Skip to content

Privacy Policy

Built around strict data minimization: if we do not need a piece of data to dispatch your chauffeur or verify a payment, we do not ask for it or store it.

Privacy at a Glance

We do not require user accounts or sell visitor profiles. Chauffeur booking details are used solely to dispatch your driver and send your receipt. Card details are entered exclusively on Dialog Genie's hosted checkout page, never on LankaWayfinder servers. Analytics omit session replay and autocapture, and are disabled completely on Contact and Booking Confirmation pages.

1. What We Collect & Why (Data Minimization)

Guest Chauffeur Reservations

No account creation is required. When you reserve a transfer or multi-day car and driver charter, we collect only your name, email address, WhatsApp/phone number, pickup/drop-off points, travel date/time, flight number (optional or for CMB arrivals), passenger count, and charter notes so our dispatch desk can coordinate your pickup.

Contact Desk Inquiries

When you submit the inquiry form on our Contact page, we collect only your name, reply email, topic, and message text so we can respond to your route or dispatch question. We never repurpose dispatch details for unrelated marketing blasts.

2. Payments & Booking Confirmation Security

Hosted Dialog Genie Business IPG

Online payments (full charter fare or 25% deposit in LKR/USD) are processed exclusively inside Dialog Genie's PCI-compliant payment environment. LankaWayfinder.tours never collects, sees, or stores your card number, expiry date, or CVV.

Signed Verification Links (No PII in URLs)

Confirmation links use a booking reference paired with an HMAC-SHA256 cryptographic signature (?id=...&sig=...). Passenger names, emails, phone numbers, and payment amounts are never placed in URL query parameters or referrer headers, and confirmation pages carry noindex, follow and Cache-Control: no-store directives.

3. Analytics, Telemetry & Third-Party Services

  • Privacy-first PostHog configuration: Public guide and planning pages load PostHog telemetry with autocapture: false, disable_session_recording: true, and person_profiles: "identified_only". Recorded outbound partner clicks strip all URL query strings before transmission.
  • No analytics on sensitive pages: Both analytics scripts and affiliate partner widget scripts are completely disabled on /contact/ and /booking-confirmation/.
  • Server-proxied route lookup: Destination search and road-distance estimation inside the booking map proxy queries through our Cloudflare Workers endpoint (validated to Sri Lanka service bounds) rather than exposing unrestricted client mapping credentials.
  • External booking partners: Following affiliate links to GetYourGuide or Trip.com takes you to their respective platforms, governed by their own privacy notices.

4. Retention, Access, Correction & Deletion Rights

We retain reservation records only as long as needed to fulfill your trip, provide payment reconciliation, and honor statutory bookkeeping obligations. You have the right to request a copy of your personal booking data, correct inaccurate details, or ask for deletion at any time.

Email [email protected] with your Booking Reference (or message via our Contact Desk), and our team will process your access or erasure request promptly without barriers.