Privacy Policy

Ocealio Travels & Tours (“Ocealio”, “we”, “us”, “our”) respects your privacy. This Privacy Policy explains what information we collect when you use our website (including the inquiry form), how we use it, and your choices. It also describes our use of the Meta WhatsApp Business Platform (Cloud API) for optional operational messages to our team, which may be required when you submit our app for review with Meta.

By using our website or submitting an inquiry, you acknowledge this policy. If you do not agree, please do not use the site or submit personal data through it.

The data controller for personal data collected through this website is Ocealio Travels & Tours, Sri Lanka. You can reach us using the contact details in the “Contact us” section below.

We may collect the following categories of information, depending on how you use our site:

• Inquiry and contact data — When you use our inquiry form, we collect the details you provide (for example: name, email address, phone number, country, trip preferences, travel dates, budget range, optional package selection, destinations of interest, and free-text notes).

• Technical and usage data — Such as browser type, device type, general location derived from IP address, pages viewed, and timestamps. This helps us operate and improve the site and may be processed by our hosting or analytics providers.

We do not intentionally collect sensitive categories of data (such as health information) unless you choose to include them in your message. Please avoid sending sensitive data unless we explicitly ask for it.

We use personal data for purposes that include:

• Responding to your inquiries and preparing travel proposals;

• Communicating with you about tours, bookings, and related services you request;

• Operating, securing, and improving our website;

• Complying with legal obligations and defending our legal rights where necessary.

We do not sell your personal information. We do not use your inquiry data for unrelated third-party marketing.

When you submit an inquiry through our website, we may send a copy of the inquiry (or a short summary derived from it) to designated staff phone numbers using the WhatsApp Business Platform provided by Meta Platforms, Inc. and its affiliates (“Meta”). This uses the WhatsApp Cloud API (sometimes referred to as the WhatsApp Business Platform / Cloud API).

Purpose: Operational notifications so our team can see that a new inquiry was received and respond promptly. This is a business-to-business / internal staff notification flow, not bulk marketing to customers via WhatsApp.

What is sent: Typically a text summary that may include your name, email address, phone number (if provided), country, trip type, duration, destinations of interest, traveller details, arrival date, budget category, selected package (if any), accommodation preference, and the message you typed. The exact format may be a plain-text message or a pre-approved WhatsApp message template, depending on our technical configuration.

Legal basis: We process this information to take steps at your request prior to entering into a contract and for our legitimate interests in operating our travel business and responding to customers, consistent with applicable law.

Meta as a service provider: When we use the Cloud API, Meta processes certain technical and message-related data in accordance with Meta’s policies. We encourage you to read Meta’s documentation and privacy materials, including resources such as https://www.whatsapp.com/legal and Meta’s developer documentation for the WhatsApp Business Platform.

Recipients: Messages are sent only to phone numbers we operate or authorize (for example, staff members handling inquiries). We configure recipient numbers on our server; website visitors do not choose arbitrary recipients.

Retention on WhatsApp: Message retention on devices and within Meta’s systems is governed by Meta’s policies and your or our device settings. We retain inquiry records in our own systems (such as email) according to the “Retention” section below.

No WhatsApp account required: You do not need a WhatsApp account for us to process your website inquiry. If we also contact you via WhatsApp in a separate conversation (for example, after you share your WhatsApp number), that chat would be governed by WhatsApp’s terms and policies as applicable between you and Meta.

Inquiry submissions are delivered to our mailbox using industry-standard email (SMTP). Our email may be hosted with Zoho Mail or another provider we configure. That provider processes message content and metadata needed to deliver and store email, under their terms and privacy policy.

Our website may use cookies or similar technologies that are strictly necessary for the site to function, or that help us understand aggregate usage. You can control cookies through your browser settings. Disabling some cookies may limit site functionality.

We retain inquiry and contact information for as long as needed to respond to you, manage bookings, meet legal or accounting obligations, and resolve disputes. Retention periods vary depending on whether a booking is made and local law. When data is no longer needed, we delete or anonymize it where practicable.

We implement reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or alteration. No method of transmission over the Internet is completely secure; we cannot guarantee absolute security.

We may share data with trusted service providers who assist us in operating the website, sending email, or sending optional WhatsApp notifications (for example: hosting providers, email providers, and Meta for WhatsApp Cloud API delivery). These providers may only process data on our instructions and where required by contract.

We may disclose information if required by law, court order, or governmental request, or to protect the rights, property, or safety of Ocealio, our customers, or others.

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal data, or to object to certain processing. To exercise these rights, contact us using the details below. We may need to verify your identity before responding.

Our website may be hosted or services may be provided from locations outside your country. Where personal data is transferred internationally, we take steps consistent with applicable law (such as appropriate safeguards or contractual clauses, where required).

Our services are not directed to children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will take appropriate steps.

We may update this Privacy Policy from time to time. The “Last updated” date at the bottom will change when we do. Material changes may be highlighted on our website where appropriate. Continued use of the site after changes constitutes acceptance of the updated policy.

For privacy questions or requests regarding your personal data:

Email: info@ocealiotravels.com

Phone / WhatsApp (business line): +94 70 278 6700

Postal address: No. 136/12/1, Pasal Mawatha, Halpita, Polgasowita, Sri Lanka (also shown in our site footer).