Privacy & Cookie Policy

Last updated: 26 July 2026

1. Data Controller

Moda S.r.l. — VAT/P.IVA 17723481002 — Registered office: Via Ignazio Ciampi 18, 00162 Rome, Italy.
Operational address: Via Mario de' Fiori 59b, Rome. Contact: romebycart@gmail.com · WhatsApp +39 392 636 3857.

2. What data we collect and why

• Booking data (name, email, phone, hotel/pickup address, number of guests, children's ages, special requests): collected when you book a tour, used exclusively to provide the service, contact you about your tour and meet legal/accounting obligations. Legal basis: performance of a contract.
• Payment data: processed directly and exclusively by Stripe Payments Europe Ltd on its secure servers. We never see or store your full card number. See Stripe's privacy policy at stripe.com/privacy.
• Emails and messages you send us (email/WhatsApp): used to answer you and manage your booking.

3. Where your data goes

Booking data is stored on our booking system and in our operational tools (Google Workspace — calendar and email) to organise pickups and tours. It is shared only with the people and services strictly needed to run your tour (our guides, Stripe for payments). We never sell your data.

4. Retention

Booking and invoicing data is kept for the time required by Italian tax law (10 years). Marketing contacts, if any, until you ask us to stop.

5. Your rights (GDPR)

You can request access, correction, deletion, restriction or portability of your data, and object to processing, by writing to romebycart@gmail.com. You can lodge a complaint with the Italian Data Protection Authority (Garante Privacy).

6. Cookies

This website does not use profiling or advertising cookies. We use only:

• Technical storage strictly necessary for the booking flow (e.g. remembering your selection while you book). No consent banner is required for technical cookies under EU rules.
• Stripe: when you proceed to payment you are redirected to Stripe's secure checkout, which sets its own technical/anti-fraud cookies (see stripe.com/cookies-policy).

If in the future we add analytics or marketing tools, this page will be updated and a consent banner will be shown.

7. Minors

Bookings can only be made by adults. Children's ages are collected solely to prepare child seats and tailor the tour.