Privacy Policy

1. Information We Collect

MSS Travels and Tours collects information necessary to provide you with exceptional travel services. The types of information we may collect include:

Personal Information

• Name — as it appears on your passport or travel documents
• Email address — for booking confirmations and communications
• Phone number — for urgent travel updates and support
• Passport details — including passport number, nationality, and expiry date, required for travel bookings and visa processing
• Date of birth — as required by airlines and accommodation providers
• Postal address — for correspondence and document delivery

Payment Information

• Credit or debit card details (processed securely through our payment providers)
• Bank account information for refund processing
• Billing address

Usage Data

• Browser type and version
• Pages visited and time spent on our website
• Referring website or source
• Device type and operating system
• IP address

2. How We Use Your Information

We use the information we collect for the following purposes:

• Booking processing — to arrange flights, accommodation, tours, and other travel services on your behalf
• Communication — to send booking confirmations, itinerary updates, travel advisories, and respond to your enquiries
• Service improvement — to analyse how our website and services are used so we can enhance your experience
• Marketing — to send you promotional offers and travel deals, only where you have given your consent
• Legal compliance — to meet our obligations under applicable laws and regulations, including tax and immigration requirements
• Fraud prevention — to protect against unauthorised transactions and ensure the security of our services

3. Information Sharing

We do not sell your personal information. We may share your data in the following circumstances:

Third-Party Service Providers

To fulfil your travel bookings, we may share relevant personal information with:

• Airlines and transport operators
• Hotels and accommodation providers
• Tour operators and local guides
• Visa processing agencies
• Travel insurance providers
• Payment processing services

Legal Requirements

We may disclose your information where required by law, regulation, legal process, or governmental request, including immigration and customs authorities.

With Your Consent

We may share your information with other third parties when you have explicitly given us your consent to do so.

4. Data Security

We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it, including:

• Secure encryption for data transmitted through our website
• Restricted access to personal data on a need-to-know basis
• Regular review and update of our security practices
• Secure storage of physical documents containing personal information

5. Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies to enhance your browsing experience. These include:

• Essential cookies — required for the website to function properly
• Analytics cookies — help us understand how visitors interact with our website
• Marketing cookies — used to deliver relevant advertisements and track campaign effectiveness

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our website.

6. Your Rights

You have the following rights regarding your personal information:

• Access — you may request a copy of the personal data we hold about you
• Correction — you may request that we correct any inaccurate or incomplete information
• Deletion — you may request that we delete your personal data, subject to any legal obligations we are required to fulfil
• Opt-out of marketing — you may unsubscribe from marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly
• Data portability — you may request your data in a structured, commonly used format
• Restriction — you may request that we restrict the processing of your data in certain circumstances

To exercise any of these rights, please contact us using the details provided at the bottom of this page. We will respond to your request within 30 days.

7. Third-Party Links

Our website may contain links to third-party websites, including those of airlines, hotels, and other travel service providers. We are not responsible for the privacy practices or content of these external sites.

We encourage you to review the privacy policies of any third-party websites you visit through links on our site.

8. Children's Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal information from children without parental or guardian consent.

Where we arrange travel for minors as part of a family booking, the personal information of the child is collected from and managed by the parent or legal guardian. If you believe we have inadvertently collected information from a child without appropriate consent, please contact us and we will promptly delete it.

9. International Data Transfers

MSS Travels and Tours operates between the United Kingdom and Sri Lanka. Your personal information may be transferred to and processed in either country, as well as in other countries where our travel partners and service providers are located.

Where data is transferred internationally, we take steps to ensure that appropriate safeguards are in place to protect your information in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and Sri Lanka's data protection framework.

10. Changes to This Policy

MSS Travels and Tours reserves the right to update or modify this privacy policy at any time. Any changes will be posted on this page with an updated effective date.

We encourage you to review this policy periodically to stay informed about how we are protecting your information. Continued use of our services after changes are posted constitutes your acceptance of the revised policy.