Privacy Policy

Last updated: 26 October 2026

Colosseum Tickets ("we", "us", "our") is an independent, third-party ticket platform. We are not the official website of the Colosseum, the Roman Forum, the Palatine Hill, or any other attraction listed on this site, and we are not affiliated with the Italian Ministry of Culture or any official ticketing authority. We act as an intermediary that helps you select and purchase admission tickets from official suppliers and authorised resellers.

1. Data we collect

• Contact details — name, email address and phone number you enter in the ticket selection and contact forms.
• Booking details — the experiences, dates, time slots and number of visitors you select.
• Technical data — IP address, browser type, device information and pages visited, collected automatically to keep the site secure and working.

We do not collect or store payment card numbers. Any future payment step is handled by a PCI-DSS compliant payment provider, and card data never touches our servers.

2. How we use your data

• To process and fulfil your ticket order with the relevant official supplier or authorised reseller.
• To send your booking confirmation, e-tickets and essential visit information by email or phone.
• To respond to your questions and provide customer support.
• To meet legal, tax and accounting obligations.
• To improve the website and prevent fraud or misuse.

3. Legal basis (GDPR)

We process your data on the following bases: performance of a contract (delivering the tickets you ordered), our legitimate interests (running and securing the website, customer support), compliance with legal obligations, and — where required — your consent (for optional marketing messages, which you can withdraw at any time).

4. Who we share your data with

• Official ticket suppliers and authorised resellers — only the details needed to issue your tickets (typically name, date and time slot).
• Payment providers — to process your payment securely.
• Service providers — hosting, email delivery and analytics providers bound by data-processing agreements.
• Authorities — where required by law.

We never sell your personal data to third parties.

5. Data retention

We keep booking data for as long as needed to fulfil your order and to satisfy legal and accounting requirements (typically up to 10 years for transaction records). Contact-form enquiries that do not lead to a booking are deleted within 12 months.

6. International transfers

Some of our service providers may process data outside the EU/EEA. Where this happens, we rely on adequacy decisions or standard contractual clauses to protect your data.

7. Your rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten"), subject to legal retention duties.
• Restrict or object to processing, and to data portability.
• Withdraw consent at any time, without affecting prior processing.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us via the contact page.

8. Cookies

This site uses only strictly necessary cookies and storage required for the ticket selection to function. We do not use advertising or cross-site tracking cookies.

9. Security

We use TLS encryption, access controls and regular reviews to protect your data. No method of transmission over the internet is 100% secure, but we apply industry-standard safeguards.

10. Children

Our services are not directed at children under 16. Tickets for minors must be booked by a parent or legal guardian.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top shows the current version; material changes will be announced on this page.

12. Contact

For any privacy question or request, reach us through the contact page or the phone number shown in the site footer.