Privacy Policy

We collect information you provide directly to us or grant us access to properly function as a service. This includes:

• Account Information: Name, email address, password, and phone number when you create an account.
• Social Login Data (Facebook/Google): When you log in using social media, we collect your public profile name, email address, and profile picture to create your account.
• Transaction Information: Details of payments made for Featured Listings or Subscriptions. Note that sensitive payment details (credit card numbers, CVV) are processed directly by our secure payment gateway (PayHere) and are NOT stored on our servers.
• Communications: Records of your correspondence with us, including via WhatsApp, email, or our support system.

We strictly use your data to provide and improve our services:

• To process bookings and facilitate payments via PayHere.
• To communicate with you regarding your tour, including sending confirmations via Email or WhatsApp.
• To verify your identity and prevent fraud.
• To comply with legal obligations and enforce our Terms of Service.

In compliance with Facebook Platform rules, we provide a mechanism for you to request the deletion of your data.

If you have used Facebook Login to access our services and wish to delete your data, you can do so by:

1. Going to your Facebook Account's "Settings & Privacy" > "Settings".
2. Looking for "Apps and Websites" and seeing a list of all apps you have logged into.
3. Selecting "Ceylon Guide" and clicking "Remove".
4. Alternatively, you can request full data deletion by emailing us at privacy@hexleontravel.com with the subject line "Data Deletion Request". We will process your request within 7-14 business days and confirm upon completion.

We do not sell your personal data. We only share information with:

• Service Providers: Tour Operators and Guides strictly for the purpose of fulfilling your booking.
• PayHere (Payment Gateway): To process secure payments. Your payment data is handled according to PayHere's Privacy Policy.
• Legal Authorities: If required by law or to protect our legal rights.

You have the right to access, correct, or delete your personal information at any time. You may also opt-out of marketing communications by clicking the "Unsubscribe" link in our emails or replying "STOP" to WhatsApp messages.