1. Scope and contact
Udawalawe Shared Safari handles the information needed for shared-seat bookings and safari operations. Contact udawalawasharedsafari@gmail.com or the official Contact & Support page for privacy questions. This policy does not apply automatically to other linked brands.
2. Booking and support information
We process name, WhatsApp number, email and nationality where provided; adult/child counts, seats, jeep and departure, hotel/pickup details, notes, booking reference/status, pricing and messages. Review submissions and private booking-access records may also be handled. Provide only information relevant to arranging and supporting your safari.
3. Purposes and communication choices
Information is used to save and manage reservations, confirm pickup and the latest price, coordinate drivers, communicate requested service updates, handle reviews/support/disputes, secure the service and meet applicable record-keeping duties.
The checkout’s optional WhatsApp checkbox requests confirmation and safari updates, with no marketing. You can change optional communication preferences through support. A delayed message does not mean a booking was lost.
4. Sharing and providers
Necessary trip and contact details may be shared with the assigned driver, vehicle operator and people helping provide or support the safari. Supabase-backed services support booking/database functions; Vercel supports hosting, and WhatsApp/Meta processes messaging under its own policies. We do not sell personal information or send guest booking details to a referring property just because it supplied a referral link.
5. Private links and browser state
Your private My Booking link functions as confidential access to a booking. Keep it private and contact support if exposed. Essential booking requests, recovery and display settings may use browser state. Attribution codes and booking-step markers use this tab’s session storage; measurement fields exclude names, phone numbers, emails, hotel details and private booking tokens.
6. Optional journey measurement
On live departures, we measure departure views and checkout starts with a random tab identifier lasting up to 30 minutes. Records include departure/event/date and fixed source codes, not contact details or private links. They are not linked to an individual booking. A source or accommodation referral code may separately be recorded with a booking to compare sources and completed trips.
Optional event records have 90-day retention with scheduled hourly cleanup, and aggregate reports are available to operators. Test departures and marked QA/staff activity are excluded. We honour Do Not Track and Global Privacy Control for the optional collection. Use the measurement-off link on this page to disable optional journey measurement in this tab. A share-button action does not tell us whether a message was sent.
7. Technical logs and external websites
Hosting and security providers may process ordinary requests, IP addresses, browser details, timestamps and errors independently of optional journey measurement. Following Facebook, Instagram, TikTok, WhatsApp or another service link takes you to a service with its own information practices.
8. Retention
We retain account, booking, communication and operational records for as long as needed to provide services, handle complaints and disputes, prevent misuse and meet applicable accounting or legal requirements. We delete or minimise information when no longer needed. Deleting an account may not delete a record that must lawfully be retained; backup and provider records may take longer to expire.
9. Security and international processing
We use access controls and other practical safeguards appropriate to the service. No website, app or messaging platform can guarantee absolute security. Keep passwords, sign-in codes and private links confidential, and report suspected misuse promptly.
Hosting, database, authentication and communication providers may process information outside Sri Lanka. We use these services for the purposes described here and seek appropriate safeguards where required. We do not promise that all information is stored only in Sri Lanka.
10. Your choices and privacy requests
Contact the business using the details below to request access, correction or deletion, ask about use of your information, withdraw optional consent, or raise a concern. We may ask for proportionate identity verification and explain any lawful reason a record must be retained. Do not send passwords or sign-in codes. Rights available under applicable law remain unaffected.
Where applicable, you may raise a privacy concern with Sri Lanka’s Data Protection Authority at www.dpa.gov.lk. A request concerning another service must be directed to that service; the shared Shehan Tour Solutions branding does not merge their accounts or booking records.
11. Children and sensitive information
A responsible adult should supply necessary booking details for a child. This service is not designed for children to book independently. Share health or mobility information only when relevant to arranging safe assistance; do not submit identity documents or payment secrets in notes or ordinary support messages.
12. Updates
Last updated: 6 October 2026. We will update this notice when service practices change. The measurement-off control and the Contact & Support page remain available for questions and requests.
Optional measurement control
Turn off optional journey measurement in this tab. This does not disable essential booking functions or hosting security logs.