Legal

Privacy Policy

Last updated: 10 May 2026

This Privacy Policy explains how Abiholidays collects, uses, stores, and shares personal information when you use our website, contact us, submit an enquiry, make a booking, join our mailing list, or use our accommodation, tours, transport, or related services.

This policy is a practical business template and should be reviewed by a qualified legal adviser before publication.

1. Who We Are

The website is operated by Abiholidays.

Business details:

Legal business name: Abbi Holiday Homes
Registered address: 60 Sivanpannai Road, Jaffna, Northern Province, 40000.
Business registration number: PV00339877
Email: Abi@abiholidayhome.com
Website: https://abiholidays.vercel.app

For privacy questions, contact:

Email: Abi@abiholidayhome.com

2. What This Policy Covers

This policy applies to personal information collected through:

our website;
enquiry forms;
booking forms;
payment and checkout flows;
email, WhatsApp, or social media messages;
accommodation stays;
private tours, transport, transfers, and activities;
guest reviews and feedback;
marketing and newsletter signups;
agent, partner, and supplier communications.

This policy does not cover third-party websites, platforms, or services that we do not control, such as Airbnb, Booking.com, Square, Apple Pay, Google Pay, Visa, Mastercard, Google, Tripadvisor, WhatsApp, Mapbox, Vercel, Resend, or social media platforms. Those services have their own privacy policies.

3. Personal Information We Collect

We may collect the following information depending on how you interact with us.

Enquiry and Contact Information

name;
email address;
WhatsApp number;
country or location;
preferred contact method;
message content;
enquiry type;
dates of interest;
number of guests;
property, tour, or itinerary preferences.

Booking Information

guest names;
stay dates;
arrival and departure details;
pickup and drop-off details;
guest numbers and ages where relevant;
accommodation selected;
tour or activity selected;
payment status;
booking reference;
special requests;
mobility or access needs;
dietary requirements;
child seat requirements;
notes needed to provide the booking safely and properly.

Payment Information

Payments may be processed through Square or another approved payment provider. This may include card checkout, Visa, Mastercard, Apple Pay, or Google Pay.

We may receive limited payment information such as:

payment status;
transaction reference;
amount paid;
currency;
billing name;
partial card details such as card brand and last four digits where provided by the payment processor.

We do not store full card numbers on our own systems.

Website and Technical Information

When you visit the website, we or our service providers may collect:

IP address;
browser type;
device type;
operating system;
pages viewed;
referral source;
date and time of visit;
approximate location;
cookie or analytics identifiers;
interaction data such as form submissions or button clicks.

Marketing Information

If you join a mailing list or agree to receive marketing, we may collect:

name;
email address;
marketing consent status;
email open/click information;
unsubscribe status;
preferences and interests.

Reviews, Photos, and Feedback

If you send us reviews, testimonials, photos, or feedback, we may collect:

your name;
review content;
rating;
photos or videos you provide;
stay or tour details;
feedback messages.

Partner, Agent, and Supplier Information

For travel agents, guides, drivers, suppliers, or business partners, we may collect:

name;
company name;
role/job title;
business email;
website;
business address;
notes about partnership discussions;
source of public business contact information;
communication history.

4. How We Collect Information

We collect information when you:

visit the website;
submit a form;
send us an email or WhatsApp message;
make a booking or payment;
stay at a property;
join a tour or transport service;
leave a review;
subscribe to marketing;
interact with our social media or adverts;
communicate with us as a partner, agent, or supplier.

We may also receive information from third-party platforms where you contact or book with us through them, such as Airbnb, Booking.com, Tripadvisor, Google, Square, Apple Pay, Google Pay, Visa, Mastercard, or similar services.

5. How We Use Your Information

We use personal information to:

respond to enquiries;
check availability;
prepare quotes;
confirm bookings;
process payments;
arrange accommodation;
arrange tours, drivers, guides, ferries, restaurants, transfers, or activities;
send booking confirmations and guest information;
provide check-in instructions;
communicate before, during, and after a stay or tour;
handle cancellations, changes, refunds, and complaints;
personalise recommendations;
maintain guest records;
improve our website and services;
send marketing where permitted;
ask for reviews or feedback;
manage agent, supplier, and partner relationships;
keep the website secure;
comply with legal, tax, accounting, and regulatory obligations.

6. Legal Bases for Processing

Depending on your location and applicable law, we may rely on one or more of the following legal bases:

Contract: to provide accommodation, bookings, tours, transport, payments, and guest services.
Legitimate interests: to run and improve our business, respond to enquiries, prevent fraud, keep records, and communicate with customers.
Consent: for marketing emails, optional cookies, or where we ask for specific permission.
Legal obligation: to comply with tax, accounting, law enforcement, safety, or regulatory requirements.
Vital interests: in rare cases, to protect someone’s health or safety.

7. Sharing Your Information

We may share personal information where necessary with:

property owners, managers, caretakers, and staff;
drivers, guides, ferry operators, and transport providers;
restaurants, activity providers, attractions, and local suppliers;
payment processors such as Square and card/digital wallet providers;
booking platforms such as Airbnb or Booking.com where relevant;
email providers such as Resend or similar services;
website hosting and infrastructure providers such as Vercel;
map providers such as Google Maps or Mapbox;
analytics and advertising providers where enabled;
accountants, lawyers, insurers, and professional advisers;
law enforcement, government bodies, or regulators where required by law.

We share only what is reasonably necessary for the relevant purpose.

8. International Transfers

Abiholidays may work with guests, suppliers, platforms, and technology providers in different countries.

Your personal information may be processed or stored outside your country, including Sri Lanka, the United Kingdom, the United States, the European Economic Area, or other locations where our service providers operate.

Where required, we will take reasonable steps to protect personal information when it is transferred internationally.

9. Cookies and Similar Technologies

The website may use cookies, pixels, local storage, analytics tools, or similar technologies to:

operate the website;
remember preferences;
understand website traffic;
improve content and user experience;
measure marketing performance;
protect against abuse or spam.

Some cookies may be necessary for the website to work. Others may be optional, depending on the tools enabled.

A separate Cookie Policy should provide more detail where required.

10. Analytics, Maps, and Embedded Services

The website may use third-party services such as Google Analytics, Google Search Console, Google Maps, Mapbox, Vercel analytics, or similar tools.

These services may collect technical information such as IP address, device information, browser information, usage data, approximate location, or map interaction data.

You should review the privacy policies of those third-party providers for more information.

11. WhatsApp, Email, and Messaging

If you contact us by WhatsApp, email, or social media, we may use those channels to reply to you and manage your enquiry or booking.

Messages may include personal information you choose to provide. Please avoid sending sensitive information unless necessary.

WhatsApp, email providers, and social media platforms process data under their own terms and privacy policies.

12. Marketing Communications

We may send marketing emails or messages if:

you have subscribed;
you have given consent;
you are an existing customer and the law allows us to contact you about similar services;
you are a business contact and we have a legitimate reason to contact you.

You can unsubscribe from marketing emails at any time by using the unsubscribe link or contacting us.

We may still send non-marketing messages about bookings, payments, enquiries, safety, or service updates.

13. AI and Automation

Abiholidays may use AI or automation tools to help draft replies, summarise enquiries, classify leads, generate travel suggestions, prepare content drafts, or support internal workflows.

Where AI tools are used, we aim to avoid sharing unnecessary sensitive personal information. Human review should be used before sending important guest, booking, or marketing communications.

AI-generated content may be checked and edited before use.

14. Data Retention

We keep personal information only for as long as reasonably necessary for the purposes described in this policy.

Retention periods may depend on:

enquiry status;
booking dates;
tax and accounting requirements;
legal obligations;
dispute or complaint handling;
fraud prevention;
marketing consent;
operational records.

When information is no longer needed, we will delete, anonymise, or securely archive it where practical.

15. Security

We take reasonable steps to protect personal information from unauthorised access, loss, misuse, alteration, or disclosure.

No website, email, payment system, or internet transmission is completely secure. You should take care when sharing information online.

16. Your Rights

Depending on your location and applicable law, you may have rights to:

access your personal information;
correct inaccurate information;
delete your information;
restrict or object to processing;
withdraw consent;
request a copy of your information;
complain to a data protection authority.

To exercise your rights, contact us using the details in this policy.

We may need to verify your identity before responding.

17. Children’s Privacy

Our services are intended for adults making travel arrangements.

We may collect information about children only where necessary for a family booking, accommodation safety, child seat arrangements, age-based pricing, or travel planning.

Parents or guardians should provide children’s information where required and ensure it is accurate.

18. Third-Party Links

The website may link to third-party websites, booking platforms, maps, payment providers, review platforms, social media sites, or travel services.

We are not responsible for the privacy practices, content, or security of third-party websites.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

The updated version will be posted on the website with a new “Last updated” date.

20. Contact Us

For questions about this Privacy Policy or how we handle personal information, contact:

Abiholidays
Email: Abi@abiholidayhome.com
Address: 60 Sivanpannai Road, Jaffna, Northern Province, 40000.