination highlights

To share newsletters or useful travel tips (only if you have opted in)

You may withdraw your consent for marketing communications at any time by contacting us or clicking the unsubscribe option in our emails

Important: We never use your personal information for automated decision-making or profiling without your explicit consent.

4. Legal Basis for Processing Your Data

As a UK-registered online travel agency, SWKK Adventure Sri Lanka processes personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and, where applicable, relevant international data protection laws.

We rely on the following lawful bases to collect, use, and manage your personal information:

a) Contractual Necessity

We process your personal data when it is necessary for the performance of a contract. This includes managing bookings, issuing travel documents, and providing the services you request through our agency.

b) Legal Obligations

In certain cases, we are legally required to collect or retain specific data to comply with applicable regulations. These obligations include immigration laws, tax laws, public health requirements, and recordkeeping standards.

c) Legitimate Interests

We may process your data to pursue our legitimate business interests, provided these do not override your rights or freedoms. Examples include:

Ensuring the security of our website and systems

Preventing fraud or misuse of our services

Enhancing our services and communications based on feedback and user interaction

d) Consent

In situations where the law requires your explicit permission—such as sending promotional emails or processing optional data (e.g., dietary needs)—we will only proceed with your freely given, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

5. Sharing and Disclosure of Your Information

At SWKK Adventure Sri Lanka, we treat your personal data with the highest level of confidentiality and care. We do not sell, rent, or trade your personal information to any third parties for marketing or commercial purposes.

However, to provide you with a seamless travel experience and to comply with legal and operational obligations, we may share your information in the following limited circumstances:

a) Travel Partners and Service Providers

We may disclose necessary information to trusted third parties involved in delivering your travel arrangements, such as:

Airlines (for flight bookings and check-in procedures)

Hotels and accommodation providers

Tour operators and excursion guides

Transport providers and insurance agents

These partners are only given access to the information required to fulfil your booking and are obligated to handle your data securely and in compliance with applicable laws.

b) Affiliated Companies and Regional Partners

In certain cases, we may share data with our affiliated travel partners, including:

Expedia and Aviasales (for online booking integration)

KK Resort Sri Lanka, which serves as our head office in Sri Lanka and coordinates all adventure travel programs in Sri Lanka and the Maldives.

If your booking is made through a third-party platform (such as Expedia), your data will be shared only with the relevant provider and not disclosed to any other third party without your explicit consent.

c) Legal and Regulatory Authorities

We may share personal data when required to:

Comply with legal obligations

Respond to lawful requests from public authorities, including law enforcement and customs or immigration officials

Defend our legal rights or respond to claims

d) Payment Processors

Your payment information is securely handled through third-party payment gateways. These platforms process transactions on our behalf using advanced encryption and fraud protection tools. We do not store your credit card or payment information on our own servers.

6. International Data Transfers

As an internationally-operating travel agency, SWKK Adventure Sri Lanka may need to transfer your personal information across borders to provide you with comprehensive and reliable travel services. These transfers may include sharing data with our partners, affiliates, and service providers located outside the United Kingdom (UK), the European Economic Area (EEA), and your country of residence.

We ensure that all international data transfers are conducted with the highest standards of privacy and security. Specifically, we implement the following safeguards:

a) Adequate Data Protection Standards

Where personal data is transferred to countries that do not have laws equivalent to those in the UK or the EEA, we ensure that the recipient organisation:

Has appropriate contractual agreements in place, including Standard Contractual Clauses (SCCs) as approved by the UK Information Commissioner’s Office (ICO) and the European Commission;

Implements robust data protection practices consistent with the UK GDPR and other international regulations.

b) Transfers to Trusted Partners

We only transfer data to third-party partners, such as airlines, hotel groups, booking platforms (e.g., Expedia and Aviasales), and our Sri Lankan head office (KK Resort), when it is essential for fulfilling your booking or service request. These partners are contractually obligated to protect your data and use it solely for the purpose of delivering your travel services.

c) Cloud Services and Hosting

Some of our data may be stored or processed on cloud-based systems located outside the UK. We choose reputable providers who comply with internationally accepted data security standards and practices.

d) User Consent

By using our services and submitting your personal information, you acknowledge and consent to the transfer, processing, and storage of your data in countries outside your own, including but not limited to Sri Lanka, the United States, Canada, Australia, New Zealand, and countries in the EU and Asia.

7. Cookies and Tracking Technologies

To improve user experience, monitor website performance, and provide relevant content, SWKK Adventure Sri Lanka uses cookies and other tracking technologies on our website.

a) What Are Cookies?

Cookies are small text files stored on your device (computer, tablet, or mobile phone) when you visit a website. These files help websites remember your preferences, track user activity, and improve functionality during future visits.

b) Types of Cookies We Use

We use the following categories of cookies:

Essential Cookies: Necessary for the website to function properly (e.g., for navigating pages or accessing secure areas).

Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous usage data (e.g., Google Analytics).

Functionality Cookies: Remember your preferences (such as language or region) to enhance your experience.

Advertising and Marketing Cookies: Track browsing habits to deliver personalised advertisements or affiliate offers. These may include cookies set by our partners such as Google, Aviasales, or Expedia.

c) Consent and Cookie Control

In compliance with the UK GDPR and EU ePrivacy Directive, we request your explicit consent before using any non-essential cookies. When you visit our website for the first time, a cookie banner will appear, allowing you to:

Accept all cookies

Reject non-essential cookies

Customise your cookie preferences

You may also manage or delete cookies at any time through your web browser settings.

d) Third-Party Cookies

Our website may include third-party cookies from external platforms (e.g., YouTube, Google Maps, social media widgets). These third parties have their own privacy policies, and we encourage you to review them.

e) Why We Use Cookies

We use cookies for the following purposes:

To maintain session security

To analyse website traffic and usage patterns

To remember user preferences

To improve site functionality and user experience

To deliver relevant advertisements

By continuing to use our website after selecting your cookie preferences, you consent to our use of cookies as outlined in this policy.

8. Data Security Measures

At SWKK Adventure Sri Lanka, we take your privacy and data security seriously. As a UK-registered online travel agency, we are committed to protecting your personal information using industry-standard security protocols and procedures.

a) Our Security Measures Include:

Data Encryption: Sensitive information such as personal details and payment data are encrypted using SSL (Secure Socket Layer) technology to prevent unauthorised access during transmission.

Secure Servers: All data is stored on secure servers protected by firewalls and regularly updated security software.

Restricted Access: Access to personal data is strictly limited to authorised personnel only. Our team is trained to handle your data responsibly and in accordance with UK GDPR.

Regular Security Audits: We monitor our systems regularly for vulnerabilities, and we implement security patches promptly when required.

Secure Payment Processing: All online payments are processed through trusted and secure third-party payment gateways, ensuring compliance with international payment security standards.

b) User Responsibility

While we take robust steps to secure your data, we also encourage you to:

Use strong, unique passwords when interacting with our website or making bookings.

Keep your login credentials confidential.

Avoid sharing sensitive information through public or unsecured platforms.

c) Disclaimer

Despite our best efforts, no online platform can guarantee 100% security. In the unlikely event of a data breach, we will promptly notify all affected users in accordance with legal requirements and take necessary actions to mitigate risks.

9. Retention of Your Personal Data

At SWKK Adventure Sri Lanka, we retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, and to comply with our legal, regulatory, and contractual obligations.

a) Duration of Retention

We retain your data:

For the duration of your travel booking and any related services;

For a reasonable period thereafter, as required by UK tax laws, accounting standards, or other legal obligations;

For internal record-keeping, dispute resolution, and compliance purposes.

If you have contacted us but not proceeded with any bookings, your data may be retained for a limited time to improve customer service or respond to follow-up queries.

b) Right to Request Deletion

You have the right to request the deletion of your personal data from our systems at any time if:

You have not travelled with us;

You do not intend to use our services in the future;

We no longer require your data for legitimate business or legal purposes.

To request deletion, please email us at:

📧 admin@swkkadventuresrilanka.com (or singappuli@hotmail.com this my personal email).

We will review and action your request in accordance with UK GDPR guidelines, and confirm once your data has been securely erased.

c) Data Retention in Case of Legal or Governmental Requirements

In specific situations, such as investigations or legal proceedings, we may be obligated to retain certain information even after a deletion request has been made. This is done strictly in accordance with UK and international laws.

10. Your Rights Under the UK GDPR

As a valued user of our services, you are entitled to a range of rights under the UK General Data Protection Regulation (UK GDPR). We are fully committed to upholding these rights and ensuring that your personal data is handled transparently, fairly, and securely.

a) Right to Access

You have the right to request access to the personal information we hold about you. Upon request, we will provide:

A copy of your personal data;

The purposes for which your data is being processed;

The categories of data being processed;

The recipients (or categories of recipients) your data may be disclosed to.

b) Right to Rectification

If you believe that any information, we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.

c) Right to Erasure (Right to Be Forgotten)

You may request the deletion of your personal data from our systems under the following conditions:

The data is no longer necessary for the purposes for which it was collected;You have withdrawn your consent (where consent was the basis for processing);

You object to the processing, and there are no overriding legitimate grounds to continue;

The data was processed unlawfully;

Deletion is required to comply with legal obligations.

We will review your request and respond in line with UK GDPR requirements.

d) Right to Restrict Processing

In certain circumstances, you may request that we temporarily suspend the processing of your data, particularly:

If you are contesting the accuracy of the data;

If the processing is unlawful and you oppose erasure;

If we no longer need the data but you require it for legal claims;

If you have objected to processing, and the matter is under review.

e) Right to Data Portability

You may request to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format. Where technically feasible, we can also transmit your data to another data controller at your request.

f) Right to Object

You have the right to object to the processing of your data based on our legitimate interests, or where processing is carried out for direct marketing purposes.

g) Right to Withdraw Consent

Where we rely on your consent to process personal information (e.g. for marketing emails), you can withdraw that consent at any time. This will not affect the lawfulness of processing before your withdrawal.

h) How to Exercise Your Rights

To make any request regarding your personal data, please contact us at:

📧 admin@swkkadventuresrilanka.com

We may need to verify your identity before fulfilling your request, for your protection.

We will aim to respond to all valid requests within 30 days, in accordance with the UK GDPR. If we need more time due to complexity, we will inform you promptly.

11. Cookies and Tracking Technologies

To enhance your experience on our website, we use cookies and similar tracking technologies. These technologies help us to provide a personalized experience, monitor website performance, and analyse website usage.

a) What are Cookies?

Cookies are small text files stored on your device that allow us to recognize your preferences, actions, and browsing patterns. They are commonly used across websites to improve user experience.

b) Types of Cookies We Use:

Essential Cookies: These are necessary for the operation of our website and to provide you with the services you have requested.

Analytical Cookies: These cookies allow us to collect information about how visitors use our website, such as which pages are most frequently visited. This helps us improve our website and services.

Marketing Cookies: These cookies may be used to display personalized advertisements or promotions based on your browsing habits.

c) Managing Cookies

You can manage your cookie preferences by adjusting your browser settings to accept or reject cookies. You may also delete cookies already stored on your device. However, please note that disabling cookies may affect your experience on our website and limit certain functionalities.For more information on how to manage cookies, please visit:

All About Cookies.

d) Consent for Cookies

By using our website, you consent to our use of cookies as outlined in this Privacy Policy. If you do not agree with our use of cookies, please refrain from using the website or adjust your browser settings accordingly.

12. Footer: Your Privacy and Data Protection Commitment

At SWKK Adventure Sri Lanka, we are committed to protecting your privacy and safeguarding your personal information. Our policies and practices are designed to ensure compliance with UK, EU, USA, Canadian, Australian, New Zealand, and other applicable data protection laws.

Your Personal Data will only be collected, processed, and stored for legitimate business purposes, including fulfilling travel bookings and responding to inquiries.

We implement robust Data Security Measures to protect your information from unauthorized access.

Your Rights are important to us: You have full control over your personal data, including the right to access, update, or delete it.

We use Cookies only with your consent, ensuring transparency in how your data is collected and used.

If you have any questions or concerns regarding our privacy practices or would like to exercise your rights, please do not hesitate to contact us at:

Please note the same GDPR Rules and Regulations applies to our Affiliated URLs https://www.jetpackstay.com   &    https://www.malaysiavjtravels.co.uk as well.

📧 admin@swkkadventuresrilanka.com

📞 +447922547219 (We accept only WhatsApp calls due scam and nuisance calls)

13. Our Commitment to Your Privacy

At SWKK Adventure Sri Lanka, we take your privacy seriously. Our primary objective is to ensure that your personal data is handled with the highest standards of security and confidentiality. We are fully committed to providing you with a transparent and secure online experience, whether you are booking a trip, making inquiries, or simply browsing our website.By

adhering to global data protection laws, including the UK GDPR, EU GDPR, and the privacy regulations of other relevant regions, we aim to foster trust with every interaction you have with us. We are dedicated to protecting your personal information and maintaining the integrity of our relationship.

As part of our ongoing efforts to respect and protect your privacy, we continually review and update our policies to ensure they remain in line with the latest regulatory requirements. Your trust is our priority, and we will continue to uphold these principles as we provide you with exceptional travel services.

Thanks for reading: ( Dr Singappuli Wijewardana PhD )