Privacy Policy

Last Updated: August 25, 2025

1. Introduction

Museums of London ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, services, or participate in our educational programs.

We are headquartered at 45 Museum Street, London WC1A 1LY, United Kingdom, and can be contacted at [email protected] or +44 20 7946 0798.

2. Information We Collect

2.1 Information You Provide

• Contact Information: Name, email address, phone number, and postal address
• Course Enrollment: Educational background, interests, accessibility requirements
• Communications: Messages sent through contact forms, email correspondence
• Payment Information: Billing details (processed securely through third-party payment processors)

2.2 Information Automatically Collected

• Website Usage: Pages visited, time spent, browser type, device information
• Cookies: As detailed in our Cookie Policy
• IP Address: For security and analytics purposes

3. How We Use Your Information

We use your personal information for the following purposes:

• Providing educational services and course enrollment
• Communicating about courses, schedules, and updates
• Processing payments and managing bookings
• Improving our website and services
• Sending newsletters and marketing communications (with consent)
• Complying with legal obligations
• Protecting against fraud and ensuring security

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data based on:

• Contract: To fulfill our obligations when you enroll in courses
• Consent: For marketing communications and non-essential cookies
• Legitimate Interest: For website analytics and service improvement
• Legal Obligation: For tax, accounting, and regulatory compliance

5. Information Sharing

We do not sell your personal information. We may share your data with:

• Museum Partners: To facilitate behind-the-scenes access and special programs
• Service Providers: Payment processors, email services, website hosting
• Legal Authorities: When required by law or to protect our rights

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• SSL encryption for data transmission
• Secure servers and regular security updates
• Access controls and staff training
• Regular security assessments

7. Data Retention

We retain your personal data only as long as necessary:

• Course Records: 7 years for educational and certification purposes
• Marketing Consents: Until you withdraw consent
• Website Analytics: 2 years maximum
• Financial Records: As required by law (typically 6 years)

8. Your Rights

Under UK data protection law, you have the right to:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data in certain circumstances
• Restriction: Limit how we process your data
• Data Portability: Receive your data in a structured format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: For processing based on consent

9. Cookies and Tracking

We use cookies to enhance your website experience. For detailed information about our cookie usage, please see our Cookie Policy.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

11. Children's Privacy

Our services are primarily intended for adults. We do not knowingly collect personal information from children under 16 without parental consent.

12. International Transfers

We primarily process data within the UK. If we transfer data internationally, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses.

13. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be notified through our website or direct communication. The "Last Updated" date indicates when changes were last made.

14. Contact Information

For questions about this Privacy Policy or to exercise your rights, contact us:

15. Supervisory Authority

If you have concerns about how we handle your personal data, you can contact the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.