Privacy Policy

Last updated: 1 March 2025 · Effective date: 1 March 2025

Summary: MuseumsInfo.digital collects only the personal data necessary to provide our digital audio guide services. We do not sell your data. You have the right to access, correct, and delete your data at any time. This policy complies with the EU General Data Protection Regulation (GDPR) and the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL).

1. Data Controller

The Data Controller responsible for your personal data is:

MuseumsInfo Digital FZ-LLC
Building 1, Dubai Internet City
Dubai, United Arab Emirates
Email: [email protected]
Phone: +971 4 555 0899

2. Data We Collect

We collect the following categories of personal data:

a) Data you provide directly:

Full name and email address (for purchase and account creation)
Payment card details (processed by our PCI-DSS certified payment provider; we do not store full card numbers)
Contact form submissions (name, email, message content)
Newsletter subscription email address

b) Data collected automatically:

IP address and approximate geolocation
Browser type, device type, and operating system
Pages visited and time spent (via anonymised analytics)
Download activity for purchased guides

3. Legal Basis for Processing

We process your personal data on the following legal bases:

Contract performance — to deliver your purchased digital audio guide and provide customer support.
Legitimate interests — to improve our website, detect fraud, and ensure platform security.
Consent — for newsletter subscriptions and optional marketing communications. You may withdraw consent at any time by clicking 'Unsubscribe' in any email or by contacting us.
Legal obligation — to comply with UAE tax, anti-money laundering, and other applicable regulations.

4. How We Use Your Data

We use your personal data exclusively for the following purposes:

Processing and fulfilling your digital guide purchase
Sending your download link and purchase confirmation
Responding to customer support and contact form submissions
Sending the MuseumsInfo Digest newsletter (with explicit consent)
Sending guide update notifications to existing customers
Fraud prevention and platform security
Aggregated, anonymised analytics to improve our service

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We may share limited data with the following trusted third-party service providers strictly for the purpose of delivering our service:

Payment processors (e.g. Stripe, PayPal) — for secure transaction processing.
Email delivery providers — for transactional emails and newsletters.
Analytics providers — using anonymised, aggregated data only.
Cloud hosting — our servers are hosted within the UAE and EU with appropriate data processing agreements in place.

All third parties are bound by data processing agreements mandating GDPR and PDPL-equivalent standards.

6. Data Retention

We retain your personal data only as long as necessary:

Purchase records: 7 years (UAE commercial law requirement)
Contact form messages: 24 months from submission
Newsletter subscribers: Until you unsubscribe
Website analytics: 26 months (anonymised)

7. Your Rights

Under GDPR and the UAE PDPL, you have the following rights:

Right to access — request a copy of your personal data we hold.
Right to rectification — request correction of inaccurate data.
Right to erasure — request deletion of your data ('right to be forgotten'), subject to legal retention obligations.
Right to portability — receive your data in a structured, machine-readable format.
Right to restrict processing — request that we limit how we use your data in certain circumstances.
Right to object — object to processing based on legitimate interests or for marketing purposes.
Right to withdraw consent — withdraw consent at any time for processing based on consent.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Cookies

Our website uses strictly necessary cookies for session management and a small number of analytics cookies (with your consent) to understand how visitors use our site. We do not use advertising or third-party tracking cookies. You can manage cookie preferences via your browser settings.

9. International Transfers

If your personal data is transferred outside the UAE or European Economic Area, we ensure equivalent protection through Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent UAE PDPL transfer mechanisms.

10. Security

We implement industry-standard technical and organisational measures to protect your data, including SSL/TLS encryption for all data in transit, encrypted storage, access controls, and regular security audits. However, no internet transmission is 100% secure. We encourage you to use strong passwords and notify us immediately if you suspect any unauthorised access.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered customers of material changes by email. The 'Last updated' date at the top of this page reflects the most recent revision. Continued use of our service after changes constitutes acceptance of the updated policy.

12. Contact & Complaints

For any privacy concerns, contact our Data Protection Officer at:

Email: [email protected]
Address: MuseumsInfo Digital FZ-LLC, Building 1, Dubai Internet City, Dubai, UAE

If you are located in the European Union and believe we have not addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

This Privacy Policy is governed by the laws of the United Arab Emirates. | MuseumsInfo Digital FZ-LLC | Registered in Dubai Internet City, UAE