Legal

Privacy Policy

Last updated: April 5, 2026

CeylonTopGuide ("Platform", "we", "us", or "our") respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Platform.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and profile photo through our authentication provider (Clerk).

Guide Profile Information

Tour guides who register on the Platform provide additional information including their SLTDA license number, government-issued identity documents, phone number, regions covered, languages spoken, tour specialties, photos, and tour package details.

Ratings and Reviews

When you submit a rating, we collect the review content, star rating, and the reference code used to verify tour completion.

Automatically Collected Information

We automatically collect certain technical information when you use the Platform, including your IP address, browser type, device information, pages visited, and referring URL. This is collected through cookies and similar technologies.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Platform
  • Verify tour guide credentials and identity
  • Display guide profiles and tour packages to travelers
  • Facilitate the rating and review system
  • Send essential service communications (account verification, security alerts)
  • Monitor and prevent fraudulent or unauthorized activity
  • Comply with legal obligations
  • Analyze Platform usage to improve user experience

3. Information Sharing

We do not sell, rent, or trade your personal information to third parties. We may share information in the following limited circumstances:

  • Guide profiles (name, photo, regions, languages, packages, ratings) are publicly visible to all Platform visitors
  • Guide contact information (phone number) is displayed on profiles to enable direct traveler-guide communication
  • With service providers who assist in operating the Platform (hosting, authentication, analytics) under strict data processing agreements
  • When required by law, regulation, legal process, or government request
  • To protect the rights, safety, and property of CeylonTopGuide, our users, or the public

4. Data Storage and Security

Your data is stored securely using industry-standard cloud infrastructure. We use our backend provider (Convex) for data storage and Clerk for authentication data.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

5. Cookies and Tracking

We use cookies and similar technologies for authentication, session management, and Platform functionality. These are essential for the Platform to operate correctly.

We may use analytics tools to understand how users interact with the Platform. This data is aggregated and does not personally identify you.

6. Your Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your personal information
  • Object to or restrict processing of your information
  • Request a portable copy of your data
  • Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, please contact us at info@ceylontopguide.com. We will respond to your request within 30 days.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it by law.

Ratings and reviews may be retained in anonymized form after account deletion to maintain the integrity of the review system.

8. Children's Privacy

The Platform is not intended for children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

9. Third-Party Services

The Platform uses third-party services including Clerk (authentication), Convex (backend and database), and Vercel (hosting). Each of these services has its own privacy policy governing the data they process on our behalf.

We are not responsible for the privacy practices of third-party websites linked from the Platform.

10. International Data Transfers

Your information may be transferred to and processed in countries other than Sri Lanka, where our service providers operate. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised date. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Please also review our Terms of Service for the rules governing your use of the Platform.