We only collect as much information about you as is reasonably necessary for us to provide you our services.
What is your lawful basis for using my personal information?
There are a couple of reasons we believe we are allowed to collect, use, and store your personal information under the GDPR.
With your consent. When you directly give us personal information for a certain purpose or otherwise express your consent, we can use that personal information for that certain purpose. If you consent for us to do so, we will use your personal information to, for example:
- respond to your inquiry
- make a booking to visit the project
You can withdraw your consent at any time. Please contact us if you would like to revoke your prior consent to any of these uses.
For our legitimate interests. However, we do not always need your express consent to use your information. We can use your personal information as needed for our legitimate interests, so long as those interests do not conflict with your fundamental privacy rights and freedoms. These legitimate interests include:
- improving the presentation, operation, and experience of our services;
- evaluating and updating our technical infrastructure; and
- monitoring and improving the information security of our websites.
By contract. A contract also creates a basis for using your information. By accepting our Terms and Conditions, a contract is formed between us and you so that we may provide you our services. We can use your personal information as needed to provide our services to you under that contract.
Law, protection, or the public good. We can also use your personal information to comply with our legal obligations, protect the vital interests of our users, and as needed for the public good. This may include using your personal information to prevent and handle potential fraud, security breaches or other prohibited activities.
How long do you store my information?
Will you use my personal information to contact me?
As needed, we will contact you by email about your inquiry or booking. We will not pass on your personal information to others that want to market to you.
Who else do you share my personal information with?
Our "partners" are the organizations and people that we work with to better provide our services. As needed, we may send your information to our partners to help us communicate with you, provide customer support, or process your payments to us. Your information may be stored on our partners’ servers.
Our payment processor
Our email processor
When we need to for legal or security reasons
We may have to share your information with the police, the government, a court, or another person as required by law. Similarly, as allowed by applicable law, we may share your information with third parties as needed to:
- prevent or take action if we suspect someone is:
- breaking the law,
- committing fraud,
- threatening to harm someone, or
- violating our Terms of Service;
- protect the rights, property, or safety of ourselves, our users, or a child;
- protect the safety and security of our website; or
- enable us to take reasonable precautions against liability.
To a new owner of our company
If our business is sold, whether through merger, acquisition, bankruptcy, dissolution, reorganization, or other transaction or proceeding, your personal information may be shared with the acquiring company and their representatives. If so, we will post a notice on this page and the Terms of Service.
With your permission
Does my personal information leave my home country?
The Elephant Freedom project is located in Sri Lanka. If you are outside of Sri Lanka, we will transfer your personal information into Sri Lanka.
Can I see what information you have on me?
Yes. You may review your personal information maintained by us. We can provide you with a copy of our information on you—just ask us.
As required by your applicable state, national, or international law, you may also have the right require us to change or delete your personal information, and/or refuse to permit us from further collecting or using your information.
How do I change or delete my information?
Please contact us and we will attempt to make the required changes. To protect your privacy and security, we may require you to take certain steps or provide additional information to verify your identity before we provide any information or make corrections. It’s important to remember that if you delete or limit the use of your information, our services may not function properly.
I'm under the age of 16. Can I use your website?
No. Our website is not intended for anyone younger than 16 years old. You may not create book, message, give us any information, or interact with us or our website in any way.
We do not knowingly collect personal information from children under 16. If we learn we have received personal information from a child under 16, we will remove it (although we may not be able to fully remove the information from our backup system). If you believe we might have a child’s personal information, please contact us.
Who can I contact with questions?
If you are located within the European Economic Area, you may also contact a supervisory authority in your home country to report violations of the GDPR.