Effective Date: 4th November 2022

At 1 2 3 Travels (PVT) Ltd, we are committed to protecting your privacy and safeguarding the personal information you share with us. This Privacy Policy outlines how we collect, use, disclose, and protect your personal data in accordance with international data protection regulations such as the General Data Protection Regulation (GDPR) and Sri Lankan privacy standards, including the Data Protection Act No. 9 of 2022.

  1. Scope of this Privacy Policy

This policy applies to all personal data collected through our website (123travels.org), mobile applications, email communications, and in-person interactions with our representatives.

  2. Information We Collect

We may collect the following categories of personal information:

2.1 Personal Identification Information

• Name, date of birth, nationality, gender
• Passport and visa details

2.2 Contact Information

• Email address, phone number, physical address

2.3 Payment Information

• Credit/debit card details
• Bank account information (if applicable)

2.4 Travel Information

• Flight, hotel, tour bookings, and preferences
• Frequent flyer numbers or travel reward memberships

2.5 Technical Information

• IP address, browser type, device information
• Cookies and usage data (see Section 8 on cookies)

2.6 Other Information

• Health-related information (if required for travel arrangements)
• Emergency contact details

  3. How We Use Your Information

We use your information to:

1. Process and confirm bookings (e.g., tickets, hotels, tours, insurance).
2. Facilitate visa applications and travel documentation.
3. Communicate with you about your bookings, inquiries, and services.
4. Process payments and refunds securely.
5. Improve our services through customer feedback.
6. Comply with legal obligations and regulatory requirements.

  4. Sharing Your Information

We may share your information with:

• Third-party service providers (e.g., airlines, hotels, insurance companies) to fulfill your booking and service requests.
• Government authorities (e.g., immigration, customs) for visa applications or legal compliance.
• Payment processors to facilitate secure transactions.
• Marketing partners (only with your explicit consent) for promotional purposes.

We do not sell or rent your personal data to third parties.

  5. International Data Transfers

Your personal data may be transferred to and processed in countries outside of Sri Lanka, including countries that may not have equivalent data protection laws. In such cases, we ensure that appropriate safeguards are in place to protect your data, in compliance with GDPR Article 46 and Sri Lankan Data Protection Act provisions.

  6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, including legal, accounting, or reporting requirements.

• Retention Period for Travel Records: 7 years
• Retention Period for Marketing Data: Until you opt-out

  7. Your Data Protection Rights

You have the following rights regarding your personal data:

1. Right to Access: Request a copy of the data we hold about you.
2. Right to Rectification: Request corrections to inaccurate or incomplete data.
3. Right to Erasure: Request deletion of your data, subject to legal and contractual obligations.
4. Right to Data Portability: Receive your data in a structured format.
5. Right to Restrict Processing: Limit how your data is used.
6. Right to Object: Withdraw consent or object to certain processing activities.

To exercise your rights, contact us at hello@123travels.org.

  8. Cookies and Tracking Technologies

Our website uses cookies to enhance user experience and analyze website traffic. Cookies are small text files stored on your device.

• Essential Cookies: Necessary for website functionality.
• Analytical Cookies: Used to understand website usage and improve services.
• Marketing Cookies: Used for personalized advertising (with your consent).

You can manage cookie preferences via your browser settings.

  9. Security Measures

We implement industry-standard security measures to protect your data, including:

• SSL encryption for secure data transmission.
• Regular security audits and vulnerability assessments.
• Restricted access to personal data on a need-to-know basis.

Despite our best efforts, no system is completely secure, and we cannot guarantee absolute data security.

  10. Third-Party Websites

Our website may contain links to third-party websites. This Privacy Policy does not apply to external websites, and we are not responsible for their practices. Please review their privacy policies separately.

  11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in laws or our practices. Any updates will be posted on 123travels.org with the effective date.

  12. Contact Us

For inquiries, concerns, or to exercise your rights, please contact us:

1 2 3 Travels (PVT) Ltd
Website: 123travels.org
Email: hello@123travels.org
Phone: +94 76 980 4916