Privacy policy

Data controller

GO Tours SRLS, trading as Luxe Craft Tours, Rome, Italy, is the controller of personal data collected through this website and our booking systems.

What we collect

• Booking details: name, email, phone, participant details, pickup address.
• Payment records: amounts, status and payment references — never full card numbers.
• Operational notes needed to deliver the experience, including accessibility requests.
• Technical data such as IP address and device information for security and fraud prevention.

Why we use it

• To perform your booking contract and send transactional messages about it.
• To meet accounting, tax and safety obligations.
• To send marketing only where you have given separate, explicit consent.

Transactional messages about a booking are not marketing and are sent regardless of marketing consent. You can withdraw marketing consent at any time.

Who we share it with

Only where needed: payment providers, messaging and email providers, ticket suppliers, and the guides, drivers and hosts delivering your experience. They receive the minimum data required.

How long we keep it

Booking and payment records are kept for the period required by Italian tax and accounting law. Marketing contact data is kept until you withdraw consent. Audio-guide access expires 30 days after the experience date.

Your rights

You may request access, correction, deletion, restriction or portability of your data, and object to processing based on legitimate interests. Contact us and we will respond within the statutory period. You may also complain to the Italian data protection authority.

Security

Access to booking data is restricted by role and enforced at the database level. Sensitive actions such as refunds, price overrides and permission changes are logged.