YOUR DATA, WITH CARE
Privacy policy.
Last updated: November 3, 2026
YES.TUSCANY plans private experiences and transfers in Tuscany. To do that well, we need a few details from you — and we treat them with the same care we put into every journey. This page explains, in plain words, what we collect, why, and the choices you have.
Who we are
YES.TUSCANY is a private travel curation and transfer service run by Sheila in Tuscany, Italy. We are responsible for the personal data described on this page. For any privacy question, write to us at info@yestuscany.com.
What we collect
We only collect what you choose to send us through the “Plan your experience” form:
- your full name;
- your email address;
- your phone number, which we may use to call you or message you on WhatsApp;
- the type of service you are interested in;
- your preferred travel date;
- the number of passengers;
- the message you write about your plans.
Please avoid sharing sensitive information you don’t need to. If you mention allergies or dietary needs, we use them only to arrange suitable options for your experience.
Cookies and analytics
This site does not use advertising cookies, remarketing or cross-site tracking. Our hosting service may use strictly necessary technical cookies or data to deliver the pages securely and reliably.
We also measure visits in aggregate with Google Analytics 4 (provided by Google Ireland Ltd.), under our legitimate interest in understanding how the site is used: pages viewed, device type, approximate country and general interaction patterns. IP addresses are anonymized, we do not use advertising features and we do not use this data to identify you. The data may be processed outside the European Union under appropriate safeguards. You can opt out at any time by installing Google’s official opt-out browser add-on: tools.google.com/dlpage/gaoptout.
Should we ever add marketing tools, they will only run after you give your explicit consent, and you will be able to withdraw it as easily as you gave it.
How we use your information
- to reply to your inquiry and talk through your plans;
- to prepare a personalized quote and itinerary;
- to coordinate the transfers, visits and reservations you confirm;
- to keep the site secure and understand, in aggregate, how it is used.
We will never send you marketing messages without your consent.
Legal basis
We handle your data under the EU General Data Protection Regulation (GDPR):
- steps you ask us to take before a booking, such as answering your inquiry and preparing a quote;
- our legitimate interest in running the site safely and measuring its use in aggregate, for essential cookies and statistics;
- your consent, for any marketing communication or marketing tool;
- legal obligations, such as keeping accounting records once a booking is made.
Sharing
We do not sell or rent your personal data, ever. We share it only when needed:
- with the hosting and database providers that run this site and store form submissions on our behalf;
- with Google, for the aggregate analytics tool described above;
- with Resend, the e-mail service that notifies us of each new inquiry and receives the details you enter in the form;
- with Cloudflare, Inc., which runs the anti-spam check on the contact form described under Security;
- with trusted local partners — drivers, wineries, restaurants — and only the details required for the experience you booked;
- with public authorities, when the law requires it.
Some of these providers may process data outside the European Union. When they do, it is protected by appropriate safeguards, such as the European Commission’s standard contractual clauses.
How long we keep it
Inquiries that do not turn into a booking are deleted within 12 months of our last exchange. Booking records are kept for as long as tax and accounting law requires. You can ask us to delete your data sooner at any time, within those legal limits.
Security
Form submissions travel over an encrypted connection and are stored with restricted access. Only YES.TUSCANY can read them.
To protect the form from spam and automated abuse, we use Cloudflare Turnstile, provided by Cloudflare, Inc. When you open the contact form, it checks technical signals from your browser — such as your IP address and browser characteristics — only to confirm that a person, not an automated program, is sending the request, under our legitimate interest in keeping the site secure. We do not use it for advertising or to identify you.
Your rights
You can ask us at any time to access, correct or delete your data, to restrict or object to its use, to receive a copy in a portable format, or to withdraw any consent you gave. Simply write to info@yestuscany.com — we will reply within one month.
If you feel your data has not been handled properly, you also have the right to lodge a complaint with a data protection authority. In Italy, this is the Garante per la protezione dei dati personali.
Changes to this policy
If the way we handle data changes, we will update this page and the date at the top.