Privacy policy

This page explains what data ColosseumGo collects, why, who receives it and how you can control it. It is written to meet the UK GDPR and the Data Protection Act 2018, and, for customers in the EU, Regulation (EU) 2016/679.

Who processes your data

The controller is Igors Vascenkovs, a sole trader trading as ColosseumGo, based in London, United Kingdom. Contact, including requests about your personal data: support@colosseumgo.com.

ColosseumGo is an independent booking agency. We are not the Colosseum Archaeological Park and we do not act on its behalf.

What we collect and why

We collect exactly what the museum needs to issue a ticket, and nothing beyond it:

Each visitor’s first and last name — tickets are personal and checked against ID at the entrance.
The booking contact’s name, email and phone — to reach you and send the tickets.
The booking contact’s sex, country, city and date of birth — required by the museum’s ticketing system.
Visit date and time, chosen ticket types, payment amount and status.

We do not collect special category data: no health data, no religious or political views, no biometrics.

Legal basis

Performance of a contract (Art. 6(1)(b)) — the main basis: without this data the service cannot be provided.
Legal obligation (Art. 6(1)(c)) — keeping payment records for accounting and tax.
Legitimate interest (Art. 6(1)(f)) — fraud prevention.

We do not run marketing mailings, so we do not ask for consent to them.

Who receives your data

Stripe payment processing — name, email address, order amount Card details are entered on Stripe’s side and never reach us.

Colosseum Archaeological Park ticketing placing the booking — each visitor’s name, the booking contact’s details, visit date and time Without this transfer no ticket can be issued: the box office issues named tickets only.

Email provider delivering tickets and notifications — email address, message contents

We do not share or sell your data to anyone else.

International transfers

We are based in the United Kingdom. The Colosseum Archaeological Park is in Italy, within the European Union. Visitors’ details are passed to it because a named ticket cannot be issued, and your contract with us cannot be performed, without them.

Transfers from the UK to the EU are covered by an adequacy decision. Stripe and our email provider may process data outside the EU and the UK under Standard Contractual Clauses.

How long we keep it

Order data — while we provide the service, then for the period tax law requires for payment records.
Support correspondence — up to three years. After those periods the data is deleted.

Cookies and analytics

This site uses no cookies, no analytics, no advertising pixels and no social widgets. That is why there is no consent banner — there is nothing to consent to.

Your language is detected from the header your browser sends with each request and is not stored. If analytics is added later, this page will be updated before it goes live.

Children’s data

Bookings are made by an adult. A child’s name reaches us only as the name on a ticket and is used solely to issue it. We do not collect data from children directly.

Your rights

Get a copy of your data, correct inaccuracies, and have data erased when there is no longer a basis to keep it.
Restrict processing, receive your data in a machine-readable form, and object to processing based on legitimate interest.

Write to support@colosseumgo.com — we reply within one month. You may complain to the UK ICO (ico.org.uk) or, if you are in the EU, to your national supervisory authority.

Last updated: October 23, 2026