Privacy Policy

Nictic Tours Limited (“Nictic”, “we”, “us”) is a travel, tourism and transport company based at Ward Place, Colombo 7, Sri Lanka. We are the data controller for the personal information described in this policy. You can reach us at info@nictic.com.

We only collect what we need to answer you and run your trip.

• Enquiry details. When you use the enquiry form, it builds a message you send us yourself through WhatsApp or email — typically your name, email address, travel dates, number of travellers and notes about the trip you want.
• Booking details. To reserve a tour or vehicle we collect your first and last name, email address, phone number, street address, city and country. PayHere requires these for card billing verification.
• Live chat. Conversations through our chat widget are handled by tawk.to, which stores the transcript and sets cookies in your browser.
• Technical data. Our host records standard server logs (IP address, browser type, pages requested) for security and reliability.

We never see your card details. Card numbers are entered on PayHere’s own payment page and never reach our servers.

• To reply to your enquiry and design your itinerary — because you asked us to, and to take steps prior to entering a contract.
• To take payment, confirm bookings and arrange hotels, guides, drivers and park permits — to perform our contract with you.
• To keep records of transactions and correspondence — to meet our legal and accounting obligations.
• To keep the website secure and working — our legitimate interest in operating the service.

We do not sell your personal data, and we do not share it for advertising. We share only what is necessary with:

• PayHere (PayHere (Pvt) Ltd, Sri Lanka) — our payment gateway, to process your payment.
• tawk.to — our live chat provider, if you start a chat.
• WhatsApp / Meta — if you choose to message us on WhatsApp, that conversation is governed by WhatsApp’s own privacy policy.
• Vercel — our website host.
• Travel suppliers — the hotels, guides, drivers, safari operators and railway booking agents needed to deliver your specific trip. They receive only the details required, such as your name and travel dates.

Some of these providers are located outside Sri Lanka, so your data may be transferred and stored abroad.

Enquiries that do not become bookings are kept for up to 24 months. Booking and payment records are kept for as long as required by Sri Lankan tax and accounting law. Chat transcripts are retained by tawk.to under their retention settings.

This website sets no advertising or analytics cookies of its own. The tawk.to chat widget sets cookies so it can recognise a returning visitor and keep your conversation history. You can block cookies in your browser settings; the chat widget may then not work correctly.

You can ask us to give you a copy of the personal data we hold about you, correct it if it is wrong, or delete it where we are not required to keep it. You can also object to how we use it.

Email info@nictic.com and we will respond within 30 days. If you are in the UK or EU, you also have the right to complain to your local data protection authority.

The site is served over HTTPS and payment is handled entirely by PayHere, a PCI-DSS compliant provider. No system is perfectly secure, but we take reasonable steps to protect the information you give us.

Our services are sold to adults. We do not knowingly collect data directly from children, though a booking made by an adult may include the names and ages of children travelling with them.

If we change this policy we will update the date at the top of this page. Related documents: Terms & Conditions and our Cancellation & Refund Policy.