Privacy Policy

1. Introduction

Museums of London ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website mystic-drain.com or use our services.

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the site or use our services.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us, including:

• Name and contact information (email address, phone number)
• Booking and tour preferences
• Payment information (processed securely through third-party providers)
• Communication preferences
• Feedback and survey responses

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and usage patterns:

• IP address and location data
• Browser type and version
• Operating system
• Referring website
• Pages viewed and time spent on site
• Search terms used

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and maintain our services
• To process bookings and payments
• To communicate with you about our services
• To send promotional materials (with your consent)
• To improve our website and services
• To comply with legal obligations
• To protect our rights and prevent fraud

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: For marketing communications and optional services
• Contract: To fulfill our obligations under service agreements
• Legitimate Interests: To improve our services and prevent fraud
• Legal Obligation: To comply with applicable laws and regulations

5. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

• Service Providers: Trusted third parties who assist in operating our website and conducting business
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Consent: When you have given explicit consent for specific disclosures

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL encryption for data transmission
• Secure servers and databases
• Regular security assessments
• Staff training on data protection
• Limited access to personal information

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Booking information: 7 years for accounting purposes
• Marketing preferences: Until you unsubscribe
• Website analytics: 26 months maximum
• Communication records: 3 years

8. Your Rights

Under applicable data protection laws, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Restriction: Limit the processing of your data
• Portability: Receive your data in a portable format
• Objection: Object to processing based on legitimate interests
• Withdrawal: Withdraw consent at any time

To exercise these rights, please contact us at [email protected].

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience. For detailed information about our cookie practices, please see our Cookie Policy.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Children's Privacy

Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

12. International Data Transfers

Your information may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of our services after any changes constitutes acceptance of the updated policy.

14. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

15. Data Protection Officer

For data protection inquiries, you can contact our Data Protection Officer:

Email: [email protected]