1. How this website is built
This is a static website. Every page is a file served as-is, with no application behind it to receive or record anything. There is nowhere on this site for your information to be stored, because there is no database to store it in.
That has one consequence worth being clear about: the forms on this site do not submit anywhere. They assemble the text you typed into a message and open WhatsApp or your email program with it prepared. You then decide whether to send it.
2. What we receive, and when
If you message us
We receive whatever you send: typically your name, your country, your travel dates, the size of your group, the phone number or email address you contact us from, and anything else you write. We use it only to answer you and to run your trip. We do not sell it, share it for marketing, or add you to a mailing list.
If you leave a review
The review form on the review page composes a WhatsApp message containing your name, your country, the tour you took, the month you travelled, your star rating and what you wrote. By sending it you are asking us to publish it on this website, and your first name and country will appear publicly alongside it.
- Please do not include anything in a review you would not want shown publicly.
- Your photograph is only added if you send one and agree to it being used. We will ask before publishing any picture of you.
- We do not invent, buy or edit the substance of reviews. We may fix an obvious typo or shorten a very long one, never in a way that changes its meaning.
- Ask us at any time to take your review down and we will remove it from the site at the next update, with no questions and no explanation needed.
If you book a trip
We keep the practical details of your trip, such as your name, contact number, dates and itinerary, for as long as we need them to run and account for it, and normally no longer than two years afterwards. Messages stay in the WhatsApp history on the phone until they are deleted.
3. What is stored in your browser
One thing, and only on the device you are reading this on: your chosen language, saved so the site opens in it next time. It is a single value in your browser's local storage, it is never transmitted anywhere, and clearing your browsing data removes it. See our Cookie Policy for the full detail.
4. Analytics and tracking
There are none. This site runs no analytics, no advertising pixels, no tracking scripts and no third-party cookies. We do not know how many people visit or which pages they read. If that ever changes, this page will change first and will say what is collected.
5. Third parties involved
- WhatsApp (Meta). Messages you send us go through WhatsApp and are subject to its own privacy policy. It knows your phone number, because that is how the service works.
- Facebook (Meta). We link to our page. Following the link takes you into Meta's environment and its policies.
- Google Fonts and a font CDN. Typefaces and icon fonts are loaded from Google Fonts and jsDelivr. Requesting a file from any web server necessarily reveals your IP address to it. We receive nothing from this and set no cookies through it.
- Our web host. Like any host it may keep short-lived server logs containing IP addresses, for security and reliability. We do not use those logs to identify or profile visitors.
6. Your rights over your information
Whatever your country, we will honour these on request. Ask us on WhatsApp or by email and we will do it, normally within thirty days, at no charge.
- Ask what information about you we hold.
- Ask us to correct anything wrong.
- Ask us to delete it, including your published review.
- Ask us to stop contacting you.
The only limit is where we have to keep a record for tax or legal reasons. If that applies we will tell you what and why.
7. Children
This site is not directed at children, and we do not knowingly collect information from anyone under 16. Children travel with us often, of course, as part of a family booking. In that case the details we hold are given by the adult making the booking, and we ask for no more about a child than the age needed to arrange seating safely. We do not publish photographs in which a child is identifiable without a parent's agreement.
8. Keeping information safe
Because there is no database, there is nothing here to breach. The messages we hold are on a phone and in an email account protected by a passcode and two-factor authentication, and only the people running Gimhani Tours have access to them.
9. Where information goes
We are in Sri Lanka, so when you write to us your message reaches Sri Lanka. WhatsApp, Google and Meta operate internationally and move data across borders under their own terms.
10. Changes and contact
If this policy changes materially, the date at the top of the page changes with it. For anything at all about your information, including a deletion request, write to nadunjt@gmail.com or message +94 77 126 3614. A real person reads it.