Legal
Privacy policy
We collect what an airline reservation needs and nothing more. No passport scans, no card details on this website, and no advertising trackers.
Who we are
DummyTicket.lk is a trading name of Cleverhub Private Limited, a company registered in Sri Lanka and based in Colombo, Sri Lanka. In this policy, “we” and “us” mean that company, which is the controller of the personal data described below. You can reach us at dummyticket@cleverhub.lk or on WhatsApp at +94 77 793 6904.
What we collect
When you request a reservation
The request form asks for the details an airline or hotel booking cannot be made without:
- Passenger titles, given names and surnames as printed in the passport
- Passenger type and, for children and infants, date of birth
- Nationality
- Route, travel dates, cabin and any preferred airline
- Hotel city and stay dates, if you have asked for accommodation
- What the document is for, and the destination country, visa centre and appointment date if you tell us
- Your name, email address and WhatsApp number, and any notes you add
When you contact us
The contact form collects your name, email address, an optional WhatsApp number and your message. If you write to us on WhatsApp or by email instead, we hold that conversation.
When you use the DummyTicket app
Our iOS and Android app lets you create an account so that your requests are kept together. The account holds your name and email address; your password is stored only as a salted hash by our authentication provider (Firebase Authentication, operated by Google) and we never see it. Each request you send from the app is linked to your account so that only you can see it in the app, and it contains the same details as a request sent from this website. The app also records the platform, language and time zone of your device with each request so that we quote in the right currency. The app runs no advertising and no third-party analytics. An unfinished request is kept on your device only, and is cleared when you sign out. You can delete your account from the app at any time; that removes the login immediately, while any requests already sent are kept for the periods described below.
Technical information
With each request we store the page it came from, the referring page, your browser user agent and your browser language. This helps us reproduce problems and spot automated abuse. Our hosting provider keeps standard server logs, which include IP addresses, for a short period.
This site runs no advertising trackers, no third-party analytics and no social media embeds. We do not set marketing cookies. Your unfinished request form is kept in your own browser using session storage so that a reload does not lose it; it never leaves your device until you press submit, and it is cleared when the request is sent.
What we never ask for
We do not ask for passport scans, National Identity Card copies, bank statements, payslips or card numbers on this website. If a page or a message claiming to be us asks for any of these, it is not us. Please tell us at dummyticket@cleverhub.lk.
Why we use it, and on what basis
- To make the booking you asked for. Names, route and dates go to the airline or hotel because a reservation cannot exist without them. This is necessary to perform the service you requested.
- To contact you about your request. We confirm the itinerary, send payment details and deliver the PDF using the email address and number you gave us.
- To keep records. We hold a record of what was issued so that we can support a change, answer a question later and meet Sri Lankan tax and accounting obligations.
- To protect the service. Limited technical data helps us block abuse and fix faults.
We do not sell personal data, we do not share it for advertising, and we do not use it to build profiles. We will only send you a marketing message if you ask us to.
Who it is shared with
- Airlines, hotels and reservation systems. Passenger names, route and dates are passed to the carrier or property holding the booking. They handle that data under their own privacy terms.
- Our technology providers. The site is hosted and the request database is run on Google Firebase. Google processes this data on our instructions.
- Payment providers and our bank. If you pay by card link, the payment provider collects the card details directly. We never see or store a full card number.
- Where the law requires it. We will disclose data if a Sri Lankan authority lawfully requires us to.
Where it is stored
Our hosting and database run on Google infrastructure, which means your data may be stored on servers outside Sri Lanka. Airlines and hotels operate globally, so a booking necessarily involves a transfer to the country the carrier or property is based in. We use providers that offer recognised safeguards for such transfers.
How long we keep it
- Request records, including passenger names and itineraries: 24 months from the request date.
- Contact form messages and support conversations: 12 months.
- Invoices and payment records: as long as Sri Lankan tax law requires.
You can ask us to delete your record sooner. We will do so unless we are required to keep it for accounting reasons, in which case we will tell you which part we must retain and why.
Your rights
Under the Personal Data Protection Act No. 9 of 2022 you may ask us for a copy of the personal data we hold about you, ask us to correct anything inaccurate, ask us to delete it, or object to how we are using it. Email dummyticket@cleverhub.lk with the request reference if you have one. We will reply within 30 days. If you are not satisfied with our answer, you may complain to the supervisory authority in Sri Lanka.
Security
Data travels to us over an encrypted connection and is stored in an access-controlled database. Only the people who issue and support tickets can read it. No system is perfect, so we also keep the amount of data we hold small on purpose: the less we store, the less there is to lose.
Children
The service is intended for adults. We do book tickets that include children and infants, but the request must be made by a parent or guardian, who is responsible for the details submitted.
Changes to this policy
If we change how we handle personal data we will update this page and the date at the top. Material changes will also be mentioned on the home page for a period.
Contact
Questions about this policy go to dummyticket@cleverhub.lk, or WhatsApp +94 77 793 6904 during 8:00 AM – 10:00 PM (Sri Lanka time), 7 days. Our terms of service and refund policy sit alongside this policy.