Privacy Policy
Last updated: September 9, 2026
Roveo Tours & Travels ("we", "our", "us") respects your privacy. This policy explains what personal data we collect through Roveo Tours & Travels (the "Website"), why we collect it, and the rights and choices you have.
1. Who We Are
Roveo Tours & Travels, Louis Road, Colombo 3, Sri Lanka, Sri Lanka. Contact: info@roveotravels.com · +94 77 230 0906.
2. Information We Collect
- Information you give us: name, email address, phone number and message content when you use our contact or booking forms; name, email, rating, title and review text when you submit a tour review; and name, email, city/country, rating and review text when you leave a review on our home page (your email address and city are never published).
- Travel details: tour selections, travel dates, group size and any special requests you share with us.
- Technical data: IP address, browser type, device type and pages visited (see "Cookies" below).
3. How We Use Your Information
- To respond to enquiries and prepare quotes and bookings.
- To operate tours, airport transfers and other services you purchase.
- To publish reviews you submit (only after moderation, typically with first name).
- To improve the Website and keep it secure (rate limiting, abuse prevention).
We do not sell or rent your personal data.
4. Cookies
Our Website uses cookies and similar technologies. See our Cookie Policy for the full list and purposes. In summary:
- Strictly necessary — keep the site working and secure (e.g. security cookie). These do not require consent.
- Preference — remember your cookie choice itself.
- Analytics — set only after you accept cookies on the banner.
5. Legal Bases (GDPR)
- Consent — non-essential cookies; newsletter marketing if you opt in.
- Contract — handling your bookings and tour arrangements.
- Legitimate interests — site security, service improvement.
- Legal obligation — accounting and statutory record-keeping.
6. Sharing & Transfers
We share data only with service providers who help us operate — hotels, drivers/guides, activity operators and payment providers — strictly as needed for your trip, plus hosting/email providers. Where data leaves your country, we rely on appropriate safeguards. We may disclose data if required by law.
7. Retention
Enquiries are kept up to 24 months; booking records for the period required by tax and consumer law; published reviews until you ask us to remove them; security/rate-limit logs for up to 90 days.
8. Your Rights
You may request access, correction, deletion, restriction or a copy of your data, object to processing, and withdraw consent at any time (e.g. re-open the cookie settings from the footer link). Contact us at info@roveotravels.com. You also have the right to complain to your local data protection authority.
9. Security
We apply technical and organisational measures including HTTPS, security headers, CSRF protection, rate limiting and access-restricted admin accounts. No online transmission is ever 100% secure, but we work hard to protect your data.
10. Children
Our services are not directed to children under 16 and we do not knowingly collect their data.
11. Changes to This Policy
We may update this policy from time to time. The "Last updated" date above shows the current version.
Questions about your data? Email info@roveotravels.com or use our contact page.
See also our Terms & Conditions and Cookie Policy, which form part of the agreement between you and us.