Sri Lanka Taxi Charter Service International Limited
Last updated: [2025-07‑23]
1. Legal Basis, Scope & Definitions
Sri Lanka Taxi Charter Service International Limited (“Company”, “we”, “our”) is incorporated in Hong Kong (CR No. 78456401).
We process personal data in accordance with the Personal Data (Privacy) Ordinance, Cap. 486 (“PDPO”), in particular Data‑Protection Principles (“DPP”) 1‑6.
“Personal data” means data that relate directly or indirectly to a living individual, from which that individual can be identified, and in a form in which access to, or processing of, the data is practicable.
2. What We Collect & Whether It Is Obligatory
| Data Category | Typical Items | Source | Mandatory? (✓) / Voluntary (✗) | Consequences if not provided |
|---|---|---|---|---|
| Identity & Contact | Name, e‑mail, phone | Enquiry / booking form | ✓ | Cannot confirm booking |
| Itinerary | Travel dates, route, preferred driver | Enquiry / booking form | ✓ | Cannot arrange transport |
| Payment | Card token, billing info | Secure payment iframe | ✓ | Cannot complete payment |
| Marketing Opt‑in | Newsletter consent | Checkbox | ✗ | No marketing e‑mails |
| Technical | IP, device ID, cookies | Browser | ✗ | Site may not function fully |
3. Purposes of Processing
Personal data are used to: (a) answer enquiries; (b) book and manage ground‑transport services; (c) process payments and issue receipts; (d) send confirmations, alerts, or service updates; (e) improve our website and analytics; (f) conduct direct marketing only when you have opted in; (g) comply with applicable laws and court orders.
4. Classes of Transferees
We disclose data only to the following classes of persons, on a strict need‑to‑know basis:
- Licensed Tourist Drivers in Sri Lanka for fulfilling your itinerary;
- Affiliated Company: Sri Lanka Taxi Charter Service Corporation (Yokohama, Japan) for multilingual support;
- Payment processors & banks (e.g., PCI-DSS compliant gateways such as Stripe, Visa, Mastercard);
- IT & analytics vendors under confidentiality agreements;
- Regulators, courts, or law‑enforcement when legally compelled.
5. Cross‑Border Transfers
Data may be transferred to Sri Lanka or Japan. We use contractual clauses, TLS encryption, and supplier audits to ensure protection levels comparable to PDPO requirements.
6. Data Retention
| Category | Retention Period | Legal / Business Rationale |
|---|---|---|
| Enquiry records | 24 months | Customer‑service traceability |
| Booking & payment | 7 years | Books & Records Ordinance, tax |
| Cookie logs | 14 months | Google Analytics default |
| Marketing opt‑in | Until consent withdrawn | DPP 2 proportionality |
7. Cookies & Tracking Technologies
We use: (a) Essential cookies for language/session; (b) Analytics cookies (Google Analytics GA4); (c) Marketing cookies only when you consent. Manage your preferences via the cookie banner or your browser settings. Disabling cookies may limit site functionality.
8. Data Security
Measures include HTTPS/TLS 1.3, AES‑256 encrypted storage, role‑based access, regular penetration tests, and ISO 27001‑aligned vendor checks.
9. Your Rights
Under PDPO you have rights to access, correction, erasure, data‑portability (machine‑readable copy), and to object to direct marketing. You may also lodge a complaint with the Privacy Commissioner for Personal Data (PCPD). We will respond within 40 days; a reasonable fee may apply for access requests.
10. Data Breach Notification
In the unlikely event of a data breach causing risk of harm, we will notify affected individuals and PCPD without undue delay, outlining remedial actions.
11. Changes to This Policy
Version [1.0] — Effective [2025‑07‑23]. Material changes will be announced on this page at least 14 days before taking effect.
12. Contact — Data Protection Officer
Sri Lanka Taxi Charter Service International Limited
Unit 2A, 17/F, Glenealy Tower, No. 1 Glenealy, Central, Hong Kong S.A.R.
Tel: +852 6775 0739
E‑mail: privacy@srilankataxicharterservice.com
13. Personal Information Collection Statement (PICS) — Shortcut
The personal data requested in this form are obligatory unless marked “optional”. They are used for itinerary arrangement, payment, and customer support, and may be transferred to licensed drivers in Sri Lanka and our Japan affiliate. You have rights of access, correction, erasure, and to opt out of marketing. Contact privacy@srilankataxicharterservice.com.