Privacy Policy & Cookie Statement

Last Updated: May 19, 2026

Welcome to travelx.lk ("we," "our," or "us"). We operate the travelx.lk website and the travelx.lk mobile application (collectively, the "Service"). Your privacy is critically important to us. This document explains how we collect, use, disclose, and safeguard your information when you use our platform to browse, compare, and book hotel accommodations and travel services.

Please read this policy carefully. By accessing or using our website or mobile application, you consent to the collection, processing, and storage of your data as outlined in this statement. If you do not agree with the terms of this policy, please immediately discontinue use of the Service.

1. Information We Collect

We collect several different types of information to provide a smooth, secure, and personalized booking experience for you.

A. Personal Data You Provide Directly

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you, process your reservations, or manage your account profile. This includes:

• Identity Data: Full name, date of birth, gender, nationality, and government-issued identification numbers (such as National Identity Card [NIC] or passport details), which are frequently required by hotel properties at check-in.

• Contact Data: Email address, phone number, and billing or residential address.

• Booking and Reservation Data: Specific hotel choices, room types, travel dates, guest names (including minors when traveling as a family unit), dietary restrictions, smoking preferences, and special requests submitted to the accommodation provider.

• Financial and Payment Data: Credit/debit card numbers, expiration dates, security codes (CVV), or digital wallet details.

  Note: All financial data is processed securely via encrypted, certified third-party payment gateways operating in Sri Lanka or internationally. We do not store full credit card data on our servers.

• Account Credentials: Usernames, passwords, and similar security information used to create and protect your travelx.lk user profile.

• Customer Support & Communications: Records of any correspondence, feedback, reviews, or surveys you complete when contacting our customer service channels.

B. Information We Collect Automatically

When you access or use travelx.lk—whether via our web domain or our mobile application—our servers and integrated third-party tools automatically record data about your device and how you interact with our platform:

• Log and Usage Data: Internet Protocol (IP) address, server logs, dates and times of visits, specific hotel listings or pages viewed, search terms performed, clickstream patterns, duration of page visits, and error or crash reports.

• Device Profiles: Device hardware model, operating system and version (e.g., iOS, Android, Windows), web browser type (e.g., Chrome, Safari, Firefox), system language, mobile network carrier, and unique device identifiers (such as Apple’s IDFA or Google's Advertising ID).

• Geolocational Data: We automatically estimate your general geographic location using your IP address. If you grant explicit permission through your smartphone operating system, our mobile app will collect precise GPS coordinates to deliver real-time, location-based hotel deals and maps.

• Tracking Technologies: Session information captured via cookies, pixels, web beacons, and mobile Software Development Kits (SDKs).

2. How We Use Your Information

We process your personal and technical data under legal grounds including contract fulfillment, legitimate business interests, and explicit user consent. We use your data to:

• Facilitate and Confirm Bookings: Transmit your travel reservation parameters to hotel partners, process financial transactions, and issue booking vouchers or digital invoices.

• Account Management: Maintain your profile, remember your past travel history, and manage customer loyalty programs.

• Customer Care: Provide real-time support, process room modifications or cancellations, and resolve disputes or complaints.

• Platform Optimization: Analyze user interaction patterns to troubleshoot bugs, optimize system speeds, improve mobile app layouts, and refine search filter algorithms.

• Marketing and Promotions: Serve customized accommodation recommendations, distribute newsletter updates, or notify you of seasonal travel discounts (you retain the right to unsubscribe at any time).

• Security and Fraud Prevention: Detect, prevent, and mitigate fraudulent transactions, unauthorized account access, spam, or cyberattacks to maintain a secure checkout environment.

3. Disclosure and Sharing of Your Information

We do not sell, rent, or trade your personal data to third parties for their independent marketing purposes. We share your information only under the following strictly defined conditions:

• Accommodation Partners (Hotels and Resorts): We share your identity, booking data, and special requests with the specific hotel or resort you have reserved. This information is essential for them to honor and process your check-in.

• Third-Party Service Providers: We collaborate with specialized vendors who perform services on our behalf. These include payment gateway processors, cloud hosting networks, data analytics services (e.g., Google Analytics, Firebase), customer service software, and email deployment applications. These parties are contractually bound to protect your data and are prohibited from using it for any other purpose.

• Corporate Restructuring: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another enterprise.

• Legal Compliance and Safety: We may disclose your information to Sri Lankan law enforcement, regulatory agencies, court systems, or international authorities if required by law or a valid subpoena. This includes protecting the rights, property, safety, or security of travelx.lk, our users, or the general public.

4. Mobile Application Specific Permissions

To ensure optimal performance and feature availability within the travelx.lk mobile application, the software may request permission to access certain native capabilities of your mobile device:

• Location Services: Allows the app to identify your coordinates to sort hotel options by physical proximity and map available properties.

• Push Notifications: Permits the platform to send real-time alerts regarding booking updates, price volatility warnings, check-in reminders, or exclusive app-only deals.

• Camera and Photo Library: Enables you to capture or upload images for your user profile or scan payment card surfaces to streamline checkout inputs.

• Storage Access: Allows the application to download, cache, and save digital booking vouchers directly to your local file system.

You can grant, modify, or revoke these permissions at any structural point via your smartphone’s system setting menu. Denying certain permissions may limit your ability to use specific app features.

5. Cookie Statement

What are Cookies and Tracking Technologies?

Cookies are small alphanumeric text files placed on your computer or mobile device when you load a webpage. Web beacons, pixels, and mobile SDKs act similarly, serving as identifiers to track sessions across separate digital spaces.

How We Categorize and Use Cookies

Our website and mobile web wrappers use the following types of cookies:

• Essential / Strictly Necessary Cookies: Crucial for core web operations. They authenticate users, secure account log-ins, and preserve your active booking path as you advance through the checkout process. Without these, the platform cannot function correctly.

• Functional Cookies: Remember choices you make across sessions, such as your preferred currency display (e.g., LKR, USD, EUR) or language preferences, ensuring a consistent user experience.

• Performance & Analytics Cookies: Collect anonymized aggregate metrics about how visitors move through our site. This signals which pages encounter errors, what hotel entries are most popular, and how we can refine interface response times.

• Targeting and Advertising Cookies: Placed by our advertising networks (e.g., Google, Meta) to track browsing habits across the wider web. This enables us to serve relevant, targeted travelx.lk promotions to you on third-party websites based on the hotels you searched for on our app.

How to Control Your Cookies

Most internet browsers are configured to accept cookies automatically. You can change your browser preferences to reject cookies, alert you when a cookie is issued, or purge your browser storage cache. Please be aware that if you disable essential cookies entirely, certain workflows on travelx.lk—including processing a hotel booking—may fail to execute correctly.

6. Data Security and International Data Transfers

Data Security

We implement robust technical, administrative, and physical security parameters to safeguard your personal data. This includes Secure Sockets Layer (SSL/TLS) encryption layers for data in transit, firewall barriers for server architecture, and access control restrictions for internal personnel. Despite these advanced protocols, no electronic storage system or transmission pathway over the open web is completely immune to risk; we cannot guarantee absolute system security.

International Data Transfers

While travelx.lk primarily services the Sri Lankan accommodation marketplace, our digital infrastructure, cloud storage arrays, and payment systems may be anchored on global servers located outside of Sri Lanka. By utilizing our platform, you recognize and agree that your data may be transferred to, stored in, and processed within countries whose local privacy laws differ from those of your home jurisdiction.

7. Data Retention and Deletion Rights

Data Retention

We retain your personal data only for as long as is necessary to satisfy the booking contracts detailed in this policy, comply with our corporate accounting or taxation liabilities, or resolve ongoing legal disputes. When data is no longer tied to an active legal or business obligation, it is either completely erased from our active databases or scrubbed of identifiers to become completely anonymized data.

Your Data Rights

Depending on your residency and local statutes, you may possess specific legal entitlements concerning your data, including:

• The Right to Access: Request a digital copy of the personal information we currently hold about you.

• The Right to Rectification: Mandate the immediate correction of inaccurate or incomplete information.

• The Right to Erasure ("Right to be Forgotten"): Request that we delete your user profile and associated personal data, provided there are no superseding financial, tax, or legal retention mandates keeping the data active.

• The Right to Object/Restrict: Withdraw your consent or object to the processing of your data for direct marketing goals.

To exercise any of these rights, please submit a formal request to our designated data security desk using the contact channels listed below.

8. Children’s Privacy

Our platform is intended strictly for adults who can lawfully enter into financial contracts under Sri Lankan law. We do not intentionally collect or solicit personal information from individuals under the age of 18. If we discover that an individual under 18 has submitted personal data without verified parental supervision, we will delete that data from our infrastructure immediately.

9. Revisions to This Statement

We reserve the right to alter, modify, or update this Privacy and Cookie Statement at any time to reflect changing operational protocols, app features, or legislative requirements. Any revisions will be signaled by updating the "Last Updated" date positioned at the top of this document. We encourage you to review this policy periodically to stay informed about how we safeguard your information.

10. Contact Us

If you have any questions, complaints, clarifications, or data rights requests concerning this comprehensive statement, please contact our privacy compliance officer at:

• Email: info@travelx.lk

• Customer Support Line: +94 713 580 580

• Official Web Desk: www.travelx.lk/contact

• Registered Office Address: No. 121, 1st Floor, St. Joseph Street, Negombo, Sri Lanka