Privacy Policy
Last updated: 20 July 2026
This page is maintained by The Tour Shop to explain how we handle personal data when you visit our website, book a tour or ticket, or contact us. It is not a legal certification.
1. Data Controller
The Tour Shop — Campo San Zaccaria 4683/g, 30122 Venice, Italy.
Email: booking@thetourshop.it — WhatsApp: +39 351 4780794.
2. Data We Collect
- Booking data: name, email, phone, participants' names, tour, date and time.
- Account data: email and authentication credentials if you create an account.
- Payment data: for prepaid tours, payments are processed by Stripe; we never store your card details.
- Technical data: IP address, browser, device and pages visited.
3. Purpose and Legal Basis
- Managing bookings, refunds and customer support (contract — Art. 6(1)(b) GDPR).
- Sending booking confirmations and service emails (contract).
- Fulfilling accounting and tax obligations (legal obligation).
- Security, fraud prevention and site improvement (legitimate interest).
4. Sharing
We share data only with providers strictly needed to run the service: Stripe (payments), Resend (transactional email), Supabase (hosting & database), and local guides assigned to your tour. These act as data processors under GDPR.
5. Retention
Booking records are kept for 10 years for tax purposes. Account data is kept until you delete your account. Marketing consent is kept until you withdraw it.
6. Your Rights
Under GDPR you may access, rectify, erase, restrict or port your data, and object to processing. Write to booking@thetourshop.it. You may also lodge a complaint with the Italian Data Protection Authority (Garante Privacy).
7. International Transfers
Some processors (e.g. Stripe, Resend) may process data outside the EU. Transfers rely on Standard Contractual Clauses approved by the European Commission.
8. Changes
We may update this policy; the "Last updated" date above will reflect any change.