Privacy Policy
This policy explains what personal information Fat Elephant Travels collects when you enquire about a wellness journey, how we use it and how long we keep it.
Prototype notice. This is placeholder legal copy provided as a structural starting point. Have it reviewed by a qualified adviser and adapted to your actual data practices, your registered entity and the jurisdictions you market in — including UK GDPR and EU GDPR — before publishing.
Who we are
Fat Elephant Travels (Pvt) Ltd of 42 Galle Face Terrace, Colombo 03, Sri Lanka is the controller of the personal data described in this policy. You can reach us at [email protected].
What we collect
When you complete an enquiry we collect your name, email address, country of residence, telephone or WhatsApp number where you provide one, your travel dates, trip length, number of travellers, wellness interests, budget range, accommodation preference and anything you write in the message field.
Some of what travellers tell us — medication, health conditions, pregnancy — is special category data under GDPR. We ask for it only so that a physician can advise you properly, we share it only with the specific partner centre arranging your care, and you are never obliged to provide it.
Why we use it
- To design and quote your wellness journey, which is our performance of a contract with you or a step towards one.
- To make bookings with partner centres, transport providers and, where relevant, physicians.
- To send occasional wellness notes, where you have opted in. You can withdraw that consent at any time.
- To meet our legal and accounting obligations.
Who we share it with
We share only what is necessary, and only with the partner centres, transport providers and service suppliers involved in your journey, our email and hosting providers, and our accountants and regulators where the law requires it. We do not sell personal data, and we do not share it for advertising.
International transfers
We are based in Sri Lanka. If you enquire from the UK, EU or elsewhere, your data will be transferred outside your country. We rely on appropriate safeguards for those transfers and can describe them on request.
How long we keep it
Enquiries that do not lead to a booking are deleted after 24 months. Booking records are kept for seven years to meet accounting requirements. Marketing consent records are kept until you withdraw consent.
Your rights
You have the right to access your data, to correct it, to have it deleted, to restrict or object to our use of it, to receive it in a portable form and to withdraw consent. Write to [email protected] and we will respond within one month.
Cookies
This prototype sets no tracking or advertising cookies and loads no analytics. If analytics or advertising tools are added before launch, this section and a consent mechanism must be added with them.
Changes
We will post any changes to this policy on this page with a revised date.
Your journey back to yourself starts here.
Tell us your dates and what you need. We will design the rest.