Privacy policy

1. Who we are

This website, Rome Tourz, is operated from Italy. We are the controller of the personal data described in this policy. You can contact us through the contact page.

This policy explains what personal data we collect, why, who we share it with and what rights you have under the EU General Data Protection Regulation (GDPR) and Italian law.

2. What we collect

We collect only what we need:

• Messages and enquiries: your name, email, phone, dates, group size and message when you use our contact or tour enquiry forms.
• Newsletter: your email address and name if you subscribe.
• Operator accounts: business name, contact name, email, phone, website, listing content, plan and billing status.
• Payments: operator subscriptions are paid through Stripe or PayPal. They process your payment details. We receive confirmation of the payment, plan and email, but not your full card number.
• Click and usage data: when you click a booking button we count the click and the tour. Our servers keep standard logs (IP address, browser, pages requested) for security and troubleshooting.
• Wishlist: tours you save are stored in your browser's local storage on your device. We do not receive them.

3. Why we use your data

We use personal data to answer your messages and run enquiries (performing a contract or taking steps at your request), to provide and bill operator accounts (contract), to send the newsletter (your consent, which you can withdraw at any time), to keep the site secure, prevent abuse and understand how it is used (our legitimate interests), and to meet legal and tax obligations.

4. Cookies and local storage

We use essential cookies and local storage to keep you signed in, protect forms from spam and remember your wishlist and this notice. We do not use advertising cookies.

When you click through to GetYourGuide or another partner, they may set their own cookies on their site, including to credit us for the referral. Their policies apply there. You can block or delete cookies in your browser settings; some features may then stop working.

5. Who we share data with

We share data only with service providers who help us run the site, under agreements that require them to protect it:

• Our hosting and email providers.
• Fluent Forms and FluentCRM, the software that stores our form submissions and newsletter list on our own site.
• Stripe and PayPal, for operator subscription payments.
• GetYourGuide, when you click through to book a partner tour. They become responsible for the data you give them. See their privacy policy.
• Authorities, when the law requires it.

We do not sell your personal data.

6. International transfers

Some providers, such as Stripe and PayPal, may process data outside the European Economic Area. Where they do, they rely on safeguards such as the EU-US Data Privacy Framework or Standard Contractual Clauses.

7. How long we keep data

We keep enquiries for up to 24 months, operator account and billing records for as long as the account is active and then for the period required by tax and accounting law, newsletter data until you unsubscribe, and server logs for a short period, normally no more than 90 days.

8. Your rights

You can ask us to access, correct, delete or restrict the use of your personal data, to receive a copy in a portable format, and to object to processing based on legitimate interests. You can withdraw consent at any time, for example with the unsubscribe link in any email. To use these rights, contact us.

You also have the right to complain to the Italian data protection authority (Garante per la protezione dei dati personali) or the authority in your own country.

9. Children

Rome Tourz is not directed at children under 16, and we do not knowingly collect their data.

10. Security

We use HTTPS, access controls and regular updates to protect data. No system is perfectly secure, so please use a strong, unique password for your account.

11. Changes to this policy

We may update this policy as our service changes. The date at the top shows when it was last updated. For important changes we will tell operators and subscribers by email.