Privacy policy

Privacy Policy

Last Updated: July 31, 2026

At Roma Unlocked ("Roma Unlocked", "we", "us", or "our"), we are committed to protecting your privacy and handling your personal information responsibly and transparently.

This Privacy Policy explains how we collect, use, disclose and protect your personal information when you visit our website, make a booking, contact us, or otherwise interact with our services.

By using our Website or booking an Experience, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

Roma Unlocked is the data controller responsible for the processing of personal information collected through this Website.

For any questions regarding this Privacy Policy or the processing of your personal data, please contact us through our Contact page or by using the contact details available on our Website.

Website: www.romaunlocked.com

2. Information We Collect

Depending on how you interact with our Website and services, we may collect the following categories of personal information:

name;
email address;
telephone number;
billing information;
booking details;
dietary requirements, food allergies and accessibility requests where voluntarily provided;
communications exchanged with us;
technical information such as IP address, browser type, device information and website usage data;
information collected through cookies and similar technologies, where applicable.

We only collect personal information that is reasonably necessary to provide our services or comply with legal obligations.

3. How We Collect Information

We may collect personal information:

when you make a booking;
when you contact us;
when you subscribe to communications, where available;
when you browse our Website;
through cookies and similar technologies;
from payment providers and other service providers involved in processing your booking.

4. How We Use Your Information

We may process your personal information to:

manage and confirm bookings;
provide and operate our Experiences;
communicate before and after your booking;
respond to enquiries and customer support requests;
communicate dietary requirements or accessibility requests to Partner Businesses where necessary;
improve our Website and services;
prevent fraud and maintain website security;
comply with legal obligations;
establish, exercise or defend legal claims where necessary.

5. Legal Basis for Processing

Where the General Data Protection Regulation (GDPR) applies, we process personal information on one or more of the following legal bases:

performance of a contract;
compliance with legal obligations;
your consent, where required;
our legitimate interests, provided these do not override your fundamental rights and freedoms.

6. Sharing Your Information

We do not sell your personal information.

Where reasonably necessary, we may share personal information with:

independent Partner Businesses participating in the booked Experience;
payment service providers;
website hosting providers;
technology and IT service providers;
professional advisers;
public authorities where required by law.

Partner Businesses receive only the information reasonably necessary to deliver the booked Experience, including dietary requirements, allergies or accessibility requests where applicable.

7. Payment Information

Payments made through our Website are processed securely by third-party payment providers.

Roma Unlocked does not store complete payment card information on its own systems.

8. Cookies

Our Website uses cookies and similar technologies to ensure proper functionality, improve user experience and, where applicable, analyse Website performance.

Where required by law, non-essential cookies are used only after obtaining your consent.

For further information, please refer to our Cookie Policy.

9. Data Retention

We retain personal information only for as long as reasonably necessary to:

provide our services;
comply with legal, accounting and tax obligations;
resolve disputes;
enforce our agreements;
protect our legitimate interests.

When personal information is no longer required, it will be securely deleted or anonymised.

10. International Transfers

Some of our service providers may process personal information outside the European Economic Area.

Where such transfers occur, appropriate safeguards will be implemented in accordance with applicable data protection legislation, including the use of Standard Contractual Clauses where required.

11. Data Security

We implement appropriate technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.

Although we take reasonable security measures, no electronic transmission or storage system can be guaranteed to be completely secure.

12. Your Rights

Where applicable under data protection laws, you may have the right to:

access your personal information;
request correction of inaccurate information;
request deletion of your personal information;
restrict or object to processing;
withdraw consent where processing is based on consent;
request data portability;
lodge a complaint with your local data protection authority.

Requests relating to your personal information may be submitted through our Contact page.

13. Children's Privacy

Our Experiences and Website are not directed to children.

We do not knowingly collect personal information from children without appropriate legal authority or parental involvement where required by law.

14. Third-Party Websites

Our Website may contain links to third-party websites.

Roma Unlocked is not responsible for the privacy practices or content of external websites, and we encourage you to review their respective privacy policies before providing personal information.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or business practices.

The updated version will become effective upon publication on this Website, unless otherwise required by applicable law.

16. Contact

If you have any questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact us through our Contact page or by using the contact details available on our Website.