Choice
Control optional cookie categories where consent controls apply.
Privacy • Cookies • Tracking • AI
Your privacy. Your choice.
This policy explains how Travel09 uses cookies and similar technologies across our travel website, customer accounts, booking journeys, analytics, personalisation, advertising and AI-assisted services.
Transparency
Understand why technologies are used.
Data minimisation
Limit collection to appropriate purposes.
Control
Change available preferences later.
Privacy controls
Choose how Travel09 uses optional technologies.
Your actual consent preferences should be controlled by the Travel09 consent-management system. The controls below provide the policy interface for that system.
01
Always active
Strictly necessary
Security, sessions, booking functionality and essential services.
02
Preference controlled
Analytics
Helps us understand website performance and visitor interaction.
03
Preference controlled
Personalisation
Remembers preferences and may improve travel recommendations.
04
Preference controlled
Advertising
May measure campaigns or support relevant advertising where permitted.
AI
Depends on purpose
AI & intelligent features
Supports eligible AI-assisted travel and personalisation features.
01
Introduction
About this Cookie Policy
Travel09 uses cookies and related technologies to operate our website, secure customer sessions, provide booking functionality, remember preferences, understand performance, support customer service and, where appropriate, provide personalisation, advertising measurement and AI-assisted functionality.
This policy should be read together with our Privacy Policy and Terms & Conditions .
International visitors
Your available choices and the legal basis for a technology may vary depending on your location and the applicable privacy or electronic communications law.
02
Basics
Type
Session
Type
Persistent
Source
First-party
Source
Third-party
What are cookies?
Cookies are small pieces of information stored on or accessed from a browser or device when you use a website.
They can help websites maintain sessions, remember settings, recognise a browser, provide security, measure performance or support other website functionality.
Usually expires when the browsing session ends.
Can remain for a defined period unless removed earlier.
Set or controlled through Travel09.
Provided by another service integrated with Travel09.
03
Beyond cookies
Similar technologies
This policy also covers technologies that may store information on, access information from, recognise or interact with a browser or device.
Cookies
Pixels
Tags
SDKs
Local storage
Session storage
Scripts
Identifiers
Conversion tags
Device signals
04
Classification
Cookie and technology categories
| Category | Purpose | Typical control |
|---|---|---|
| Strictly necessary | Security, login, booking and requested website functions. | Required |
| Analytics | Usage and performance measurement. | Consent where required |
| Personalisation | Preferences and tailored experiences. | Consent where required |
| Advertising | Campaign measurement, advertising and remarketing. | Consent / opt-out depending on law |
| AI-related | Intelligent travel functionality and associated preferences. | Depends on technology and purpose |
05
Essential
Security
Fraud and abuse protection
Account
Login and session state
Booking
Reservation workflow
Preference
Consent choices
System
Load and service operation
Checkout
Requested transaction functions
Strictly necessary technologies
These technologies may be necessary to deliver a website or online service requested by you and generally cannot be disabled through Travel09's optional cookie preference controls.
06
Measurement
Analytics technologies
Analytics technologies can help Travel09 understand how visitors use our website, which pages perform well, whether technical errors occur and how users move through travel discovery and booking journeys.
Where applicable law requires consent, optional analytics technologies should remain inactive until the appropriate consent has been obtained.
07
Experience
Personalisation technologies
Personalisation technologies may remember settings such as preferred destinations, language, currency, travel interests, recently viewed services or other eligible preferences.
These technologies may also support recommendations for hotels, tours, destinations, offers, experiences or transfers where permitted.
08
Marketing
Advertising and campaign technologies
Travel09 may use eligible advertising technologies to understand whether campaigns lead to visits, enquiries or bookings and, where legally permitted, to deliver or measure relevant advertising.
Advertising technologies are not
treated as strictly necessary.
Where prior consent is required, Travel09 should not activate advertising or behavioural tracking technologies before the required choice is made.
AI
Artificial intelligence
AI-assisted travel technologies
Travel09 may provide AI-assisted functionality designed to help visitors discover destinations, compare travel options, understand preferences, find relevant hotels or tours, interact with support tools or receive travel recommendations.
AI
AI does not automatically make
every cookie necessary.
Cookies or similar technologies associated with an AI feature must still be classified according to their actual purpose.
AI-related technologies may support:
Travel intent
Destination preferences
Recommendation state
Conversation sessions
Language preference
Search context
Fraud prevention
Service improvement
Where AI functionality processes personal data, additional information about that processing should be provided through the Travel09 Privacy Policy or relevant just-in-time notice.
Travel09 should not use sensitive personal information for AI profiling or targeted advertising merely because a user interacts with an AI feature.
10
Reservations
Booking technologies
Cookies or similar technologies may maintain information necessary for requested booking journeys, including selected hotels, tours, transfers, dates, traveller selections, account sessions and checkout state.
Some booking technologies may qualify as necessary where they are genuinely required to provide a reservation function requested by the user.
11
Payments
Payment and fraud-prevention technologies
Payment processors, banks or payment technology providers may use security technologies necessary to authenticate transactions, detect fraud, manage checkout sessions and protect payments.
Third-party payment providers may operate under their own privacy and cookie policies when you interact directly with their systems.
12
External services
Third-party technologies
Travel09 may integrate services supplied by other organisations. Depending on the services actually enabled, these may include analytics providers, mapping services, payment providers, customer support tools, video platforms, advertising platforms, social media services, security providers and AI technology providers.
Our live cookie inventory matters.
Travel09 should maintain an accurate cookie and tracking inventory showing the actual provider, purpose, category and duration of technologies deployed on the production website.
13
Duration
How long technologies remain
Session technologies generally expire when a browsing session ends. Persistent technologies may remain for a defined period or until they are removed, replaced or expire.
Travel09 aims to use retention periods proportionate to the relevant purpose and should periodically review the duration of technologies deployed.
EU
European Union / EEA
No pre-selected optional consent
Clear purposes
Genuine user choice
Ability to withdraw
Consent records
Appropriate third-party disclosure
GDPR and European privacy standards
For visitors protected by applicable European privacy and electronic communications rules, Travel09 should obtain valid consent before placing or accessing non-essential technologies where consent is legally required.
Where personal data is subsequently processed through these technologies, GDPR requirements may apply separately to that processing.
UK
United Kingdom
UK GDPR and PECR
UK rules cover cookies and other storage and access technologies. Travel09 should provide clear information and obtain prior consent where required unless an applicable exception applies.
The UK rules can apply to technologies including cookies, tracking pixels, web storage, scripts, tags and certain device-recognition techniques.
Simply continuing to browse is not
treated as a substitute for valid
consent where consent is required.
US
United States
U.S. state privacy requirements
Privacy obligations in the United States can vary by state and may depend on factors such as Travel09's activities, applicable thresholds, the information involved and how data is used or disclosed.
Where applicable, Travel09 may provide rights or controls relating to targeted advertising, sale or sharing of personal information, profiling or other processing covered by relevant state law.
State-specific rights
Travel09 should apply legally required state privacy controls according to the jurisdiction and the processing actually performed rather than assuming one identical U.S. rule applies everywhere.
CA
California
CCPA / CPRA privacy controls
Where the California Consumer Privacy Act, as amended, applies to Travel09, eligible California consumers may have rights relating to personal information, including rights concerning certain sales or sharing.
If Travel09 engages in processing that constitutes a regulated sale or sharing, the appropriate opt-out mechanism should be made available.
18
Browser signals
Global Privacy Control
Where applicable law requires recognition of a qualifying browser-based opt-out preference signal such as Global Privacy Control, Travel09 should process that signal as legally required.
Browser signal
Checking this browser…
LK
Sri Lanka
Sri Lankan visitors
Travel09 applies its privacy and data-protection obligations to its processing activities in Sri Lanka in accordance with applicable Sri Lankan law and the nature of the relevant processing.
Where consent is relied upon for a particular optional technology or processing purpose, Travel09 should provide an appropriate mechanism for that choice.
MV
Maldives
Maldives travel services
Travel09 may interact with Maldives resorts, transfer operators, airlines and other suppliers when providing Maldives travel services.
Those organisations may operate their own websites or systems and may apply separate privacy or cookie practices when a customer interacts directly with them.
21
Global visitors
Visitors from other countries
Travel09 serves an international travel audience. Other jurisdictions may impose additional privacy, consent, transparency or tracking requirements.
Where a mandatory local privacy right applies to Travel09's processing, this policy is not intended to remove or restrict that right.
22
Young users
Children and young people
Travel09 does not intend optional advertising technologies to be used to knowingly profile children in a manner prohibited by applicable law.
Additional age, parental authorisation or data-protection requirements may apply depending on jurisdiction and processing purpose.
23
Your controls
01
Travel09 preferences
02
Browser controls
03
Device controls
04
Privacy signals
How to manage your choices
Where available, you can use Travel09's privacy preference centre to review or change optional technology choices.
Use our privacy preference centre.
Delete or restrict stored cookies.
Review relevant device privacy settings.
Supported legal preference signals may also apply.
24
Policy updates
Changes to this policy
Travel09 may update this Cookie Policy when technologies, suppliers, privacy requirements or website functionality change.
Where required, Travel09 may request a fresh consent when the relevant use of optional technologies materially changes.
25
Privacy support
Contact Travel09
If you have questions about Travel09 cookies, tracking technologies, AI functionality or privacy choices, contact our team.
Privacy & Cookie Support
Travel09
Contact Travel09 →
Sri Lanka & Maldives travel platform
International privacy
One platform. Global privacy awareness.
Travel09's privacy framework is designed to accommodate different legal requirements while keeping privacy controls understandable for travellers.
GDPR and applicable ePrivacy rules.
UK GDPR and PECR.
Applicable federal and state requirements.
CCPA / CPRA where applicable.
Applicable Sri Lankan privacy requirements.
Travel and supplier privacy considerations.
Privacy at Travel09
You stay in control.
Review your available cookie and privacy preferences whenever you need to.