Privacy Policy

Chauffeur LK Pvt Ltd, operating as Sri Lanka By Car ("we", "us", "our"), with registered office in Negombo, Sri Lanka, is committed to protecting your privacy. This Privacy Policy governs the collection, use, disclosure, and protection of personal data when you use our website srilankabycar.com, book chauffeur services, or interact with our services (collectively, the "Services").

1. Information We Collect

1.1 Personal Information

Name, phone number, email address, postal address, passport details, and special requirements provided during booking.

1.2 Payment Information

Processed via secure third-party gateways (Stripe, PayPal). We do not store full card details.

1.3 Usage Data

IP address, browser type/version, pages visited, time spent, referring site (Google Analytics).

1.4 Communication Data

Emails, WhatsApp messages, feedback.

2. How We Use Your Information

2.1 Service Delivery

Coordinate pickups, communicate with chauffeurs, process payments.

2.2 Customer Service

Confirmations, updates, support queries.

2.3 Marketing (with consent)

Newsletters, special offers (unsubscribe anytime).

2.4 Analytics

Improve website/services (anonymized).

2.5 Legal Compliance

Tax records, dispute resolution.

3. Legal Basis for Processing (GDPR)

• Contract: Booking fulfillment
• Legitimate Interests: Service improvement, fraud prevention
• Consent: Marketing communications
• Legal Obligation: Invoicing, audits

4. Sharing Your Information

4.1 Service Providers

Licensed chauffeurs receive name/phone for pickups only.

4.2 Payment Processors

Stripe/PayPal for transactions.

4.3 Legal

Authorities if required by Sri Lankan/EU law.

4.4 Third-Party Sales

We do not sell personal data to third parties.

5. Your GDPR Rights

• Access: Request data copy
• Rectification: Correct inaccuracies
• Erasure ("right to be forgotten")
• Restriction/Objection: Limit processing
• Portability: Receive data in structured format
• Withdraw Consent

Email: info@srilankabycar.com within 1 month response.

6. Cookies & Tracking

• Essential: Session management, bookings
• Analytics: Google Analytics (anonymized IP)
• Preferences: Language selection

Manage via cookie banner or browser settings.

7. Data Retention

• Bookings: 5 years (Sri Lanka tax law)
• Communications: 3 years
• Marketing: Until unsubscribe + 12 months

8. Security Measures

SSL encryption, firewalls, access controls, regular audits. Report breaches within 72h to authorities.

9. International Data Transfers

Data processed/stored in Sri Lanka. EU Standard Contractual Clauses for transfers.

10. Children's Privacy

Services are not directed at children under 16.

11. Third-Party Links

We are not responsible for external site policies.

12. Changes to Policy

Updated versions posted here. Major changes emailed.

Contact

Contact DPO: info@srilankabycar.com