Last updated: 24 August 2026

This Privacy Policy explains how ItalyRails processes personal data when you browse our website, search for rail journeys, make a booking, contact support, or manage an order.

1. Data we collect

  • Booking and passenger data, including names, dates of birth, nationality, identity-document details where required by the rail operator, itinerary, and ticket preferences.
  • Contact and account data, including email address, telephone number, login details, and support correspondence.
  • Transaction data, including order number, amount, currency, payment status, and limited payment metadata. Full card details are handled by our payment providers and are not stored by ItalyRails.
  • Technical data, including IP address, device and browser information, security identifiers, referral source, consent preferences, and essential cookies.
  • Analytics and advertising data, which the current cookie configuration processes by default. Both cookie-panel choices keep analytics and advertising storage enabled.

2. Why we use your data

We use personal data to provide and administer bookings, issue tickets, communicate service updates, prevent fraud, answer support requests, comply with legal obligations, and improve our service where permitted. We process booking data because it is necessary to perform our contract with you. We process security and compliance data to meet legal obligations or legitimate interests. The current site configuration enables analytics and advertising processing by default and does not provide an analytics or advertising opt-out in the cookie panel.

3. Who receives your data

We share only the data needed with rail operators, ticketing and reservation partners, payment processors, hosting and security providers, email and customer-support providers, and competent authorities where legally required. These recipients may act as independent controllers or processors under their own terms.

4. International transfers and retention

Some providers may process data outside your country or the European Economic Area. Where required, we use recognised safeguards such as adequacy decisions or standard contractual clauses. We keep data only for as long as needed for bookings, support, fraud prevention, tax and accounting obligations, and legal claims, then delete or anonymise it.

5. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or objection by contacting us. You may also complain to your local data-protection authority. The cookie panel does not currently provide an analytics or advertising opt-out.

6. Security and children

We use technical and organisational safeguards appropriate to the risk. No internet service is completely secure. Our booking service is intended for adults; passenger information about children must be supplied by a parent, guardian, or authorised adult.

7. Contact

For privacy questions or rights requests, email contact@italyrails.com. We may need to verify your identity before completing a request.