Effective Date: June 5, 2026 | Last Updated: June 5, 2026

www.naturekingdomtours.com

1. Introduction

Nature Kingdom Tours ("we," "our," or "us") is a Sri Lanka-based private tour operator specialising in tailor-made holidays, wildlife safaris, cultural experiences, adventure tours, and nature-based travel throughout Sri Lanka.

We are fully committed to protecting your privacy and handling your personal information responsibly, securely, and transparently. This Privacy Policy explains how we collect, use, store, and safeguard your personal data when you visit our website, communicate with us, or book any of our services.

By using our website or services, you agree to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

We collect personal information that you voluntarily provide to us, including:

› Full name, email address, and phone number

› Country of residence and nationality

› Passport or travel document details (required for bookings and national park permits)

› Billing information and payment details, processed by our secure payment providers

› Travel dates, accommodation preferences, dietary requirements, and special requests

› Accessibility requirements or health information relevant to your tour

› Messages, enquiries, reviews, and feedback via our website, email, WhatsApp, or social media

2.2 Information Collected Automatically

When you visit our website, the following data may be collected automatically:

› IP address and approximate geographic location

› Browser type, device, and operating system information

› Website usage statistics, page interactions, and referral sources

› Cookie and tracking technology data (see Section 7)

3. How We Use Your Information

We use your information for the following legitimate business purposes:

3.1 Tour Booking and Service Delivery

› Processing reservations, bookings, and payments

› Arranging accommodation, transport, guides, and activities

› Obtaining permits and national park entry approvals

› Communicating itineraries, confirmations, and travel information

› Providing 24/7 customer support and emergency assistance during your tour

3.2 Customer Communication

› Responding to enquiries and support requests

› Sending booking confirmations, invoices, and receipts

› Providing pre-arrival information and travel guidance

3.3 Marketing and Promotions

With your consent, we may send travel updates, special offers, and news about Sri Lanka travel experiences. You may unsubscribe at any time via the link included in any marketing email or by contacting us directly.

3.4 Website Improvement and Analytics

› Monitoring website performance and user experience

› Conducting analytics and internal business research

› Developing and improving tour packages and services

3.5 Legal Compliance and Protection

› Complying with applicable laws, regulations, and legal proceedings

› Preventing fraud and misuse of our services

› Protecting the rights, safety, and property of guests, staff, and business partners

4. Legal Basis for Processing

We process your personal information on one or more of the following legal grounds:

› Contractual necessity — to fulfil your booking and deliver our services

› Legitimate interests — to operate, improve, and grow our business responsibly

› Consent — for marketing communications and optional data uses; you may withdraw consent at any time

› Legal obligation — where required by applicable law or regulation

5. Sharing Your Information

We do not sell, rent, or trade your personal information to any third party. We share your information only when necessary and only with trusted service providers, including:

› Hotels, eco-lodges, and accommodation providers

› National parks and government authorities responsible for permits and entry approvals

› Licensed chauffeur-guides and transportation operators

› Activity and excursion providers

› Secure payment processing providers

› CRM and communication platforms used for booking management

› Analytics providers, including Google Analytics and Meta (Facebook)

All service providers are required to protect your information and to use it solely for authorised purposes. We may also disclose information when required by law or governmental authority.

6. International Data Transfers

Nature Kingdom Tours operates from Sri Lanka and serves guests from across the world. Your personal information may be processed in Sri Lanka and in other countries where our service providers operate.

We take reasonable measures to ensure that any international transfer of personal information is protected in accordance with applicable privacy requirements and industry standards.

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve functionality, analyse usage, and support marketing. We use three categories of cookies:

7.1 Essential Cookies

Required for core website security and operation. These cannot be disabled.

7.2 Analytics Cookies

Used to understand visitor behaviour and improve performance, including through Google Analytics.

7.3 Marketing Cookies

Used to measure advertising effectiveness and deliver relevant promotions, including via the Meta (Facebook) Pixel. You may opt out through your browser settings or via the Facebook Ad Preferences centre.

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our website.

8. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. Our general retention periods are:

› Booking and accounting records — up to 7 years

› Customer enquiries and correspondence — up to 3 years

› Marketing data — until consent is withdrawn

› Account information — while the account is active plus a reasonable period thereafter

When data is no longer required, it is securely deleted or anonymised in accordance with our data management procedures.

9. Your Privacy Rights

Depending on your country of residence — including guests from the European Economic Area (EEA), United Kingdom, and jurisdictions with comparable privacy laws — you may have the following rights:

› Right of access — to request a copy of the personal data we hold about you

› Right to rectification — to correct inaccurate or incomplete personal information

› Right to erasure — to request deletion of your data in certain circumstances

› Right to restriction — to limit how we process your data in specific situations

› Right to data portability — to receive your data in a structured, machine-readable format

› Right to object — to object to processing based on legitimate interests or for direct marketing

› Right to withdraw consent — at any time where processing is based on your consent

To exercise any of these rights, please contact us at info@naturekingdomtours.com. We will respond within 07 days and may request identity verification before processing your request.

10. Data Security

We take the security of your personal information seriously. Our security measures include:

› SSL/TLS encryption for all data transmitted via our website

› Secure server environments with restricted administrative access

› Access controls limiting personal data to authorised personnel only

› Regular security reviews and monitoring of our systems

While no online system can guarantee absolute security, we take every reasonable step to protect your information against unauthorised access, loss, misuse, or disclosure. In the event of a data breach that affects your rights, we will notify you as required by applicable law.

11. Children's Privacy

Our website and services are not directed at children below the minimum age required by applicable law without verified parental or guardian involvement. For family tours involving minors, we collect only the information necessary to fulfil the booking and ensure the safety and comfort of all guests.

If we become aware that personal information has been collected from a child without appropriate consent, we will take prompt steps to delete it. Please contact us immediately at info@naturekingdomtours.com if you believe this has occurred.

12. Third-Party Websites

Our website may contain links to third-party websites, including social media platforms, payment providers, and tourism partners. We are not responsible for the privacy practices of any external website and encourage all visitors to review the relevant third-party privacy policies before sharing personal information.

13. Social Media and Marketing

Nature Kingdom Tours maintains official profiles on Facebook (facebook.com/naturekingdomtours) and Instagram (instagram.com/naturekingdomtours). Interactions with these platforms are also subject to the privacy policies of the respective platform providers.

Marketing communications are only sent where permitted by applicable law or where you have provided consent. You may withdraw consent at any time by contacting us or using the unsubscribe option in any email.

14. WhatsApp Communications

We provide customer support and booking assistance via WhatsApp at +94 71 937 3535. By contacting us through WhatsApp, you acknowledge that communication via this channel is also subject to WhatsApp's own privacy practices.

We recommend avoiding the transmission of sensitive financial information or document scans through messaging platforms wherever possible. For secure document submission, please use our official email address.

15. Sri Lanka Personal Data Protection Act

Nature Kingdom Tours recognises and respects the Sri Lanka Personal Data Protection Act No. 9 of 2022 (PDPA). We are committed to processing personal data in accordance with the principles and obligations set out under the PDPA, including purpose limitation, data minimization, accuracy, security, and accountability.

If you have concerns about our compliance with the PDPA, you are entitled to submit a complaint to the Data Protection Authority of Sri Lanka in accordance with the Act.

16. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of Sri Lanka. Any disputes arising in connection with this policy shall be subject to the exclusive jurisdiction of the courts of Sri Lanka, without prejudice to any mandatory rights you may have under the laws of your country of residence.

17. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, business practices, technology, or applicable legal requirements. Any material updates will be published on this page with a revised "Last Updated" date. Where appropriate, we will notify you by email or by a prominent notice on our website.

Continued use of our website and services after changes are posted constitutes your acceptance of the updated Privacy Policy.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Nature Kingdom Tours

254/6 Senanayaka Lane, Tissamaharama 82600, Sri Lanka

Email: info@naturekingdomtours.com

Phone / WhatsApp: +94 71 937 3535 Website:

www.naturekingdomtours.com