Privacy Policy

Last Updated: 24/01/2026

DriveLK (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit or use the DriveLK website, make a booking, or interact with our services.

DriveLK operates a self-drive tuk tuk and car rental service in Sri Lanka.

1. Information We Collect

We may collect the following types of personal information:

1.1 Information You Provide Directly

  • Full name

  • Email address

  • Phone number

  • Passport or national ID details

  • Driving licence details

  • International Driving Permit (IDP) details

  • Sri Lankan Driving Recognition Permit details (AAC)

  • Billing and payment information

  • Booking details and rental history

  • Any information you provide through contact forms, emails, or messages

1.2 Information Collected Automatically

  • IP address

  • Browser type and device information

  • Pages visited and usage data

  • Cookies and similar tracking technologies

2. How We Use Your Information

We use your personal data to:

  • Process bookings and payments

  • Verify identity and driving eligibility

  • Prepare rental agreements and insurance documentation

  • Communicate booking updates, confirmations, and support messages

  • Comply with legal and regulatory requirements in Sri Lanka

  • Improve our website, services, and customer experience

  • Prevent fraud and misuse of our vehicles

3. Legal Basis for Processing

We process personal data based on one or more of the following legal grounds:

  • Performance of a contract (rental agreement)

  • Compliance with legal obligations

  • Legitimate business interests

  • Your consent, where required

This Privacy Policy is intended to comply with the Sri Lanka Personal Data Protection Act, No. 9 of 2022 (PDPA). DriveLK acts as a “Data Controller” in respect of personal data collected through its website and rental operations.

4. Sharing of Personal Information

We do not sell your personal data.

We may share your information only when necessary with:

  • Insurance providers

  • Payment processors

  • Government authorities or law enforcement when required by law

  • Service providers assisting with website hosting, IT support, or communication services

All third parties are required to handle your data securely and only for authorised purposes.

5. Data Retention

We retain personal data only for as long as necessary to:

  • Fulfil the purposes outlined in this policy

  • Comply with legal, tax, and regulatory requirements

  • Resolve disputes and enforce agreements

When data is no longer required, it will be securely deleted or anonymised.

6. Cookies

Our website uses cookies to:

  • Enable essential website functionality

  • Analyse website traffic and usage

  • Improve performance and user experience

You may disable cookies through your browser settings; however, some website features may not function properly.

Cookie Banner Notice (Short Version)

“We use cookies to improve your browsing experience and analyse website traffic. By continuing to use this site, you agree to our Privacy Policy.”

7. Data Security

We take reasonable technical and organisational measures to protect your personal data against:

  • Unauthorised access

  • Loss or misuse

  • Alteration or disclosure

Despite our efforts, no method of transmission over the internet is completely secure.

8. Your Rights

Depending on applicable law, you may have the right to:

  • Request access to your personal data

  • Request correction of inaccurate or incomplete data

  • Request deletion of your personal data

  • Object to or restrict processing

  • Withdraw consent where processing is based on consent

Requests may be subject to legal and contractual limitations.

9. International Data Transfers

If personal data is transferred outside Sri Lanka, we ensure appropriate safeguards are in place to protect your information.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites.

11. Children’s Privacy

DriveLK services are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

13. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact:

DriveLK
Email: info@drivelk.com
Phone: +94765819315
Address: Sri Lanka

14. Website Terms of Use (Summary)

By accessing or using the DriveLK website, you agree to:

  • Use the website only for lawful purposes

  • Provide accurate and truthful information when making bookings

  • Not misuse, copy, or attempt to interfere with website content or systems

  • Accept that website availability may be interrupted for maintenance or technical reasons

All content on this website, including text, logos, images, and branding, is the property of DriveLK and may not be used without prior written permission.

DriveLK may suspend or restrict access to the website where misuse or security concerns arise.

DriveLK – Explore Freely. Drive Responsibly.

⇧