Privacy Policy – colourholidays

Effective Date: July 1, 2022

At colourholidays, accessible from https://colourholidays.com/, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collected and recorded by colour holidays and how we use it.

If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us.

This Privacy Policy applies only to our online activities and is valid for visitors to our website with regards to the information that they shared and/or collect in colourholidays. This policy is not applicable to any information collected offline or via channels other than this website.

Consent

By using our website, you hereby consent to our Privacy Policy and agree to its terms.

“Personal information” is data that identifies, relates to, describes, can be used to contact, or could reasonably be linked directly or indirectly to you. For purposes of this Policy, there is no meaningful distinction between the terms “Personal information” and “Personal data”

INFORMATION WE COLLECT AND USE

How We May Collect Personal Information

We and our third party service providers may collect Personal Information in a variety of ways, including:

Through the Services: We may collect Personal Information through the Services, such as when you make a booking or register for a promotion.
Offline: We may collect Personal Information from you offline, such as when you contact customer service.
From Other Sources: We may receive your Personal Information from other sources, such as public databases, joint marketing partners, social media platforms (including from people with whom you are friends or otherwise connected), and other third parties, to the extent permitted by applicable law.

How We May Use Personal Information

We may use Personal Information:

To complete and fulfill your booking or purchase, including to process your payment, communicate with you regarding your booking or purchase, and provide you with related customer service. We use passport information for the purpose of travel bookings.
To respond to your inquiries and fulfill your requests, such as to send you newsletters.
To send administrative information to you, such as information regarding the Services and changes to our terms, conditions, and policies.
To send you marketing communications that we believe may be of interest to you, to the extent permitted by law.
To personalize your experience on the Services by presenting products and offers tailored to you.
To allow you to participate in sweepstakes, contests, and similar promotions and to administer these activities. Some of these activities have additional rules, which may contain additional information about how we use and disclose your Personal Information. We suggest that you read any such rules carefully, as you will be bound by them if you choose to participate.
To facilitate social sharing functionality.
To allow you to send messages to another person through the Services. By using this functionality, you are telling us that you are entitled to provide us with your friend’s name and email address.
For our business purposes, such as data analysis, audits, fraud monitoring and prevention, developing new products, enhancing, improving, or modifying our Services, identifying usage trends, determining the effectiveness of our promotional campaigns, and operating and expanding our business activities.
As we believe to be necessary or appropriate: (a) under applicable law, including laws outside your state or country of residence; (b) to comply with legal process and to prevent, detect, or suppress abuse, fraud, or criminal activity; (c) to respond to requests from public and government authorities and self-regulatory organizations, including public and government authorities and self-regulatory organizations outside your state or country of residence; (d) to enforce our terms and conditions; (e) to protect our operations, assets, or interests or those of any of our affiliates; (f) to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.

HOW WE SHARE YOUR INFORMATION

We disclose the personal information we collect (or otherwise generate or obtain) as follows:

With our travel partners. We share your information with our travel partners to provide the Services (such as connecting users with airlines or online travel agents to book a flight or other travel service, and sharing personal details, contact information, passport information, preferences, requests, accommodations, and other information with the airline or online travel agent) and for our travel partners’ own purposes, which may include marketing or advertising purposes (see below for more detail on Sharing with Travel Partners).
With our group companies in our corporate family. We share your information with our group companies within our corporate family, including but not limited to for the Purposes described above, to provide you with integrated products and services, and for our and their marketing purposes (see below for more detail on Sharing with Our Group Companies).
With other business partners. We share information with other third-party business partners for their own marketing purposes, including sharing with online advertisers or advertising technology (“ad tech”) companies to provide you with targeted advertising and marketing communications, where permitted under law (see below for more detail on Sharing with Our Business Partners).
Trips shared by you. If you use or have itineraries as part of our Trips Service, you can send or grant access to your itinerary through our Services to anyone you choose. See the Trips services section above for more detail.
With social networking services. We share (or facilitate your sharing of) your information with social networking services when you use our Services to connect and share your information publicly or with friends or when you use our Services to connect with us on, share on, or use third-party social networking platforms and services (see below for more detail on Sharing with Social Networking Services).
Third-party services or applications you use to log into your account. If you use a third-party service or application (e.g., Facebook) to log into your COLOURHOLIDAYS account, we share certain personal information with that third party.
How We Store and Protect Your Information. If you provide us with a review of your trip, you authorize us to publish it on all our Services under the screenname you provided and to share it with travel partners. You also authorize us to aggregate your review with other reviews.
Content you publish. If you publish travel recommendations as part of Guides or other mediums provided by us, you authorize us to publish it on all our Services.
To process payments. Credit or debit card information is required to process certain transactions, including to make certain bookings and reservations or to purchase other products or services from travel partners or other third parties, in which case we share your payment information with travel partners, and other third-party service providers (such as fraud detection services) (see below for more detail and additional terms regarding Sharing to Process Payment Information).
With other service providers. We share information with third-party vendors, consultants, and other service providers who perform services or functions on our behalf (see below for more detail on Sharing with Other Service Providers).
In the event of a corporate transaction. We may disclose or transfer your information to a third party if we sell, transfer, divest, or disclose all or a portion of our business or assets to another company in connection with or during negotiation of any merger, financing, acquisition, bankruptcy, dissolution, transaction, or proceeding.
To protect rights and property. We may disclose your information to third parties when we believe in good faith that disclosure is necessary to protect our rights, our property, the integrity of the Services, personal safety, or the interests of you or any other person, and to detect, prevent and/or otherwise address fraud, risk management, security or technical issues.
To comply with and as required by law. We may disclose your personal information to government authorities or other relevant third parties in order to comply with applicable legal requirements, judicial proceedings, court orders, legal process, or lawful requests from governmental authorities.
Aggregate Information. We share aggregate statistical data for the improvement of our Services. We may also share aggregate or de-identified information with third parties at our discretion.
At your request. We also share your information as directed or requested by you, or subject to your consent.

In some circumstances, you may have the right to opt out or object to our sharing of your information with certain third parties. For more information, or to exercise these or other rights, see the Your Choices and Rights section below.

Sharing with Travel Partners. Our travel partners include online travel agencies, hotels, airlines, car rental companies, and travel insurance providers. When you make a request for a booking or reservation from one of our partners through our Services, we share your information with that travel partner to facilitate the booking or reservation and provide the services you requested. Depending on the request, this may include your name, contact information, passport information, frequent flyer details, itinerary details as described above, your preferences, any special requests or accommodations, information or comments that you choose to submit (if any), and other information as required by the particular travel partner. Your information is provided to the travel partner, just as it would be if you contacted the travel partner directly. If you provide a mobile phone number in connection with your request, travel partners may send you text messages regarding your request. Some travel partners also require you to provide credit or debit card account information to secure your reservation.

When you make a request, we also share with the travel partner additional information about you, such as information about your travel activity and history, and/or information that we collect from you and third parties. Travel partners use this information for their own purposes, which may include to improve their products or services and to provide you with targeted advertising and marketing communications, where permitted under law.

Sharing with Our Group Companies. We share your information with our affiliates and subsidiaries in the U.S. and worldwide, as well as with our parent corporation, Booking Holdings, Inc., and its other subsidiaries (collectively, as also defined earlier in this Privacy Policy, our “group companies”). We may share your information with our group companies for the following reasons:

Provide you with integrated services (including to administer and manage reservations, bookings, services, and payments across our affiliated platforms).
Provide personalized offers or send you marketing communications with your consent or as otherwise permitted by applicable law.
Enable “single sign-on”, i.e., allowing you to log into a shared account for multiple Booking Holdings Inc. brands using a single set of log-in credentials, which allows us to, for example, show your reservations and bookings made through the websites, applications, and services of our group companies on your account page, and allow our group companies to show information in your respective account(s) with them.
Provide customer support services.
Detect, prevent, and investigate fraud and misuse of our services, other illegal activities, and data breaches.
Analyze how users use our independent and affiliated platforms, including so that we may improve existing products and services and develop new features, products, and services that may be of interest to our users.
Ensure compliance with applicable law.

To learn more about your choices related to how we share your information with our group companies (including our subsidiaries, our parent company, and its other subsidiaries), please see the Your Choices and Rights section below.

Sharing with Our Business Partners. We share your information with other third-party business partners for their own marketing purposes. These third parties include online advertisers or ad tech companies, who may provide you with targeted advertising and marketing communications, where permitted under law. The information we share includes information collected through your use of our Services (e.g., information about your bookings and reservations for flights, hotels, car rentals, or other travel accommodations) and information we collect about you through the use of cookies and similar technologies (e.g., information about the websites you visit; information about your searches, including the cities or destinations you search for, the types of accommodations you search for, your travel preferences, price range, intended travel dates, and the number of travelers in your party).

For example, if you frequently search for flights from Seattle to Paris around certain holidays, we may share that information with a particular airline partner so it can better understand which of our customers are interested in flights from Seattle to Paris on certain dates. The airline partner may then, for example, use this information to offer you a promotion.

To learn more about your choices related to how we share your information with our business partners, please see the Your Choices and Rights section below.

Sharing with Social Networking Services. Our Services allow you to connect and share your actions, comments, content, and information publicly or with friends. Our Services may also allow you to connect with us on, share on, and use third-party platforms, including those on which COLOURHOLIDAYS has a presence. Please be mindful of your personal privacy needs and the privacy needs of others as you choose whom to connect with and what to share and make public. We cannot control the privacy or security of information you choose to make public or share with others. COLOURHOLIDAYS also does not control the privacy practices of third-party platforms. Please contact those sites and services directly to learn about their privacy practices.

Sharing to Process Payment Information. To use certain Services (such as to book a flight) and to make payments to certain of our travel partners, we require payment information (e.g., credit or debit card account information, other online payment method information, etc.). When you submit your payment information through our Services, we will share that information with travel partners, third-party payment processors, and other third-party service providers (including, but not limited to, vendors who provide fraud detection services to us and other third parties), to the extent necessary to meet our contractual obligations to you (e.g., to secure your reservation or make a payment to a travel partner where required), to meet our legitimate interests in preventing fraud and other misuses of our platforms or Services, or with your consent where this is required by law. In particular:

When you use a credit or debit card to secure a booking or reservation through our Services, we provide your credit or debit card account information (including card number and expiration date, and if required by the travel partner, CVV number) to the applicable travel partner to process the transaction.
When you provide your credit or debit card account information through our Services, you will have the option to save your information to your account for future use. If you choose not to save your credit or debit card account information to your account, we will delete your credit or debit card account information after the transaction is complete.
For information about the security of your payment information, see the How We Store and Protect Your Information section below.

Sharing with Other Service Providers. We share information with third-party vendors, consultants, and other service providers who perform services or functions on our behalf (e.g., hosting or operating our Services, data collection, manually parsing booking confirmations, reporting, ad response measurement, site analytics, data analysis, delivering marketing messages and advertisements, processing credit card payments, and providing fraud detection services). We do not authorize these third parties to use or disclose your information for purposes other than those for which it has been provided. We require these third parties to maintain and implement security measures to protect your information from unauthorized access or processing.

HOW WE STORE AND PROTECT YOUR INFORMATION

COLOURHOLIDAYS maintains commercially-reasonable technical, administrative, and physical security measures designed to protect your information from loss, misuse, unauthorized access, disclosure, alteration, and destruction.

When your payment information is being transmitted to our Services or through our Services, it will be protected by cryptographic protocols. To be clear, COLOURHOLIDAYS only stores your payment information if you choose to save that information to your account. When you submit a booking or reservation, we transfer your payment information to the applicable travel partner to process the transaction. Our contracts with third parties that receive your payment information require them to keep it secure and confidential.

However, we cannot guarantee that transmissions of your payment information or your other information will always be secure or that unauthorized third parties will never be able to defeat the security measures taken by COLOURHOLIDAYS or our third-party service providers. Except to the extent that liability cannot be excluded or limited due to applicable law, we assume no liability or responsibility for disclosure of your information due to errors in transmission, unauthorized third-party access, or other causes beyond our control. You play an important role in keeping your information secure. You should not share your username, password, or other security information for your COLOURHOLIDAYS account with anyone. If we receive instructions using your username and password, we will assume you have authorized the instructions. If you have reason to believe that your interaction with us is no longer secure (e.g., if you feel that the security of any account you might have with us has been compromised), please contact us immediately as detailed in the How to Contact Us section below.

Retention. We may retain your personal information for as long as your account is active and for a period of time thereafter to allow you to re-activate your account without loss of information. We may also retain your personal information as necessary to:

Maintain logs and business records for analysis, security, and/or audit purposes
Comply with record retention requirements under the law
Deal with any complaints regarding the Services; and
Comply with our legal obligations, protect or defend our rights, resolve disputes and enforce our contracts

Cookies and Web Beacons

Like any other website, colourholidays uses ‘cookies’. These cookies are used to store information including visitors’ preferences, and the pages on the website that the visitor accessed or visited. The information is used to optimize the users’ experience by customizing our web page content based on visitors’ browser type and/or other information.

Our Advertising Partners

Some of advertisers on our site may use cookies and web beacons. Our advertising partners are listed below. Each of our advertising partners has their own Privacy Policy for their policies on user data. For easier access, we hyperlinked to their Privacy Policies below.

Google https://policies.google.com/technologies/ads

Advertising Partners Privacy Policies

You may consult this list to find the Privacy Policy for each of the advertising partners of colourholidays.

Third-party ad servers or ad networks uses technologies like cookies, JavaScript, or Web Beacons that are used in their respective advertisements and links that appear on colourholidays, which are sent directly to users’ browser. They automatically receive your IP address when this occurs. These technologies are used to measure the effectiveness of their advertising campaigns and/or to personalize the advertising content that you see on websites that you visit.

Note that colourholidays has no access to or control over these cookies that are used by third-party advertisers.

Third Party Privacy Policies

colourholidays’s Privacy Policy does not apply to other advertisers or websites. Thus, we are advising you to consult the respective Privacy Policies of these third-party ad servers for more detailed information. It may include their practices and instructions about how to opt-out of certain options.

You can choose to disable cookies through your individual browser options. To know more detailed information about cookie management with specific web browsers, it can be found at the browsers’ respective websites.

CCPA Privacy Rights (Do Not Sell My Personal Information)

Under the CCPA, among other rights, California consumers have the right to:

Request that a business that collects a consumer’s personal data disclose the categories and specific pieces of personal data that a business has collected about consumers.

Request that a business delete any personal data about the consumer that a business has collected.

Request that a business that sells a consumer’s personal data, not sell the consumer’s personal data.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

GDPR Data Protection Rights

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access – You have the right to request copies of your personal data. We may charge you a small fee for this service.

The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.

The right to erasure – You have the right to request that we erase your personal data, under certain conditions.

The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.

The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.

The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

Children’s Information

Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.

colour holidays does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.

HOW TO CONTACT US

If you have any questions about this Policy or the way in which your personal information has been used, please contact us using our feedback form or by postal mail at:

COLOURHOLIDAYS Attn: Data Protection Officer No. 15/2 C, Joseph Lane Road, Colombo, Sri Lanka

[email protected]