Last reviewed · 07 June 2026
Who we are
The Ceylon Envoy is a private travel concierge for Sri Lanka, composing bespoke journeys for a small number of guests at a time. We operate from Colombo, Sri Lanka. For anything to do with your information write to hello@ceylonenvoy.com.
What we collect, and when
Only what you give us, and only for the conversation you have started:
- Your inquiry. When you submit the form at /inquire we receive your name, email address, approximate travel dates, group, the interests you note, and any budget you mention. We also keep a short log entry that records your IP address and browser user agent at the time of submission, purely to defend against abuse.
- Your subscription. If you ask to receive the letter, we keep your email address in our newsletter audience until you ask us to remove it.
- Anonymous reading patterns. We use Plausible Analytics, which is cookieless and sets no identifiers on your device. It tells us aggregate facts about how the site is used — which pages are read, where readers arrive from, how long they stay — and nothing about any individual. See our cookies policy.
We do not buy lists, scrape contact information, or accept data about you from third parties.
Why we hold it — our lawful basis
- Legitimate interests. Your inquiry is held under our legitimate interest in responding to a request you initiated. We use it only to compose a personal reply, then to plan your journey if you proceed.
- Consent. The newsletter is sent only because you asked for it. You can withdraw consent at any time using the unsubscribe link in each letter, or by writing to us.
- Legal obligation. Occasionally we keep records to comply with tax, accounting, or anti-fraud requirements.
Who else sees it
Your information stays with your envoy. The few service providers who help us run the site are bound to process it only on our instruction:
- Resend — delivers our inquiry confirmation and the letter. Resend processes the email content and the recipient address.
- Vercel — hosts the website and the small server functions behind the inquiry and newsletter forms.
- Cloudflare — resolves the site's domain and provides DDoS protection at the network edge.
- Plausible Analytics — aggregates anonymous reading patterns, as described above. It is hosted in the EU and sets no cookies.
We do not sell your information. We do not share it with advertising networks. We do not pass it to other operators in return for referrals.
International transfers
The providers above are based in the United States, the European Union, or the United Kingdom. Where your information leaves the UK or the EEA, we rely on the recipient's standard contractual clauses or equivalent safeguards, in keeping with UK GDPR Articles 46 and 49. A copy of the safeguards in use is available on request.
How long we keep it
- Inquiries. For up to thirty-six months after the journey concludes — so we can answer questions about a trip you took with us. After that, the personal fields are deleted; an anonymised record of the booking may be kept for accounting.
- Inquiries that did not proceed. Held for up to twenty-four months, then deleted.
- Newsletter subscribers. Held until you unsubscribe.
- Abuse logs. IP and user-agent entries on the inquiry endpoint are kept for thirty days, then rotated out.
Your rights
Under UK GDPR you have the right to ask for a copy of the information we hold about you, to ask us to correct or delete it, to restrict or object to how we process it, and to ask for it in a portable form. To exercise any of these, write to hello@ceylonenvoy.com. We will reply within one month.
You may also complain to the UK Information Commissioner's Office at ico.org.uk.
Automated decisions, children
We do not make any decisions about you by automated means. The site is intended for adults; we do not knowingly collect information about anyone under sixteen.
Changes to this policy
If we update this policy materially, the date at the top of this page changes and — if you are on the newsletter — you will hear from us before it takes effect.