Privacy Policy

This notice explains how Prazz Ventures handles personal information in connection with its website, tourism services, enquiries, bookings, payments and digital tickets. It should be read with the booking terms and any information provided when a service is arranged. Business contact details are shown below and on our Contact page.

Information you provide may include your name, email, phone or WhatsApp number, country, and address or city where required for payment or service arrangements. Booking information includes the selected tour or service, tour date and departure, adult and child passenger counts, booking reference, enquiry messages and special requests. Payment records include transaction references, payment amount, currency, payment choice and verification status. Ticket records may include ticket identifiers, issue and check-in details. Necessary technical records, such as session identifiers, request information and security logs, support the operation and protection of the website. Please avoid sending unnecessary sensitive information in free-text fields.

We use relevant information to answer enquiries, check availability, arrange requested services, calculate and verify payments, send booking or ticket information, manage changes and refund enquiries, and validate tickets at departure. Information also supports customer assistance, accounting, dispute handling, security and compliance with applicable legal obligations. We use information for the purpose for which it was provided or another permitted purpose; a booking enquiry is not an agreement to unrelated marketing.

Online payment information is processed through PayHere hosted checkout. Payment credentials are entered with the payment provider. This application does not collect or store full payment-card numbers or CVV codes. We retain the references, amounts, currencies, status and non-sensitive payment-method identifiers needed to verify and reconcile transactions. PayHere and financial institutions handle payment processing under their own applicable terms and privacy information. Do not include card credentials in enquiry messages or special requests.

Relevant information may be shared with the tour operator, accommodation provider, driver or other provider involved in the service you request. Hosting, email and payment providers may process information needed to operate the website and communicate with you. Access should be limited to what is relevant to those tasks. Information may also be disclosed where legally required or appropriately needed to investigate fraud, resolve a dispute or protect lawful interests. Where provider arrangements involve processing outside Sri Lanka, any applicable legal requirements and safeguards must be considered.

We use access restrictions, payment-notification verification and protected booking and ticket links to help safeguard information. No online system or transmission can be guaranteed completely secure. Keep your private booking and download links confidential: someone with a valid private link may be able to view the associated booking information. Public QR verification is limited to ticket validity, tour and departure information; passenger check-in requires authorized staff access. Contact us if you believe a link or account has been misused.

Information is kept for as long as reasonably needed for the service, customer support, accounting, legal obligations, payment reconciliation and the handling of disputes or claims. Retention depends on the type of record and applicable requirements; this policy does not prescribe a single fixed period. Deletion requests may be limited where records must be retained for a lawful purpose, such as financial or dispute records.

Contact us to ask about information associated with your enquiry or booking, request a correction, or raise a concern about its use. We may need proportionate identity or booking verification before disclosing or changing information. Requests for access, correction, deletion, objection or withdrawal of consent will be considered under the Sri Lankan legal provisions actually in force and any applicable conditions or exemptions. The Personal Data Protection Act has staged commencement; a statutory right or remedy is available only when its relevant provisions apply. Withdrawal does not undo processing already lawfully undertaken and may affect a service that depends on the information. Current commencement information is available from the Sri Lankan Data Protection Authority.

The website uses necessary session and security technology to support forms, booking continuity, administrative sign-in and protection against misuse. Browser controls can restrict cookies, but blocking necessary cookies may affect those functions. This notice does not assume that optional analytics or advertising cookies are in use. If such tools are introduced, we will update the relevant information and provide choices required by applicable law.

Links may lead to payment providers, maps, social platforms or other external websites. Their operators control their own information-handling practices and security. Review their privacy information before sharing personal data. An external link does not make Prazz Ventures responsible for every practice of the linked service.

We may update this notice when services, technology or legal requirements change. The Last Updated date identifies the displayed version. Where a material change requires additional notice or a choice under applicable law, that requirement will be respected. You can contact us if you need clarification about a change.

Use our Contact page or the current business details below for privacy questions or concerns. Explain your request and include a booking reference where relevant, without sending unnecessary payment credentials or identity documents. Nothing in this notice removes rights or remedies available under applicable law.