Who runs this site
Vallie's Tours is a boutique Sri Lanka travel agency. The website at valliestours.com and the booking enquiries it collects are operated by Vallie's Tours from Colombo, Sri Lanka. You can reach us at nwj_lk@yahoo.co.uk or +94 71 755 3151.
What data we collect
When you send an enquiry, sign in, or build a tour, we collect only what we need to help plan your journey: your name, email, phone (if provided), the destinations and dates you're interested in, and any preferences you share with us. We do not ask for passport numbers, payment card data, or other sensitive identifiers through the website.
How your data is stored
Enquiries, accounts, and saved itineraries are stored in our managed cloud backend. Data in transit is protected by HTTPS/TLS, and our database enforces row-level access rules so that signed-in users can only read and edit their own records. Internal commercial data (such as contract rates) is restricted to authenticated administrators.
Sign-in and account security
Sign-in uses email/password or Google. Passwords are hashed by our auth provider — Vallie's Tours never sees them in plain text. You can request account deletion at any time by emailing us.
Third-party services we rely on
- Lovable Cloud (Supabase) — hosting, database, authentication, file storage.
- Firecrawl — fetching publicly available hotel information for our content library.
- WhatsApp — optional chat channel for traveller enquiries.
- Google Maps / Leaflet — itinerary route visualisation.
These providers process limited data strictly to deliver the features above. We do not sell traveller data to advertisers.
Cookies and analytics
The site uses cookies essential to keep you signed in and to remember your journey-builder state. We do not run third-party advertising trackers.
Data retention and deletion
Enquiries are retained while we are actively planning your trip and for a reasonable follow-up period after. To request access to, correction of, or deletion of your data, email nwj_lk@yahoo.co.uk.
Reporting a security issue
If you believe you've found a vulnerability in this website, please contact nwj_lk@yahoo.co.uk with details so we can investigate. Please give us a reasonable window to respond before any public disclosure.
Shared responsibility
The hosting platform (Lovable Cloud / Supabase) provides infrastructure security, authentication and database controls. Vallie's Tours is responsible for the content of this site, the data we collect, and how we communicate with travellers. You are responsible for keeping your account credentials safe.