1. Commitment to Data Privacy
At Udawalawe Wild Safari, accessible from udawalawawildsafari.com, protecting the personal privacy of our global tour guests is a fundamental principle. This Privacy Policy outlines what information we collect, why we collect it, and your rights regarding your data.
2. Information We Collect
We only collect personal information necessary to deliver exceptional wildlife safari tours and process secure reservations:
- Reservation Contact Details: Full name, email address, WhatsApp/phone number, hotel pickup location, and preferred safari date.
- Technical & Device Data: IP address, browser type, device category (Mobile/Desktop), and page referral URLs used strictly for security monitoring and real-time web performance analytics.
- Admin Credentials: Encrypted password hashes, 2FA verification tokens, and trusted device tokens for administrative access control.
3. How We Use Your Information
Udawalawe Wild Safari strictly NEVER sells, rents, or trades your personal contact details to third-party advertisers or data brokers under any circumstances.
Your personal data is used solely for the following operational purposes:
- Processing your safari reservation and coordinating driver pickup.
- Dispatching automated SpaceMail SMTP email confirmations and WhatsApp updates.
- Executing 2-Factor Authentication (2FA) for admin portal security.
- Analyzing website traffic trends and country visitor performance.
4. Cookies & Tracking Technologies
We use cookies and similar browser storage mechanisms to improve your experience:
- Essential Session Cookies: Required for secure login, 2FA device trust (30 days), and cart persistence.
- Analytics Performance Cookies: Measure aggregate page view counts, visitor country locations, and load speed metrics.
You can manage your cookie preferences at any time using our floating cookie banner or browser settings.
5. Data Security & Storage Controls
We implement enterprise-grade security controls to protect your personal information:
- Encryption in Transit: 256-bit SSL/TLS encryption across all public pages and admin API endpoints.
- MySQL Database Protection: Sanitized SQL query execution to prevent SQL injection and unauthorized data access.
- Rate Limiting & Bot Defense: Brute-force rate limiting and automated honeypot protection against unauthorized access attempts.
6. Your Data Rights & GDPR Compliance
Depending on your location, you hold the following rights regarding your personal data:
- Right to request access to your personal booking data stored in our records.
- Right to request correction of inaccurate contact information.
- Right to request deletion of your personal data when no longer required for legal or booking fulfillment obligations.
7. Privacy Contact & Inquiries
If you have any questions or data requests regarding this Privacy Policy, please contact our Privacy Data Officer: