On this page
Who we are
Escape Routes (Pvt) Ltd, based in Kandy, Sri Lanka, is responsible for the personal information described here — the "data controller," in legal terms. This policy explains what we collect when you use our website, why we collect it, who we share it with, and the rights you have. It covers our website and the enquiries and bookings we handle through it.
Information we collect
Information you give us
When you request a quote, make an enquiry, book a trip, or subscribe to our newsletter, you share details such as your name, email address, phone or WhatsApp number, country, travel dates, group size, budget range, interests, and anything you tell us in your message. If you go on to book, we collect the traveller details needed to arrange your trip.
Information we collect automatically
When you browse the site, we collect limited technical and usage information — the pages you view, the site or search that referred you, your approximate location, and your device and browser type. We gather this through cookies and similar technologies, and load analytics only after you accept our cookie banner. Our Cookie Policy explains this in full.
How we use your information
We use your information to respond to enquiries and prepare quotes and itineraries; to arrange and deliver the trips you book; to send our newsletter if you've subscribed; to keep the site secure and prevent misuse; to understand how the site is used so we can improve it; and to meet our legal and accounting obligations. We don't make automated decisions that produce legal effects about you, and we never sell your information.
Our legal bases
Depending on the situation, we rely on: your consent — for the newsletter and non-essential cookies, which you can withdraw at any time; taking steps at your request before a contract and performing that contract — handling your enquiry and delivering your trip; our legitimate interests in running and improving a travel business, balanced against your rights; and legal obligations, such as tax and accounting rules.
When we share information
We share your information only where it's needed to run our service: with trusted providers who process data on our behalf — for hosting, email delivery, customer-relationship management, and analytics — under contracts that require them to protect it; with the travel suppliers (hotels, guides, transport partners) needed to fulfil your booking; and with authorities or advisers where the law requires it or to protect our legal rights.
International transfers
Some providers we work with are based outside Sri Lanka, so your information may be processed in other countries. Where it is, we take steps to keep it protected to a standard consistent with this policy and applicable law.
How long we keep your data
We keep personal information only for as long as we need it. Enquiry and booking records are retained for a reasonable period to service your trip and meet legal, tax, and accounting requirements, after which they're deleted or anonymised. Newsletter details are kept until you unsubscribe.
Your rights and choices
You can ask us for a copy of the personal information we hold about you; to correct it if it's wrong; to delete it or restrict how we use it; to object to certain uses; to withdraw consent where we rely on it; and, where it applies, to receive your data in a portable format. To exercise any of these, email us at hello@theescaperoutes.com. If you're in the EU or UK and are unhappy with how we've handled your data, you also have the right to complain to your local data-protection authority.
How we protect your data
We use appropriate technical and organisational measures — including access controls and encryption in transit — to protect your information against loss, misuse, and unauthorised access. No online service can be completely secure, but we work to keep the risk as low as we reasonably can.
Children's privacy
Our services are intended for adults planning travel. We don't knowingly collect personal information from children under 16. If you believe a child has provided us with data, please contact us and we'll remove it.
Changes to this policy
We may update this policy as our services and the law change. The date at the top of this page shows the latest revision; where a change is significant, we'll make that clear.
How to reach us
For any question about your privacy, or to exercise your rights, email hello@theescaperoutes.com or use our contact page. We aim to respond within a few working days.