Privacy Policy
Drive Colombo Group, Colombo, Sri Lanka. Last reviewed September 2026.
Who controls your data
Drive Colombo Group operates drivecolombo.com and is the data controller for the personal data described here. You can reach us at [email protected]. We have no telephone line; email is the way to contact us and it is monitored.
What we actually collect
This site is deliberately light on personal data. We do not hold a customer account system and we do not take payments.
- Search parameters. The pickup and return town and dates you enter, so we can ask the supplier's system what is available.
- Technical data. IP address, browser and device type, referring page and the pages you view, collected through server logs and analytics.
- Anything you send us. The content of an email you write to us, or a review you submit, including the name and location you choose to attach to it.
When you continue to a supplier to complete a booking, the name, licence details, payment details and contact details you give at that point are collected by the supplier under their own privacy policy, not by us. We never see your card number.
Why we process it, and on what basis
We process search parameters to perform the service you asked for, which is to return live availability. We process technical data on the basis of our legitimate interest in keeping the site secure, working and useful, and in understanding which pages help visitors. We process anything you email us in order to answer you. Where a cookie is not strictly necessary we ask for your consent first.
Who else sees it
Your search parameters are sent to our rental inventory partner so that live prices can be returned. Our hosting, content delivery, email forwarding and analytics providers process data on our instructions as processors. Some of these providers operate outside the European Economic Area, in which case transfers are covered by the safeguards the law requires, such as standard contractual clauses. We do not sell personal data and we do not share it with advertisers.
How long we keep it
Server logs are kept for a short operational period and then deleted. Analytics data is retained in aggregated form. Emails are kept for as long as the conversation is useful and then removed. Reviews submitted for publication are kept while they are displayed.
Your rights
If you are in the European Economic Area or the United Kingdom the General Data Protection Regulation gives you the following rights. Exercise any of them by emailing us; we will respond within one month.
Access
Ask us for a copy of the personal data we hold about you.
Rectification
Ask us to correct data that is wrong or incomplete.
Erasure
Ask us to delete data we no longer need to hold.
Restriction
Ask us to pause processing while a dispute about accuracy is resolved.
Objection
Object to processing we carry out on the basis of legitimate interests, including analytics.
Portability
Receive the data you gave us in a common machine-readable format.
Withdraw consent
Withdraw consent for anything we process on that basis, at any time.
Complain
Lodge a complaint with your national data protection authority.
Security and children
The site is served over an encrypted connection and access to what little we store is restricted. No transmission over the internet is completely secure, so we cannot promise absolute security. This site is not directed at children and we do not knowingly collect data from anyone under sixteen.
Changes to this policy
We update this page when the service or the providers behind it change. The date at the top tells you when it was last reviewed.
Questions about your data? Write to [email protected].
See also our cookie policy and terms and conditions.