How we collect, use, share and protect your information when you enquire about or book a trip with The Travel Cafe.
Last updated: 21 October 2026
The Travel Cafe is a travel brand operated by EdEt Tours (Private) Limited. EdEt Tours (Private) Limited is responsible for the personal information described in this Privacy Policy when you enquire about or book a trip with The Travel Cafe.
This policy explains what information we collect, why we use it, who we may share it with and how long we keep it.
When you submit an enquiry through our website or contact us directly, we may collect information such as your name, email address, telephone or WhatsApp number, country of residence, number of travellers, approximate arrival and departure dates, whether your dates are undecided, your interests, travel preferences and the information you choose to include in your message.
Our website enquiry form is intended for initial trip planning. Please do not send passport details, payment-card information or other information that is not necessary at the enquiry stage.
If you decide to proceed with a booking, we may need additional information to make and manage your arrangements. Depending on your trip, this may include passport details, emergency contact information, information required by a hotel, transport provider or activity or experience provider, and other details reasonably necessary to deliver your trip.
You may choose to tell us about dietary requirements, accessibility needs, special occasions or other personal circumstances that are relevant to planning or delivering your trip.
Please only provide health or medical information where it is relevant to your travel arrangements. Where you choose to provide this information, we will use it only for the purpose for which it was provided and share it only where reasonably necessary to plan or deliver the relevant service.
We use personal information where reasonably necessary to respond to your enquiry, understand how you want to travel, design and quote your trip, communicate with you, make and manage travel arrangements, coordinate our own team and suppliers, process payments and refunds, provide assistance during your trip, maintain appropriate business and financial records, and comply with legal obligations.
We do not sell your personal information. We will not use it to send marketing communications unless you have chosen to receive them.
We may share relevant information with our own team and with suppliers where necessary to plan, book or deliver your trip. Depending on your itinerary, suppliers may include hotels, transport providers, specialised activity or experience providers and other service providers required for your journey.
We may also share information with payment service providers, website and technology service providers, professional advisers, and public authorities where this is reasonably necessary or required by law.
We share only the information reasonably necessary for the purpose concerned. We do not share your personal information with third parties for their own marketing purposes.
When you submit an enquiry through our website, the information you provide is processed through Web3Forms, a third-party form submission service, so that we can receive and respond to your enquiry.
We use hCaptcha, provided by Intuition Machines, to help protect our enquiry forms against spam, bots, fraud and automated abuse. When you open a page containing our enquiry form, hCaptcha may load and contact its servers before you interact with its verification checkbox. It may process technical information such as your IP address, browser and device characteristics, network and request information, and interactions with the verification service. It may use or receive cookies and similar identifiers for security, fraud prevention and service operation. In our pre-launch browser test, requests to hCaptcha included cookies named hmt_id and cf1b; cookie use may vary by browser, session and configuration. We use hCaptcha for the legitimate purpose of protecting the enquiry process, subject to applicable privacy and electronic-communications requirements. See hCaptcha's Privacy Policy and Cookie Policy for further information about its practices.
Web3Forms processes enquiry submissions and may also store limited browser information associated with its form service. During our pre-launch test, a cookie apparently associated with Web3Forms attribution was observed on the test site's domain. Its precise purpose and necessity have not yet been independently confirmed.
We use Cloudflare for website delivery, performance and security, and Cloudflare Web Analytics for aggregate information about page visits, visitor geography and website performance. Cloudflare Web Analytics is designed not to use analytics cookies or persistent visitor identifiers. Its script may be injected automatically by Cloudflare, including for visitors in the European Union. We do not use Google Analytics or Meta Pixel.
Some technology providers may process or store information outside Sri Lanka. Where personal information is processed across borders, we will handle those arrangements in accordance with applicable data-protection requirements.
Card payments are processed through a third-party payment gateway or payment service provider. We do not require or intend to store your full card details or card security code within our own booking records.
Further information about card payments, refunds and disputed transactions is available in our Credit Card Payment & Chargeback Policy.
We take reasonable organisational and technical measures to protect the personal information we hold against unauthorised or accidental access, use, alteration, disclosure or loss. Access is limited to people who need the information for legitimate business purposes.
If an enquiry does not lead to a booking, we normally retain the enquiry record for up to 24 months from our last meaningful interaction with you, after which it will be deleted or anonymised unless there is a legitimate or legal reason to keep it longer.
If your enquiry becomes a confirmed booking, relevant information becomes part of the booking record and may be retained for longer where necessary for the operation of your trip and for applicable accounting, tax, legal, dispute-resolution and record-keeping requirements. Spam and test submissions are removed as soon as reasonably practical.
Our website uses security and form technologies that may use or receive cookies or similar browser identifiers, including hCaptcha and Web3Forms. We also use Cloudflare Web Analytics, which is designed to measure aggregate website activity without analytics cookies. We do not currently use advertising trackers, Meta Pixel or Google Analytics. Our cookie notice provides information and an acknowledgement option; it does not block or enable hCaptcha or Cloudflare Web Analytics and is not a consent mechanism. Whether particular security or form-related storage requires consent depends on its actual purpose and applicable law. Please see our Cookie Policy for further details.
Sri Lanka's Personal Data Protection Act provides rights in relation to personal data and places obligations on organisations that process it. Depending on the circumstances and applicable law, you may have rights to request access to your personal information, ask for inaccurate or incomplete information to be corrected, and exercise other rights available to you under applicable data-protection law.
If you would like to make a privacy-related request, please contact us. We may need to verify your identity before acting on a request, and some rights may be subject to legal exceptions or requirements.
We may update this Privacy Policy from time to time to reflect changes in our services, systems, suppliers or legal obligations. The latest version will be available on this website and the date above will show when it was last updated.
If you have a question about how we use your personal information or would like to make a privacy-related request, please contact The Travel Cafe through our Contact page. We will add a dedicated privacy contact address here if one is established.
Get in touch and we will be glad to help.
