Privacy Policy

1. Overview

Aero Tours respects your privacy and handles personal data in line with Sri Lanka’s Personal Data Protection Act No. 9

of 2022 (PDPA), whose remaining provisions are being phased in by the Government.

• Name, contact details, and booking information.

• Licence/ID/passport details, required for legal driver verification.

• Payment confirmation data (transaction reference, status, masked card digits) from our Payment Gateway — never

your full card number, CVV, or PIN.

• Basic technical/usage data from the Website (e.g. via cookies).

To process bookings and payments, verify driver eligibility, provide support, meet legal/tax obligations, and (only with

consent) send marketing updates.

• Online payments are handled directly by our PCI-DSS compliant Payment Gateway [insert gateway name]; card

data is never stored on our systems.

• We share data only where necessary: with the Payment Gateway/bank, insurers, the Police/Dept. of Motor Traffic

where legally required, and trusted IT/service providers under confidentiality.

• We do not sell personal data.

Data is kept only as long as needed (e.g. transaction records for 5 years for tax purposes) and protected with reasonable

technical and organisational safeguards.

Subject to the PDPA, you may request access, correction, or erasure of your data, withdraw marketing consent, or

complain to the Data Protection Authority of Sri Lanka (dpa.gov.lk).

For Terms, bookings, or privacy queries: Aero Tours Car Rental — +94 76 350 5850 | info@aerotourscarrental.com |

No. 88/2, Udatuttiripitiya, Yakkala, Sri Lanka.