Privacy.

Who we are

Serendria Private Limited is a travel-design studio registered in Sri Lanka, with offices at No. 117/01, Kottawa, Pannipitiya. In this policy, "we", "us", and "our" refer to Serendria Private Limited. You can reach us at hello@serendria.com or +94 77 310 6248.

What we collect

When you submit an enquiry through this site, we ask you to share:

• Your full name
• Your email address
• Your phone number, if you choose to provide it
• Your country of residence
• The number of travellers and your approximate dates
• A budget range and a list of interests
• Any further notes you choose to add

Our web server also keeps short-term logs of standard request data — your IP address, the time of the request, and your browser's user agent — for security and operational reasons. We do not currently set any cookies on your device.

Anonymous conversion analytics

When someone submits an enquiry or chooses to call or message us from this site, we record a cookie-free aggregate event in Cloudflare Workers Analytics Engine. Each event contains only its event name (enquiry_submitted, phone_clicked, or whatsapp_clicked), the canonical page path where it happened, a count of 1, and the event timestamp added by Cloudflare. Cloudflare also stores its dataset and sampling metadata. These event records do not contain a name, email address, phone number, IP address, browser user agent, or a persistent visitor identifier, and are not joined to enquiry records. Cloudflare documents three-month retention for Workers Analytics Engine data.

Why we collect it

We collect your enquiry information for one purpose: to answer your enquiry well. We use what you tell us to design a thoughtful proposal, to coordinate with the hotels and ground operators who will host you, and — should you choose to travel with us — to make the practical arrangements of your trip.

We do not use your information for advertising. We do not sell, rent, or trade enquiry data.

Who we share it with

To plan and operate a journey, we share relevant parts of your details with a small number of trusted parties:

• Hotels and resort partners — names, dates, traveller count, and any preferences (dietary, accessibility, occasion) relevant to your stay.
• Ground operators — drivers, naturalists, and cultural guides who need to know who is travelling, when, and where.
• Payment processors — only if and when a booking proceeds; payment details are handled by a regulated processor and never stored on this website.
• Our email service provider — the inbox at hello@serendria.com is hosted by a third-party email provider, which means your message passes through their infrastructure under their own privacy terms.
• Our enquiry-management system (Travyxo) — stores the details submitted through this form so our team can manage and respond to your enquiry. Access is limited to authorised users, and the retention periods below apply to this copy of your enquiry too.

We share only what is needed and only with parties who need it. We do not pass your details to anyone else without your consent, unless required by law.

How long we keep it

Enquiries that do not progress to a booking: we keep these for up to 24 months in case you write again — most of our guests take time to plan. Bookings: we keep records for the duration of the trip and for seven years after, as required for tax, audit, and consumer-protection reasons under Sri Lankan law.

You can ask us to delete your data sooner; we will do so unless we are legally required to retain it.

Your rights

Whether you are in Sri Lanka or writing from abroad, you can ask us to:

• Tell you what personal data we hold about you
• Send you a copy of that data in a readable format
• Correct anything that's wrong
• Delete it (subject to legal retention obligations)
• Stop a particular use, or restrict it
• Help you lodge a complaint with the Data Protection Authority of Sri Lanka, or with the data-protection regulator in your country of residence

Your formal statutory entitlement to each of these depends on the law of your country of residence; where local law gives you more, we will follow that. To make a request, email hello@serendria.com. We aim to respond within one working week and, at the latest, within 30 days.

Security

This site is served over HTTPS. Enquiry data is read by a small team and stored in standard business systems with access limited to those who need it. We do not handle payment card details directly on the website — those go through a regulated processor when you book.

Children

Our service is intended for adults arranging travel, including family travel. We do not knowingly collect personal data from children directly. If you believe a child has submitted a form, please write to us and we will delete the entry.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page always reflects the current version. For material changes, we will flag the update at the top of the page for at least 60 days.

Legal basis and jurisdiction

This policy is anchored in the Sri Lanka Personal Data Protection Act, No. 9 of 2022. The rights described above are written in plain language for international travellers and apply regardless of where you live; depending on your jurisdiction, you may have additional rights under your local law, and we will honour those in good faith.

Contact

Questions, requests, complaints — all welcome.