Cartier Cascade

1. Information We Collect

We collect information that helps us deliver safe, personalised and efficient services. This includes:

We only collect information required for booking and communication.

Contact details such as your name, email address, phone number, and postal address.
Booking and travel details including preferred travel dates, passenger counts, and special requests.
Payment details that are processed securely via PCI-compliant partners. We do not store full card information on our servers.
Website interactions captured through cookies, analytics tools, and chat widgets to improve experience and support.

2. How We Use Your Information

Your information is used to deliver services and experiences you expect from Cartier Cascade, including:

Arranging bookings, passenger manifests, safety briefings, and concierge services.
Responding to enquiries, providing customer care, and sending service updates.
Improving our website, marketing, and operational processes.
Complying with legal, insurance, and regulatory requirements in Sri Lanka and partner destinations.

3. Sharing and Disclosure

We only share personal data with trusted parties when necessary to fulfil our service commitments:

Your data will not be shared with third parties except as needed for booking confirmation or legal compliance.

Licensed skippers, crew, transport operators, and hospitality partners.
Payment processors, fraud prevention services, and IT infrastructure providers.
Government authorities when legally required or when necessary for safety and security.

We do not sell or rent personal data to third parties.

4. Data Security & Retention

We implement administrative, technical, and physical safeguards to protect your data against loss, misuse, and unauthorised access.

Online transactions and communication are secured with encrypted systems (e.g., TLS/SSL). Payments are processed by PCI DSS compliant providers.

Information is retained only for as long as necessary to provide services, comply with regulations, or resolve disputes. When data is no longer needed, it is securely deleted or anonymised.

5. Your Rights & Choices

You may request to:

Access the personal data we hold about you.
Update or correct inaccurate or incomplete information.
Withdraw consent or request deletion where legally permitted.
Opt-out of marketing communications at any time.

You may also request removal of your personal data, where legally permitted.

To exercise these rights, contact us using the details below.

6. International Transfers

As an international concierge service, some data may be processed outside of Sri Lanka. We ensure appropriate safeguards are in place when data is transferred to partners in other jurisdictions.

7. Updates to This Policy

We may update this Privacy Policy to reflect operational, legal, or regulatory changes. The “Last Updated” date will indicate when changes take effect. Material updates will be communicated through our website or direct notifications.