Legal

PRIVACY
POLICY

Effective Date: January 1, 2026 Last Updated: May 2026 Governed by Sri Lankan Law
Data We Collect
How We Use It
Your Rights
Database & Third Parties
Cookies & Local Storage
Your Privacy Matters
Sri Lanka
Data Protection
Secure Platform
Your Privacy Matters
Sri Lanka
Data Protection
Secure Platform
Your Privacy Matters
Sri Lanka
Data Protection
Secure Platform

This Privacy Policy explains how TRAVEL Lanka — Vehicle Rentals, operated by sanuaa infinity / sanuda dewmal ("we", "us", or "our"), collects, uses, stores, and protects your personal information when you visit and use our website at travellanka.run.place.

By accessing our website, creating an account, making a booking, or posting an ad, you agree to the collection and use of your data as described in this Policy. If you do not agree, please discontinue use of our services.

🔐
What We Collect
Name, email, phone, NIC/passport, driving licence, booking details, and technical usage data.
🎯
Why We Use It
To process bookings, verify identity, send notifications, prevent fraud, and improve our service.
🛡️
Your Rights
Access, correct, or request deletion of your data at any time by contacting us.
TABLE OF CONTENTS
  1. Who We Are
  2. Data We Collect
  3. How We Collect Data
  4. How We Use Your Data
  5. Data Sharing & Disclosure
  6. Database & Third-Party Services
  7. Cookies & Local Storage
  8. Push Notifications
  9. Data Retention
  10. Data Security
  11. Your Rights
  12. Children's Privacy
  13. External Links
  14. Changes to This Policy
  15. Contact Us

01

WHO WE ARE

TRAVEL Lanka — Vehicle Rentals is a Sri Lanka-based vehicle rental and ride platform owned and operated by sanuaa infinity. We provide vehicle rentals, chauffeur rides, airport transfers, and a community ad-posting service for travel-related businesses operating within Sri Lanka.

Our website is accessible at travellanka.run.place. For the purpose of this Policy, sanuaa infinity is the data controller responsible for your personal information.

Contact: For all privacy-related enquiries, email us at contact.travellanka.support@gmail.com or visit our Contact Page.

02

DATA WE COLLECT

We collect different categories of personal data depending on how you interact with TRAVEL Lanka. The table below summarises what we collect and why:

Category Data Collected When Collected
Account Data Full name, email address, profile photo When you register or sign in via Google
Booking Data NIC or passport number, driving licence number, contact phone, pick-up/drop-off location, dates, flight details When you place a booking
Ad Posting Data Business name, contact number, email, vehicle/service details, uploaded images When you submit a listing
Communication Data Messages sent via our contact form or in-app chat When you contact us or use live chat
Technical Data IP address, browser type, device type, pages visited, session duration Automatically when you visit the site
Payment Data Transaction reference (we do not store full card/bank details) When a paid service is used

⚠ Sensitive Documents: Identity documents such as your NIC/passport and driving licence number are collected solely for booking verification and legal compliance purposes. This data is stored securely in our Firebase Firestore database and is never sold or shared with third parties for commercial purposes.

03

HOW WE COLLECT DATA

We collect your data through the following means:

  • When you create an account or sign in using Google Authentication.
  • When you complete and submit our booking form.
  • When you submit an advertisement on the community listings section.
  • When you fill out and submit our contact form.
  • When you use the live chat feature on our platform.
  • Through Database Analytics, which collects usage data and session information when you browse our website.
  • Through Google AdSense, which may collect data for the purpose of serving relevant ads on our platform.
  • Through browser Local Storage, which we use to maintain your login session and preferences without repeated sign-ins.
  • Through Firebase Cloud Messaging (FCM), which logs device tokens when you opt into push notifications.
  • From Google, when you choose to sign in via Google Sign-In. We receive your public profile information (name, email, profile photo) as provided by your Google account.
04

HOW WE USE YOUR DATA

We use your personal data only for the purposes for which it was collected or for compatible purposes. Specifically, we use your data to:

No Marketing Without Consent: We will not use your personal data to send you unsolicited marketing emails or promotional material without your explicit consent. You may opt out of any communications at any time.

05

DATA SHARING & DISCLOSURE

We do not sell, rent, or trade your personal data to third parties. Your data may only be shared in the following limited circumstances:

⚠ Community Listings: When you post an advertisement on TRAVEL Lanka, certain information you provide — such as your contact number, vehicle details, and images — will be visible to the public. Please only include information you are comfortable sharing publicly.

06

DATABASE & THIRD-PARTY SERVICES

TRAVEL Lanka is built on Google infrastructure. The following services are used and process your data:

Used to authenticate users via Google Sign-In. We receive your name, email address. Google handles authentication securely without us storing your password.

Our cloud database stores user profiles, booking records, ad submissions, and chat messages. Data is stored on Google Cloud servers and is subject to Google's data processing agreements.

Used to send push notifications about bookings and platform updates. Your device token is stored only if you opt in to notifications and is used solely for this purpose.

We display advertisements on our website via Google AdSense. Google may use cookies and tracking technologies to serve personalised ads based on your browsing history. You can manage your Google ad personalisation settings at adssettings.google.com.

Google's privacy practices are governed by the Google Privacy Policy. By using TRAVEL Lanka, you acknowledge that data is processed by Google in accordance with its privacy terms.

07

COOKIES & LOCAL STORAGE

We use browser Local Storage (not traditional cookies) to maintain your session and preferences across visits. The following keys are stored locally on your device:

Storage Key Purpose Persistent?
travel_user Stores your authenticated user profile (name, email) to keep you signed in between sessions Until sign-out
travel_access Records authentication status to manage access to protected pages Until sign-out

Additionally, Google AdSense and Firebase may set their own cookies on your browser for analytics and ad-serving purposes. You can control cookie preferences through your browser settings or opt out of Google's advertising cookies at adssettings.google.com.

No Tracking Cookies From Us: TRAVEL Lanka does not set any first-party tracking or advertising cookies. The Local Storage entries listed above are used purely for session functionality and do not track your behaviour across other websites.

08

PUSH NOTIFICATIONS

TRAVEL Lanka may request permission to send you push notifications via your browser. These notifications are delivered through Firebase Cloud Messaging (FCM) and are used to alert you about:

Push notifications are entirely opt-in. You can withdraw your consent at any time by adjusting the notification settings in your browser (Settings → Notifications → travellanka.run.place → Block). Revoking notification permission will not affect your ability to use any other feature of our platform.

09

DATA RETENTION

We retain your personal data only for as long as is necessary to fulfil the purposes outlined in this Policy or as required by Sri Lankan law. The following retention periods apply:

10

DATA SECURITY

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it from unauthorised access, alteration, disclosure, or destruction.

⚠ No System Is Perfect: While we strive to protect your data, no internet-based platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights, we will notify affected users as promptly as possible in accordance with applicable law.

11

YOUR RIGHTS

As a user of TRAVEL Lanka, you have the following rights in relation to your personal data:

You may request a copy of the personal data we hold about you at any time.

You may request that we correct any inaccurate or incomplete personal data we hold about you.

You may request deletion of your personal data. We will comply unless we have a lawful basis to retain it (e.g. ongoing legal obligation or active dispute).

You may object to the processing of your data for direct marketing or analytics purposes at any time.

You may request that we provide your data in a structured, machine-readable format.

To exercise any of these rights, please contact us at contact.travellanka.support@gmail.com. We will respond to all legitimate requests within 30 days.

12

CHILDREN'S PRIVACY

TRAVEL Lanka's services are intended for adults and individuals of legal driving age in Sri Lanka. Our platform is not directed at, and does not knowingly collect personal data from, children under the age of 18.

If we become aware that we have inadvertently collected personal data from a minor, we will delete that data from our systems promptly. If you believe we have collected data from a child, please contact us immediately at contact.travellanka.support@gmail.com.

14

CHANGES TO THIS POLICY

We reserve the right to update or modify this Privacy Policy at any time. Changes will be effective immediately upon publication at travellanka.run.place/privacy-policy.html. The "Last Updated" date at the top of this page will always reflect the most recent revision.

For significant changes that materially affect how we use your data, we will endeavour to notify registered users via email or a prominent notice on the website. Your continued use of our services following any change constitutes acceptance of the updated Policy.

15

CONTACT US

If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact us through any of the following channels:

We are committed to resolving all privacy-related enquiries fairly and promptly. We aim to respond to all requests within 30 calendar days.

YOUR TRUST IS OUR PRIORITY