We only ask for health information where it affects your safety on tour, and we collect it with your explicit consent. You may decline, but we may then be unable to confirm that an activity is suitable for you. 

We do not knowingly collect data directly from children. Data about children travelling with a family is provided by their parent or guardian. 

What we use your data for 

• Answering enquiries, preparing quotes and designing your itinerary • Booking and confirming hotels, guides, transport, bikes and activities 
• Sizing and preparing your bike and equipment • Keeping you safe on tour, including responding to medical or other emergencies 
• Telling you about changes to your booking 
• Processing payments and keeping accounting records 
• Asking for feedback and improving our tours 
• Sending marketing, where you have agreed to receive it 

We never sell or rent your personal data. 

Our legal basis 

Basis Used for Contract Explicit consent Quoting, booking and operating your tour Health information; marketing emails; using your photos or stories Legal obligation Legitimate interests Accounting and tax records; information requested by authorities Responding to enquiries, feedback surveys, website analytics, protecting guests in an emergency Vital interests Sharing medical information with doctors or hospitals if you cannot consent You can withdraw consent at any time. This does not affect processing already carried out.

Who we share your data with

Running a tour means sharing some of your data with the people who deliver it. We share only what each needs:

• Hotels, lodges and campsites
• Our guides, drivers and support crew
• Transport, domestic flight and activity providers (for example, safari jeep operators and boat operators)
• Medical providers and insurers, in an emergency
• The partner travel agent or tour operator you booked through
• Service providers who support our business, such as email, cloud storage, booking software and payment processors
• Government authorities, where the law requires it

All suppliers handle your data only to provide their service to you. Members of the Jetwing Family may handle your data where they provide part of your trip, such as Jetwing hotels.

International transfers

Our operations are in Sri Lanka, so data from guests in the EU, UK and elsewhere is transferred there. Some service providers store data in other countries, including the United States. Where the GDPR applies, we protect these transfers with appropriate safeguards such as the European Commission's Standard Contractual Clauses, or rely on the transfer being necessary to perform your booking.

Marketing

We send our newsletter and occasional offers only if you have opted in. We may tailor these to the interests you have shared with us, such as cycling or birding. Our emails are sent through Mailchimp, which stores your name, email address and country to send campaigns and measure responses. You can unsubscribe at any time through the link in every email, or by writing to info@jetwingadventures.com

Photos, stories and testimonials

Our guides may take photos on tour. We will ask before using any image in which you can be identified on our website, newsletter or social media (such as Instagram, Facebook and X). If you send us photos or a story after your trip, we will ask for your permission before publishing it, and credit you by name unless you prefer otherwise. Testimonials we publish show your first name, surname initial, an excerpt of your feedback and your rating. You can ask us to remove any of this content at any time.

Cookies and analytics

Our website uses a small number of cookies. Essential cookies make the site work; others, such as Google Analytics and Google Ads remarketing, help us understand how the site is used and show you our ads on other websites. Non-essential cookies are used only with your consent, which you can give or withdraw through the cookie banner. You can also block or delete cookies in your browser settings, or opt out of Google personalised ads through Google's Ads Settings. Blocking essential cookies may stop parts of the site from working. Our website links to other sites. We are not responsible for their privacy practices.

How we protect your data 

Only staff and suppliers who need your data can access it. We use access controls, secure storage and reputable service providers to protect it. No system is completely secure, but we will notify you and the relevant authorities of any breach as the law requires. 

Your rights 

Depending on where you live, you have the right to: 

• Access the personal data we hold about you 
• Correct inaccurate data 
• Have your data deleted 
• Restrict or object to how we use it, including for marketing 
• Receive your data in a portable format 
• Withdraw consent at any time 
• Complain to a data protection authority, such as the one in your country of residence 

To use any of these rights, contact us using the details below. We may ask you to confirm your identity, and we will respond within one month. 

How to contact us 

• Email: info@jetwingadventures.com 
• Post: Jetwing Adventures Pvt. Ltd, Jetwing House 46/26 Navam Mawatha, Colombo02, Sri Lanka 

We have written this policy to be clear rather than full of legal jargon. If anything is unclear, please get in touch. 

This policy was last updated on 20 Oct 2026.