Legal & Compliance · Mindora Ceylon

Privacy Policy

Your privacy and data security are fundamental to everything we do

Data Protection Secure Processing Transparent Practices

Last updated: January 2025

1. Information We Collect

At Mindora Ceylon Inbound Travel and Recreation (Pvt) Ltd, we collect information that helps us provide personalised Sri Lanka wellness and medical travel experiences while maintaining the highest standards of data protection. Given the nature of our wellness and medical tourism services, we handle health-related information with particular care and sensitivity.

Personal Information

  • Name, contact details, and passport information
  • Travel preferences, dietary requirements, and wellness goals
  • Payment and billing information
  • Emergency contact details
  • Health, mobility, and medical considerations for wellness tour planning
  • Mental health preferences relevant to therapeutic itinerary design

Technical Information

  • IP address and browser information
  • Website usage data and cookies
  • Device information and location data (with consent)
  • Communication records and customer service interactions via WhatsApp, email, and phone

2. How We Use Your Information

We use your personal information exclusively for:

  • Planning and delivering customised Sri Lanka wellness and medical travel experiences
  • Psychology-informed itinerary design by Mrs. Thanuja Sandamali and our clinical team
  • Medical coordination and healthcare support by Dr. A.M.S.Kulasiri and our medical team
  • Processing bookings and payments securely
  • Providing customer support and emergency medical assistance
  • Sending booking confirmations and wellness travel updates
  • Improving our services based on guest feedback
  • Compliance with SLTDA registration and legal requirements

3. Information Sharing & Disclosure

We maintain strict control over your personal information and only share it when:

  • Essential for travel services (wellness retreats, hotels, transportation, certified guides)
  • Required for medical coordination with healthcare facilities in Sri Lanka
  • Required by law or government authorities in Sri Lanka or your home country
  • Necessary for payment processing through secure, verified channels
  • You provide explicit consent for additional wellness or medical services
  • Emergency situations require immediate medical assistance
We never sell, rent, or trade your personal information — including health and wellness data — to third parties for marketing purposes.

4. Data Security & Protection

Your data security is our priority. We implement:

  • SSL encryption for all data transmission across mindoraceylon.com
  • Secure servers with regular security updates and vulnerability assessments
  • Limited access controls — health and medical data accessible only to clinical team members
  • Ongoing staff training on data protection and confidentiality obligations
  • Secure backup systems and disaster recovery procedures
  • Special security protocols for sensitive health and wellness information

5. Your Rights & Choices

Under applicable data protection laws, you have the right to:

  • Access your personal and health information held by us
  • Correct inaccurate or incomplete data
  • Request deletion of your personal information
  • Object to processing for marketing purposes
  • Data portability and transfer
  • Withdraw consent at any time, including consent to process health-related data
  • Request that your wellness preferences be removed from our planning systems

6. Cookies & Tracking

We use cookies to enhance your browsing experience on mindoraceylon.com:

  • Essential cookies for website functionality
  • Analytics cookies to understand how visitors engage with our wellness content
  • Preference cookies to remember your settings and language preferences
  • Marketing cookies (only with your explicit consent)

You can manage cookie preferences through your browser settings at any time.

7. International Data Transfers

Given our international wellness tourism operations — serving guests from India, UK, Australia, Germany, the Middle East, and North America — we may transfer your data internationally. We ensure:

  • Adequate protection through approved legal mechanisms
  • Compliance with applicable data protection laws across all operating markets
  • Contractual safeguards with all third-party service providers and medical facilities
  • Transparency about transfer purposes and international service destinations

8. Data Retention

We retain your personal information only as long as necessary:

  • During active wellness travel planning and tour execution
  • For legal and tax compliance requirements (7 years under Sri Lanka law)
  • Medical coordination records retained per applicable healthcare regulations
  • For guest service continuity and repeat wellness travel planning
  • Until you request deletion (subject to legal and medical record obligations)

9. Children's Privacy

We do not knowingly collect personal information from children under 16 without parental or guardian consent. For wellness and medical tourism services involving minors:

  • Parents or guardians must provide explicit written consent
  • Special care is taken with all children's health and wellness information
  • Collection is limited to essential travel and medical requirements only
  • Additional privacy and safety protections apply throughout the entire journey

10. Contact Us

For privacy-related questions, to exercise your rights, or for any data protection enquiries, please reach our team through any of the channels below.

Privacy & Data Enquiries

+94 71 073 4481
No 121/2, Hunuwala North, Opanayaka, Balangoda, Sabaragamuwa Province, Sri Lanka
Notice: This privacy policy may be updated periodically to reflect changes in our services or applicable law. We will notify you of significant changes via email or a website announcement at mindoraceylon.com.