Your Trust, Protected Every Step Of The Journey

Last updated: [DD Month YYYY]

This Privacy Policy explains how SnapTrip collects, uses, stores and shares personal information.

A. Who is responsible for your information

The customer business responsible for booking information is:

[Australian Company Name]
ABN or ACN: [Number]
Address: [Australian address]

The Australian company works with:

[Sri Lankan Company Name]
Registration number: [Number]
Address: [Sri Lankan address]

The Sri Lankan company and selected local providers receive information where needed to deliver journeys in Sri Lanka.

In this policy, “SnapTrip”, “we”, “us” and “our” refer primarily to the Australian contracting company.

SnapTrip handles personal information in accordance with this Privacy Policy and the privacy laws that apply to its operations.

B. Information we collect

We may collect:

  • Names and contact details
  • Nationality, date of birth and country of residence
  • Booking, travel and accommodation details
  • Flight and arrival information
  • Passport and visa related information
  • Emergency contact details
  • Dietary, medical, disability and mobility information
  • Payment and transaction details
  • Emails, WhatsApp messages and support records
  • Website usage, device and browser information
  • Marketing preferences

 

Payments are processed by [Payment Provider].

SnapTrip may receive:

  • Payment amount
  • Currency
  • Transaction status
  • Payment reference
  • Card type
  • Limited or masked card information

 

SnapTrip does not receive or store complete card numbers or security codes.

C. How we collect and use information

We collect information when you:

  • Use the website
  • Make a booking
  • Contact us
  • Complete a traveller information form
  • Make a payment
  • Request a change or cancellation
  • Subscribe to marketing
  • Participate in a journey
  • Provide feedback

 

We may also receive information from:

  • The lead traveller
  • Another traveller included in the booking
  • Payment providers
  • Hotels
  • Drivers and guides
  • Activity providers
  • Website or technology providers

 

A lead traveller who provides information about another person must have permission to provide it and should make this Privacy Policy available to that person.

We use personal information to:

  • Respond to enquiries
  • Create and manage bookings
  • Process payments and refunds
  • Arrange accommodation, transport and activities
  • Communicate journey information
  • Manage health, dietary and accessibility needs
  • Provide customer and emergency support
  • Prevent fraud and protect website security
  • Maintain business records
  • Respond to complaints
  • Improve the website and journeys
  • Measure website performance
  • Deliver advertising where permitted
  • Send marketing where consent has been provided
  • Meet legal and regulatory obligations

 

D. Sensitive and passport information

Medical, disability, mobility and some dietary information may be sensitive.

We collect this information only where it is relevant to the journey, needed to arrange assistance, required for health or safety, or otherwise permitted by law.

Relevant information may be shared with:

  • Drivers and guides
  • Hotels
  • Activity providers
  • Medical providers
  • Emergency services

 

We do not use health information for advertising.

Passport information may be required to:

  • Confirm identity
  • Arrange accommodation or activities
  • Meet supplier or government requirements
  • Assist during an emergency

 

Access is limited to people and providers who reasonably require it.

Passport information will not be shared with advertising platforms.

Passport copies will be securely deleted or deidentified when they are no longer reasonably required.

Routine passport copy deletion period: [Insert confirmed period]

E. Who we share information with

We may share relevant information with:

  • The Sri Lankan operating company
  • Hotels, drivers, guides and activity providers
  • Payment processors
  • Website hosting and technology providers
  • Customer support and communication platforms
  • Email marketing providers
  • Analytics and advertising providers
  • Accountants, lawyers and insurers
  • Government and regulatory authorities
  • Emergency or medical services

 

We share only the information reasonably required for the relevant purpose.

We do not sell personal information to advertisers.

Personal information may be processed in:

  • Australia
  • Sri Lanka
  • The traveller’s home country
  • Countries where our technology providers operate

 

Where required, we use reasonable contractual, technical and organisational safeguards for information processed across borders.

F. Marketing, cookies and website tracking

We will not automatically add someone to a marketing list simply because they make an enquiry or booking.

Marketing messages will be sent only where the person has separately agreed to receive them or where permitted by applicable law.

Marketing consent is separate from accepting the Booking Conditions.

Every marketing message will:

  • Identify the sender
  • Include contact information
  • Provide an unsubscribe method

 

You may withdraw marketing consent at any time.

The website may use:

  • Essential cookies
  • Google Analytics
  • Google Ads tools
  • Meta Pixel
  • Social media advertising tools
  • Similar technologies

 

Essential cookies may be used for:

  • Security
  • Session management
  • Booking selections
  • Checkout
  • Payment processing
  • Currency preferences

 

Where consent is required, optional analytics and advertising technologies will not operate until the visitor accepts them.

Visitors will be able to:

  • Accept optional cookies
  • Reject optional cookies
  • Manage their preferences

 

SnapTrip will not intentionally send passport, payment, medical or other sensitive traveller information to advertising platforms.

G. Retention and security

We keep personal information only for as long as reasonably required.

Enquiries that do not become bookings

Retained for up to 24 months.

Booking and transaction records

Retained for the period required by tax, corporate and legal obligations.

Passport copies

Retained for [insert confirmed period] after the journey.

Health and accessibility information

Retained for [insert confirmed period] after the journey.

Complaints and disputes

Retained until the matter is resolved and relevant legal periods have expired.

Marketing details

Retained until consent is withdrawn, with limited records kept to ensure the person is not contacted again.

Analytics and cookie data

Retained according to the configured platform retention period.

Information may be kept longer where required for legal compliance, fraud prevention, insurance, an active complaint, a payment dispute, legal proceedings or safety reasons.

We take reasonable steps to protect personal information from:

  • Loss
  • Misuse
  • Unauthorised access
  • Unauthorised disclosure
  • Alteration

 

Measures may include:

  • Encrypted website connections
  • Access controls
  • Multifactor authentication
  • Restricted staff access
  • Secure payment processing
  • Secure cloud storage
  • Secure deletion procedures

 

No electronic system can be guaranteed completely secure.

Do not send complete card details through email, WhatsApp or a contact form.

H. Your rights and privacy complaints

Depending on the law that applies, you may be able to:

  • Request access to your information
  • Correct inaccurate information
  • Request deletion
  • Withdraw marketing consent
  • Object to certain uses
  • Restrict certain processing
  • Make a privacy complaint

 

Some information may need to be retained for legal, accounting, fraud prevention, safety or dispute resolution reasons.

We may need to verify your identity before responding.

Send privacy requests or complaints to:

Email: hello@snap-trip.com
Subject: Privacy Request
Address: [Australian registered address]

Where applicable, you may also contact the Office of the Australian Information Commissioner or another relevant privacy authority.

We may update this Privacy Policy where our services, systems or legal obligations change.