Legal

Privacy Policy

Effective: March 1, 2026

1. Introduction

MyMuseums ("we," "our," or "us") is committed to protecting visitor privacy on digitalpasses.sbs. This policy explains our data practices in compliance with UAE Federal Decree-Law No. 45 of 2021 (PDPL) and the EU General Data Protection Regulation (GDPR).

2. Data Controller

MyMuseums FZ-LLC
Unit 23, Alserkal Avenue, Al Quoz 1
Dubai, UAE · [email protected] · +971 4 301 8400

3. What We Collect

3.1 Provided by You

  • Name and email (contact forms, newsletters)
  • Message content and subject
  • Cookie preferences

3.2 Collected Automatically

  • IP address (anonymized where possible)
  • Browser type, device, and OS
  • Pages viewed, session duration, referral source

4. Purpose of Processing

  • Responding to inquiries and providing support
  • Delivering newsletter content you subscribed to
  • Improving site functionality and user experience
  • Analyzing traffic patterns (aggregated, anonymized)
  • Complying with UAE and international legal obligations

5. Legal Basis

We process data based on: (a) your explicit consent; (b) legitimate business interests; (c) contractual performance; or (d) legal obligations under UAE law.

6. Sharing

We never sell personal data. Limited sharing occurs with:

  • Hosting and analytics providers under data processing agreements
  • Law enforcement when legally required
  • Professional advisors under confidentiality obligations

7. Retention

Contact submissions: 24 months. Newsletter data: until you unsubscribe. Analytics data: 26 months (aggregated).

8. Your Rights

You may: access, correct, or delete your data; withdraw consent; object to or restrict processing; request data portability; lodge a complaint with a supervisory authority. Contact [email protected].

9. International Transfers

Data may be processed outside the UAE. We apply Standard Contractual Clauses or equivalent safeguards approved under UAE law.

10. Security

We use SSL/TLS encryption, access controls, regular audits, and secure server infrastructure.

11. Children

Our services are not directed at individuals under 16. We do not knowingly collect children's data.

12. Contact

[email protected] · +971 4 301 8400