Privacy notice.
Last updated 24 October 2026
What we collect when you book a safari with us, why we need it, and the choices you have. Written in plain language.
Who we are
Yala Leopard Trails is a trading name of [registered business name], business registration number [registration no.], Kirinda Road, Tissamaharama, Sri Lanka. In this notice, "we", "us" and "our" mean Yala Leopard Trails.
We run small-jeep wildlife safaris in Yala National Park. This notice explains what personal information we collect when you use our website or book a safari with us, why we need it, who we share it with and the choices you have.
If you have any questions, email hello@yalaleopardtrails.com or message us on WhatsApp at +94 77 000 0000.
What we collect
When you send a booking request
Our booking form asks for:
- your name and email address
- the safari, preferred date and number of guests
- the hotel or address where we should collect you
- anything else you choose to tell us, such as children's ages, accessibility needs or the animals you'd most like to see
When we confirm your safari
To buy park entry tickets on your behalf, we may also ask for each guest's full name, nationality and passport number. We may also ask for a mobile or WhatsApp number so your driver can reach you on the day.
When you contact us directly
If you message us on WhatsApp, email us or call, we keep what you send us, along with your phone number or email address, so we can reply and keep track of your booking.
When you visit the website
Like most websites, our hosting provider automatically records basic technical information, such as your IP address, browser type and the pages you visit, to keep the site secure and working. We don't use advertising or analytics cookies, and we don't track you across other websites.
How we use your information
We only use your information to run your safari and look after you as a guest. That means:
- Replying to your request and confirming your date, jeep, tracker and pickup time
- Buying park tickets from the Department of Wildlife Conservation, which requires guest details
- Arranging pickup, so your driver knows where to collect you and how to contact you
- Keeping you safe, for example planning around children's ages, health or mobility needs you tell us about
- Keeping business records as required by Sri Lankan tax and accounting law
We don't send marketing newsletters, and we never sell your information.
Our reasons for using it
Depending on where you live, data protection law may ask us to explain our legal reasons for using your information:
- To provide the safari you asked for. We need your details to answer your request and deliver your booking.
- To meet legal obligations, such as park entry rules and record-keeping for tax.
- Our legitimate interests in running a safe, well-organized business, for example keeping the website secure.
- Your consent, where you choose to share extra information such as health needs. You can withdraw it at any time.
International transfers
Some of our service providers, including email and WhatsApp, store information on servers outside Sri Lanka. Where that happens, we rely on those providers' own safeguards for international transfers, and we only use well-established services.
How long we keep it
- Booking requests that don't go ahead: deleted within 12 months
- Passport numbers for park tickets: deleted once your safari has taken place
- Booking and payment records: kept for as long as Sri Lankan tax and accounting rules require, then deleted
- WhatsApp and email conversations: deleted from our business devices and accounts within 24 months of your last booking
Your rights
Under Sri Lanka's Personal Data Protection Act, No. 9 of 2022, and, if you live in the EU or UK, the GDPR, you may have the right to:
- ask for a copy of the information we hold about you
- ask us to correct or complete it
- ask us to delete it, where we no longer need it
- withdraw your consent, where we rely on it
- object to, or ask us to limit, how we use it
To make a request, email hello@yalaleopardtrails.com. We'll reply within one month. If you're unhappy with our answer, you can complain to Sri Lanka's Data Protection Authority, or to the data protection authority where you live.
Keeping it safe
We keep booking information on password-protected business accounts and devices, and only our team and the drivers and trackers on your safari can see it. No system is perfectly secure, but if something goes wrong that puts your information at risk, we'll tell you and the relevant authorities as the law requires.
Children
Our safaris welcome families, but we only collect information about children from their parent or guardian, for example a child's age so we can fit the right seat. We don't knowingly collect information directly from children.
Changes to this notice
We'll update this notice if the way we handle information changes, for example if we start using a new booking system. The date at the top shows when it was last updated.