Privacy notice

The business behind this site is Primo Lume Viaggi S.r.l. (sample), Via dei Cappellari 00, 00186 Roma RM, Italy. For anything in this notice, write to ciao@primolume.example.

• When you plan a trip or ask a question: your name, email address and, if you give it, phone number; your dates, group size, interests and budget range; the trip you were looking at; and anything you add in the notes. We use it to reply, to work out what is possible and to write you a quote.
• When you book and pay: the same details, the date and party you chose, the price and any promo code, and a record of each payment (amount, date, method, receipt number). Card numbers go straight to our payment provider and never reach our servers. While the site is in test mode, the test checkout refuses real card numbers and nothing is charged.
• If you create an account: your name, email address, a password (kept only as a salted one-way hash, so even we cannot read it), whether your email is confirmed, your choice about letters, and when you last visited. If you turn on two-factor sign-in we keep the key your authenticator app uses, encrypted, and the hashes of your backup codes.
• Where you are signed in: for each device, a label such as “Chrome on macOS”, when it signed in and when it was last used, so you can see and end your sessions. We do not store your IP address with it.
• After you have booked: if you choose to fill in the trip details form: the names of the people travelling, food allergies and mobility needs, where you are staying, how you arrive, a phone number for the day and, optionally, an emergency contact (a person who has not agreed to be in our records, so please tell them). We use it only to run your trip and delete it about a month after the trip ends, or at once if the booking is cancelled.
• A review: if you write one, the rating and words you choose and the name you want shown (for example “Asha R., London”). Nothing appears on the site until we have read it.
• Our letters: if you tick the box or subscribe, we keep your address so we can send you the occasional letter. A subscription is confirmed from the email we send, and every letter has a one-click link to stop.
• Where you came from: if a link brought you here with campaign words (for example utm_source=newsletter) or from another website, we keep that, and the first page you landed on, for the length of your visit, and attach it to an enquiry or booking you make, so we can tell which of our channels bring people. It is kept in your browser's session storage, not in a cookie, and is not used to follow you around.

We use these details because you asked us to, to prepare for or run a trip you may book, to keep your account safe, and for the records the law requires. We do not use them for anything else.

• About your enquiry or booking: a confirmation, our replies, a quote, receipts, a reminder about a balance, a note a week before and two days before your trip, a request for a review after it, and a message if seats you were waiting for open up or an unpaid booking lapses. These are part of the service.
• About your account: confirming your address, resetting your password, sign-in links, and notices when something about its safety changes (a new email address, two-factor turned on or off, a backup code used, a locked account).
• Letters (only if you said yes): a short welcome series after you subscribe, a note about where to go next a month after a trip, and, for account holders, at most one message after a long time away. One click stops them.

• No advertising trackers and no analytics on this site.
• We do not sell or rent your details.
• The site sets only the cookies it needs. If you sign in, one cookie (pl_session) keeps you signed in, and a short-lived one (pl_2fa) exists for the few minutes between your password and your two-factor code. Both are readable only by the site itself. We set no cookies for tracking.

A few small things never leave your device. Your chosen display currency, your saved trips (until you sign in, when they move to your account) and your cursor preference are remembered in local storage. While you fill in the trip form, your dates, group and interests are kept in session storage so a refresh does not lose them; they are cleared when you send the enquiry or close the tab. If you press “Save for offline” on a trip, the pages of that trip are saved on the device for use without a signal, and removed when you sign out or ask for them to be cleared. Your name, email and notes are never stored this way.

We use a small number of providers, who handle your details only on our behalf:

• a hosting provider, to serve this site;
• a database provider, to store enquiries, bookings and accounts;
• an email provider, to send the messages above;
• a payment provider, to take card payments, once live payments are switched on (it receives your card details and the amount; we receive confirmation and the last four digits).

Display prices in other currencies use European Central Bank reference rates, fetched by our server. Nothing about you is sent when we do that. Our own staff can see enquiries, bookings and accounts in a private area that needs two-factor sign-in, and what they change there is recorded.

• An enquiry, and the conversation on it: 24 months after our last message about it, then deleted.
• Trip details (names, allergies, emergency contact): about a month after the trip ends, or at once if the booking is cancelled.
• Records of payments and receipts: for as long as the law requires us to keep accounts.
• Sign-in sessions: 30 days from the last sign-in, or until you end them.
• An account: until you delete it. Deleting it removes your profile, saved trips and sessions; enquiries and payments stay as business records, detached from your account.

Signed in, you can download everything we hold about your account as one file, change your email address, see and end your sessions, and, from your account page, delete your account. You can also ask to see what we hold about you, to correct it, to have it deleted, to limit or object to how we use it, to receive a copy in a portable form, and to withdraw consent at any time. Email ciao@primolume.example and quote your enquiry reference if you have one. We will answer within one month.

If you are not happy with our answer you can complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or to the authority in your own country.