Legal
Privacy Policy
Chauffeur LK Pvt Ltd DBA Sri Lanka By Car
Effective: March 08, 2026
Chauffeur LK Pvt Ltd, operating as Sri Lanka By Car ("we", "us", "our"), with registered office in Negombo, Sri Lanka, is committed to protecting your privacy. This Privacy Policy governs the collection, use, disclosure, and protection of personal data when you use our website srilankabycar.com, book chauffeur services, or interact with our services (collectively, the "Services").
1. Information We Collect
1.1 Personal Information
Name, phone number, email address, postal address, passport details, and special requirements provided during booking.
1.2 Payment Information
Processed via secure third-party gateways (Stripe, PayPal). We do not store full card details.
1.3 Usage Data
IP address, browser type/version, pages visited, time spent, referring site (Google Analytics).
1.4 Communication Data
Emails, WhatsApp messages, feedback.
2. How We Use Your Information
2.1 Service Delivery
Coordinate pickups, communicate with chauffeurs, process payments.
2.2 Customer Service
Confirmations, updates, support queries.
2.3 Marketing (with consent)
Newsletters, special offers (unsubscribe anytime).
2.4 Analytics
Improve website/services (anonymized).
2.5 Legal Compliance
Tax records, dispute resolution.
3. Legal Basis for Processing (GDPR)
- Contract: Booking fulfillment
- Legitimate Interests: Service improvement, fraud prevention
- Consent: Marketing communications
- Legal Obligation: Invoicing, audits
4. Sharing Your Information
4.1 Service Providers
Licensed chauffeurs receive name/phone for pickups only.
4.2 Payment Processors
Stripe/PayPal for transactions.
4.3 Legal
Authorities if required by Sri Lankan/EU law.
4.4 Third-Party Sales
We do not sell personal data to third parties.
5. Your GDPR Rights
- Access: Request data copy
- Rectification: Correct inaccuracies
- Erasure ("right to be forgotten")
- Restriction/Objection: Limit processing
- Portability: Receive data in structured format
- Withdraw Consent
Email: info@srilankabycar.com within 1 month response.
6. Cookies & Tracking
- Essential: Session management, bookings
- Analytics: Google Analytics (anonymized IP)
- Preferences: Language selection
Manage via cookie banner or browser settings.
7. Data Retention
- Bookings: 5 years (Sri Lanka tax law)
- Communications: 3 years
- Marketing: Until unsubscribe + 12 months
8. Security Measures
SSL encryption, firewalls, access controls, regular audits. Report breaches within 72h to authorities.
9. International Data Transfers
Data processed/stored in Sri Lanka. EU Standard Contractual Clauses for transfers.
10. Children's Privacy
Services are not directed at children under 16.
11. Third-Party Links
We are not responsible for external site policies.
12. Changes to Policy
Updated versions posted here. Major changes emailed.
Contact
Contact DPO: info@srilankabycar.com
Related pages
Helpful legal and contact pages
Use these pages if you need to ask about data handling, availability, or booking changes.