Zee Ceylon

Legal

Privacy Policy

Last updated 27 September 2026

Zee Ceylon ("we", "us") is an Independent Travel Consultant operating with Jamie Wake Travel, a trading name of Wake Enterprises Limited, registered in England & Wales. We take your privacy seriously. This policy explains what personal data we collect through zeeceylon.co.uk, why we collect it, how long we keep it and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who is the data controller?

Zee Ceylon is the controller for data collected through this website. Where a booking is made, Jamie Wake Travel (Wake Enterprises Limited) also acts as a controller for the purposes of contracting, ATOL protection and financial administration. You can contact us about privacy at dimuth.fernando@independenttravelconsultant.co.uk.

2. What personal data we collect

  • Enquiry form: your name, email address, telephone number (optional), preferred destinations, travel dates, number of travellers, number of nights, budget range and any notes you add.
  • Ask Zee concierge chat: the messages you type and an anonymous session identifier. Please do not enter passport, payment or health details in the chat.
  • WhatsApp: if you message us on WhatsApp, we receive your phone number, profile name and message content. WhatsApp's own privacy policy also applies.
  • Booking information: if you go on to book, we will need passport details, dates of birth, dietary or accessibility requirements and payment information. These are collected by email or through Jamie Wake Travel's secure systems, not through this website.
  • Technical and usage data: with your consent only, anonymised analytics about how the site is used (see our Cookie Policy).

3. Why we use your data and our lawful basis

  • To respond to your enquiry and design an itinerary — our legitimate interest in answering a request you have made, and, once you decide to book, the performance of a contract.
  • To send a confirmation email when you submit the enquiry form, so you have a record of what you asked us — legitimate interest.
  • To make travel arrangements with airlines, hotels, drivers, guides and ground handlers in Sri Lanka — performance of a contract.
  • To meet legal obligations, including ATOL and package travel regulations, accounting and anti-fraud rules.
  • To improve the website using anonymised analytics — your consent, which you can withdraw at any time via 'Manage cookies' in the footer.

We do not sell your data, and we do not use it for automated decision-making or profiling.

4. Who we share your data with

  • Jamie Wake Travel / Wake Enterprises Limited, for contracting, ATOL protection and payment processing.
  • Travel suppliers needed to deliver your holiday: airlines, hotels, transfer companies, guides and experience providers, some of whom are located in Sri Lanka (see section 6).
  • Service providers who host this website and send our emails, acting under our instructions.
  • Our AI provider, which processes Ask Zee chat messages to generate replies. Messages are not used to train AI models.
  • Google (Google Analytics) and PostHog for anonymised analytics, only if you accept analytics cookies.
  • Regulators, courts or law enforcement where we are legally required to do so.

5. How long we keep your data

  • Enquiries that do not lead to a booking: up to 24 months, so we can pick up the conversation if you return.
  • Booking records: 7 years after travel, to meet accounting, ATOL and legal requirements.
  • Ask Zee chat sessions: up to 12 months, then deleted.
  • Analytics data: retained by Google Analytics for 14 months in anonymised form.

6. International transfers

Because we arrange holidays in Sri Lanka, some of your data (typically names, passport details and travel dates) must be shared with suppliers there to deliver your booking. We share only what is necessary. Some of our service providers process data in the United States under the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses.

7. Your rights

Under UK GDPR you have the right to:

  • access the personal data we hold about you;
  • ask us to correct inaccurate or incomplete data;
  • ask us to delete your data where there is no good reason for us to keep it;
  • object to or restrict our processing in certain circumstances;
  • receive your data in a portable format;
  • withdraw consent at any time where we rely on consent (for example analytics cookies).

To exercise any right, email dimuth.fernando@independenttravelconsultant.co.uk. We will respond within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.

8. Security

The website is served over HTTPS, enquiry data is stored in an access-controlled database, and our enquiry endpoint is rate-limited to prevent abuse. No method of transmission over the internet is completely secure, so please avoid sending passport or payment details through the website forms or chat.

9. Children

This website is intended for adults. We collect details of children only as part of a family booking, provided by a parent or guardian.

10. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised. Significant changes will be highlighted on this page.