Last updated: 10 July 2026
OWT Sri Lanka ("OWT Sri Lanka", "OWT", "we", "our", or "us") is committed to protecting your privacy and handling your personal information responsibly, securely and transparently.
OWT Sri Lanka is the travel brand of:
OWT Group (Private) Limited
Company Registration No.: PV00238327
Registered Office:
4/6, Geethanjalee Place
Colombo 00300
Sri Lanka
This Privacy Policy explains how we collect, use, store, disclose and protect your personal information when you:
- Visit our website;
- Request a quotation;
- Make a booking;
- Contact us via email, telephone, WhatsApp or social media;
- Subscribe to newsletters or marketing communications;
- Travel with us;
- Use any services provided by OWT Sri Lanka.
By using our website or services, you acknowledge that you have read and understood this Privacy Policy.
1. Information We Collect
Depending on the services requested, we may collect the following categories of information.
Personal Information
- Full name
- Date of birth
- Nationality
- Passport information
- Gender (where required for travel arrangements)
- Residential address
- Country of residence
- Telephone number
- Mobile number
- WhatsApp number
- Email address
Booking Information
- Travel dates
- Flight information
- Arrival and departure details
- Hotel preferences
- Room requirements
- Tour selections
- Vehicle preferences
- Destination preferences
- Travel companions
- Emergency contact information
Payment Information
We may collect:
- Payment amount
- Currency
- Transaction reference
- Payment status
OWT Sri Lanka does not store complete credit or debit card details on its own systems where payments are processed through a secure third-party payment gateway.
Identity Verification
Where necessary, we may request:
- Passport copy
- Visa information
- Government-issued identification
solely for booking and travel purposes.
Health Information
Only where necessary and voluntarily provided, we may collect limited health information relevant to your travel arrangements, including:
- Mobility requirements
- Dietary requirements
- Food allergies
- Medical conditions affecting travel
- Accessibility requirements
Health information is handled with enhanced confidentiality.
Technical Information
When you visit our website, we may automatically collect:
- IP address
- Browser type
- Operating system
- Device type
- Language settings
- Time zone
- Pages visited
- Referral source
- Website usage statistics
- Cookies
- Analytics information
2. How We Collect Information
Information may be collected:
- Directly from you;
- Through our website;
- Through enquiry forms;
- Through booking forms;
- Via WhatsApp;
- Via email;
- Via telephone;
- Through social media;
- From authorised travel agents;
- From corporate clients;
- Through cookies and analytics tools.
3. How We Use Your Information
We use your information only where necessary for legitimate business purposes, including to:
- Prepare quotations;
- Confirm bookings;
- Arrange accommodation;
- Arrange transportation;
- Book excursions;
- Issue invoices;
- Process payments;
- Provide customer support;
- Communicate travel updates;
- Respond to enquiries;
- Improve our services;
- Prevent fraud;
- Comply with legal obligations;
- Send marketing communications where you have consented.
We will never sell your personal information to third parties.
4. Legal Basis for Processing (GDPR)
Where the GDPR applies, we process your personal information on one or more of the following legal bases:
- Performance of a contract (to arrange and provide your travel services);
- Compliance with legal obligations;
- Our legitimate business interests, provided these do not override your rights;
- Your consent, where required (for example, marketing communications or use of identifiable photographs).
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal will not affect processing carried out before consent was withdrawn.
5. Sharing Your Information
We only share personal information where reasonably necessary to deliver your booking or comply with legal obligations.
Your information may be shared with:
- Hotels;
- Villas;
- Transport providers;
- Chauffeurs;
- Tour guides;
- National parks;
- Attraction operators;
- Airlines;
- Rail operators;
- Activity providers;
- Payment gateways;
- Banks;
- Insurance providers (where requested);
- Government authorities;
- Immigration authorities;
- Professional advisers;
- Technology service providers.
Each supplier receives only the information necessary to perform the relevant service.
6. International Data Transfers
As an international travel company, we may transfer your personal information to suppliers and service providers located outside your country of residence.
Where applicable, we take reasonable steps to ensure that such transfers are protected through appropriate contractual or organisational safeguards.
7. Data Retention
We retain personal information only for as long as reasonably necessary to:
- Complete your booking;
- Provide customer support;
- Meet legal or tax obligations;
- Resolve disputes;
- Enforce our agreements;
- Prevent fraud.
When information is no longer required, it will be securely deleted, anonymised or destroyed.
8. Cookies
Our website uses cookies and similar technologies to improve functionality, analyse website usage and enhance your browsing experience.
Cookies may be used for:
- Essential website functionality;
- Website performance;
- Analytics;
- Security;
- User preferences;
- Marketing (where consent has been provided).
You may control cookies through your browser settings.
Disabling cookies may affect certain website functions. For more detail, see our Cookie Policy.
9. Analytics
We may use analytics tools, including Google Analytics and similar services, to understand how visitors interact with our website.
Analytics information may include:
- Pages viewed;
- Time spent on pages;
- Device information;
- General geographic location;
- Referral source.
This information is generally aggregated and does not directly identify individual users.
10. Marketing Communications
With your consent where required, we may send:
- Travel offers;
- Promotions;
- Newsletters;
- Destination updates;
- Seasonal campaigns.
You may unsubscribe at any time by following the unsubscribe instructions in our communications or by contacting us directly.
Operational communications relating to existing bookings will continue where reasonably necessary.
11. Data Security
OWT Sri Lanka implements appropriate administrative, technical and organisational measures to protect personal information from:
- Unauthorised access;
- Loss;
- Misuse;
- Alteration;
- Disclosure;
- Destruction.
Despite our efforts, no internet transmission or electronic storage system can be guaranteed to be completely secure.
12. Your Rights
Depending on your location and applicable law, you may have the right to:
- Request access to your personal information;
- Request correction of inaccurate information;
- Request deletion of your personal information where legally permissible;
- Request restriction of processing;
- Object to certain processing activities;
- Withdraw consent where processing is based on consent;
- Request a copy of your personal information in a portable format where applicable.
We may request reasonable proof of identity before responding to such requests.
13. Children's Privacy
Our services are intended for adults making travel arrangements.
Where information relating to children is required for travel bookings, it will be collected only through a parent, legal guardian or authorised representative.
We do not knowingly collect personal information directly from children for marketing purposes.
14. Third-Party Websites
Our website may contain links to third-party websites.
OWT Sri Lanka is not responsible for the privacy practices or content of external websites.
Users should review the privacy policies of those websites separately.
15. Data Breach Response
If we become aware of a data security incident affecting personal information, we will take reasonable steps to:
- Investigate the incident;
- Mitigate potential harm;
- Notify affected individuals where required by applicable law;
- Notify relevant authorities where legally required.
16. Changes to This Privacy Policy
OWT Sri Lanka reserves the right to update this Privacy Policy from time to time.
The latest version will always be published on our website.
Material changes may be communicated through our website or other appropriate channels.
17. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact:
OWT Sri Lanka
A travel brand of OWT Group (Private) Limited
Company Registration No.: PV00238327
Registered Office:
4/6, Geethanjalee Place
Colombo 00300
Sri Lanka
Website: https://www.owtsrilanka.com
Email: info@owtsrilanka.com
Telephone: +94 77 115 7116
You may contact us through the official contact details published on our website, and we will respond to privacy-related enquiries within a reasonable timeframe.
By continuing to use our website or services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use and disclosure of your personal information as described herein.