Privacy Policy

We use the information we collect to:

• Process and confirm your safari tour bookings
• Communicate with you about your reservations, including confirmations, reminders, and updates
• Coordinate pick-up and drop-off arrangements
• Process payments securely
• Provide customer support and respond to your inquiries
• Improve our website and services
• Send promotional materials and special offers (only with your consent)
• Comply with legal obligations and requirements
• Prevent fraud and ensure the security of our services

We may receive bookings and related information through:

• GetYourGuide
• Viator
• Direct bookings through our website

Where you book through a third-party platform, that platform’s own privacy policy also applies to the information you provide to them.

Payments are processed through secure, PCI-DSS-compliant payment gateways. Card data is transmitted using encryption, and we do not store full card details on our own servers.

We do not sell your personal information. We may share it only in the following circumstances:

• Service providers: with trusted third-party service providers who assist us in operating our website, conducting our business, or servicing you (e.g., payment processors, email service providers).
• Safari guides and drivers: essential information needed to provide your safari tour experience.
• Advertising and analytics providers: we use Google (Google Analytics and Google Ads) to understand how people find and use the site and to measure our adverts. What is shared, and only if you accept cookies, is described in Cookies & Tracking below.
• Legal requirements: when required by law or to respond to legal processes.
• Business transfers: in connection with any merger, sale of company assets, or acquisition.
• Protection of rights: to protect the rights, property, or safety of our company, customers, or others.

We measure how this site is used in two separate ways, and only one of them involves cookies.

• Our own measurement (no cookies, always on): we count page views and the steps of the booking process on our own servers. No cookie is set, no advertising identifier is created, and nothing is shared with anyone else. The records are aggregate — they tell us that a page was viewed, not who viewed it.
• Google Analytics & Google Ads (cookies, only if you accept): if you accept cookies, we load Google’s tag, which powers two things. Google Analytics helps us see how people find the site — which search terms and which other websites bring guests to us — and sets analytics cookies in your browser (_ga and _ga_*, which expire after up to two years). Google Ads lets us measure which of our adverts lead to bookings and show relevant adverts to people who have visited us (remarketing); this may set advertising cookies and, with your consent, allows Google to use advertising identifiers. None of this is loaded unless you accept. If you decline, your browser never contacts Google and no such cookie is created.

How advert clicks are measured.When you arrive from one of our Google adverts, Google adds a click identifier (a “GCLID” and similar parameters) to the link. If you then book, we send Google a record that a booking happened for that click, so we can tell which adverts work. That record contains the click identifier, the booking value and the time — it does not include your name, email, phone number or any payment details. This is how we measure adverts whether or not you accepted cookies; it relies on the click identifier, not on tracking you across the web.

We do not sell your personal information to advertisers.

You’re asked once, when you first visit. To change your answer at any time afterwards, use the Cookie settings link at the bottom of any page — declining later also stops any further Google Analytics and Google Ads loading. You can clear existing cookies through your browser settings; the booking process works exactly the same either way. You can also review and control how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites.

Depending on your location, you may have the right to:

• Access: request a copy of the personal information we hold about you.
• Correction: request correction of inaccurate or incomplete information.
• Deletion: request deletion of your personal information (subject to legal obligations).
• Objection: object to our processing of your personal information.
• Restriction: request restriction of processing your personal information.
• Portability: request transfer of your information to another service provider.
• Withdraw consent: withdraw your consent for marketing communications at any time.

We implement appropriate technical and organizational measures to protect your personal information, including:

• SSL/TLS encryption for data transmission
• Secure servers and databases
• Regular security assessments
• Access controls and authentication
• Employee training on data protection

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

We retain your personal information only for as long as necessary to fulfil the purposes set out in this policy, including to provide our services, comply with our legal and accounting obligations, and resolve disputes. Booking records may be kept for compliance purposes.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected such information, we will delete it.

As we operate internationally, your information may be transferred to and processed in countries other than your own. Where this happens, we take appropriate steps to ensure your information remains protected in line with this policy.

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those third-party sites, and we encourage you to review their privacy policies.

You can opt out of marketing communications at any time by:

• Clicking the “unsubscribe” link in any marketing email
• Contacting us directly using the information below
• Updating your communication preferences in your account settings (if applicable)

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “last updated” date, and we will notify you of any material changes where required.

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:

• Email: info@yalawild.com
• Phone: +94 777 905 532
• Address: 984/B Debarawewa, Tissamaharama, Sri Lanka