Privacy Policy

What this site collects, why, and how to stop it. Written to be read, not to be skimmed past.

Last updated: 26 October 2026

The short version

We do not have accounts, logins, a newsletter or a payment form. You cannot type personal details into this site today.
We run one analytics tool and one affiliate tracking script. Both are named below, with what they do and how to block them.
We do not sell your data, and we do not share it for advertising.
All bookings happen on GetYourGuide or on a partner site. Their privacy policy governs what happens there, not ours.
You can write to [email protected] about anything on this page, including asking us to delete what we hold.

Who we are

stonehenge-tickets.com is an independent travel guide to Stonehenge. It is a small publishing operation, not a tour operator, not a travel agency, and not connected to English Heritage or to any of the operators it writes about.

For the purposes of the UK GDPR, the data controller is the operator of stonehenge-tickets.com. You can reach the controller at [email protected].

This policy covers this website only. When you click through to book, the booking site becomes responsible for your data and its own policy applies.

What we collect

Usage data

Which pages you open, how you arrived, roughly where you came from, your device type, browser language and the size of your screen. This arrives through Google Analytics 4, which we load with Google Tag Manager. Google Analytics 4 does not store your full IP address.

When you click a tour button

We record that a booking button was pressed, which tour it was for, and which provider it went to. This tells us which pages earn their keep. It does not identify you, and the booking itself happens on the provider's site.

Affiliate referral data

Our accommodation partner, Stay22, stores a small identifier in your browser so a booking can be credited to this site if you make one. Stay22 and the accommodation partner then handle the booking data themselves.

Security and hosting data

Cloudflare serves this site and protects it from abuse. Like any web host it processes technical request data, including IP addresses, for security and for keeping the site online.

Email you send us

If you write to us, we keep your address and your message so we can reply and so we can find the thread later.

Reader reviews (not open yet)

The review form is closed while we finish the system behind it. When it opens, it will collect your name, email address, the tour you took, the month you travelled, your scores and your written review. Submitting it will mean agreeing to have the review published, and this page will be updated before it goes live.

Cookies and tracking

This site uses no advertising cookies and no cross-site advertising trackers. It does use analytics cookies and one affiliate tracking script, both listed here.

Names and lifetimes come from what these providers publish. They can change a cookie name or a lifetime without telling us, so treat the list as accurate but not guaranteed.

Name	Set by	What it does	Lasts
_ga, _ga_<container-id> Non-essential	Google Analytics 4, loaded through Google Tag Manager (GTM-NZPTBJMF)	Counts visits and tells us which pages and which search engines bring people in. Used only in aggregate.	Up to 2 years
_gid Non-essential	Google Analytics 4	Distinguishes one visitor from another for about a day. Set intermittently by Google.	24 hours
lma / _tmjs_l entries in local storage, and cookies on stay22.com Non-essential	Stay22, loaded by the letmeallez.js script (account lmaID 6acf9c488456e5e48c57a718)	Remembers that you arrived from this site so a partner can credit the referral if you book accommodation. Set when you click or view an accommodation link or map.	Set by Stay22, typically up to 30 days
__cf_bm Essential	Cloudflare, our hosting and security provider	Security only. Helps Cloudflare tell a real visitor from automated traffic. Cloudflare may set it when it needs to check a request.	About 30 minutes

Blocking them

The site works fully without any of the non-essential cookies. There is no accept or reject button on this site today, so use your browser instead:

Block third-party cookies, or block cookies for this site, in your browser settings.
Open this site in a private or incognito window. Cookies are discarded when you close it.
Install a content or script blocker. The site reads correctly with the tracking scripts blocked.
Use Google's own opt-out add-on for Google Analytics, or your browser's tracking protection.

Deleting cookies afterwards does not remove aggregate statistics that were already recorded, but it stops the next visit being counted the same way.

Our legal bases

Legitimate interests. Running a secure site, preventing abuse and understanding which pages are useful. The analytics cookie is used in aggregate only, is not used to build a profile of you, is not used for advertising, and is not shared with anyone for their own purposes.
Your consent. The Stay22 affiliate entry is not a statistical cookie, so consent is the right basis for it. It is set by the Stay22 script and you can refuse it with the browser controls above. If you want it switched off for your browser and would rather not do it yourself, write to us.
Performance of a contract or your request. Replying to an email you send us.
Legal obligation. Keeping a record where the law requires one, for example to answer a lawful request about what we hold.

We do not sell personal data, and we do not share it for advertising. Data reaches only the service providers that make the site work:

Google, for Google Tag Manager and Google Analytics 4. We see aggregate reports, not individual visitors.
Cloudflare, for hosting, content delivery, aggregate web analytics and security.
Stay22, for accommodation links and maps, and for crediting referrals to this site.
GetYourGuide and the accommodation partners that Stay22 works with, including Booking.com, Expedia, Hotels.com, Agoda, Vrbo and Kayak. Your data reaches them only when you choose to click a link. From that point their policy applies.

We may also disclose data where the law compels it, or to protect the site and its visitors from fraud or abuse.

Transfers outside the UK

Google, Cloudflare and Stay22 are based outside the United Kingdom, mainly in the United States and Canada, so using their services can mean data is processed there. Those transfers rely on the safeguards those companies have in place, such as the UK International Data Transfer Agreement, the UK Addendum to the EU standard contractual clauses, or the UK extension to the EU-US Data Privacy Framework where the company is certified under it.

How long we keep data

Google Analytics event and user data: 14 months, then removed from our reports.
Cloudflare aggregate web analytics: up to 6 months.
Cloudflare request data used for security: a short period, measured in days.
Emails you send us: while we are dealing with the matter, then up to 24 months.
Reviews, if you submit one once the form opens: kept indefinitely, because a published review is the whole point. Your email address is kept until publication and for 12 months after, then deleted.

Your rights

Under the UK GDPR you can ask for a copy of the personal data we hold about you, ask us to correct or delete it, ask us to restrict or stop processing it, object to processing based on legitimate interests, and ask for data you gave us in a portable format. You can also withdraw consent for the affiliate tracking at any time, using the browser controls above or by writing to us.

We answer within one month. There is no charge.

Be aware of one limitation, and we would rather say it than let you assume otherwise: analytics data is not tied to a name or an account, so we often cannot locate an individual visitor's record in order to delete it. We can act on anything you have sent us directly, and we can tell you which providers to approach for the rest.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office, which is the UK supervisory authority. Its complaints route is at ico.org.uk. You are welcome to raise it with us first.

Children

This site is general travel information and is not directed at children. We do not knowingly collect personal data from anyone under 13, and nothing here is designed to encourage a child to send us information. If you believe a child has, write to us and we will remove it.

Security

The site is served over HTTPS and sits behind Cloudflare with its standard protections against abuse. We hold very little, which is itself a security measure: there is no customer database here to lose. No website can promise perfect security, and we will not pretend to.

Changes to this policy

If we add a tool or start collecting something new, this page changes before that happens, and the date at the top changes with it. The date at the top of this page is the date of the current version.

How to contact us

Questions, requests, corrections and complaints all go to the same place:

Email: [email protected]

Site: https://stonehenge-tickets.com

See also our Terms of Service, which cover how you may use this site.