Privacy Policy

Last updated: March 1, 2026

TickMuseum ("we," "our," or "us") operates the website tickmuseum.lat (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or make a purchase through our platform. We are committed to protecting your privacy and ensuring that your personal data is handled in a safe and responsible manner.

1. Information We Collect

We collect information that you provide directly to us when you use our Service, including but not limited to:

• Personal Identification Information: Full name, email address, phone number, and billing address when you create an account or make a purchase.
• Payment Information: Credit card numbers, billing details, and transaction history. Payment processing is handled by PCI-DSS compliant third-party processors; we do not store full credit card numbers on our servers.
• Booking Information: Museum preferences, visit dates, number of visitors, and special requirements related to your ticket orders.
• Communication Data: Records of correspondence when you contact our customer support team via email, phone, or our contact form.
• Technical Data: IP address, browser type, operating system, referring URLs, device information, and access times collected automatically through cookies and similar technologies.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To process and fulfill your museum ticket orders and deliver e-tickets to your email.
• To communicate with you regarding your bookings, including order confirmations, reminders, and customer support responses.
• To improve our website, products, and services based on aggregated usage analytics.
• To send promotional communications and newsletters, which you may opt out of at any time.
• To comply with legal obligations and protect against fraudulent or unauthorized transactions.
• To maintain the security and integrity of our platform.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or a jurisdiction with similar data protection laws, we process your personal data under the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you (e.g., fulfilling your ticket order).
• Legitimate Interest: We may process data based on our legitimate interests, such as improving our services and preventing fraud.
• Consent: Where required, we obtain your explicit consent before processing certain data, including marketing communications.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience and collect analytical data. Cookies are small text files stored on your device that help us recognize you upon return visits.

• Essential Cookies: Required for the basic functionality of the website, such as session management and security.
• Analytics Cookies: Help us understand how visitors interact with our website through aggregated, anonymized data.
• Marketing Cookies: Used to deliver relevant advertising and measure the effectiveness of our campaigns.

You may manage your cookie preferences through the cookie consent banner displayed when you first visit our site, or through your browser settings. Please note that disabling essential cookies may affect the functionality of our Service.

5. Data Sharing and Third Parties

We do not sell your personal information. We may share your data with the following categories of third parties:

• Museum Partners: We share necessary booking information (name, ticket type, visit date) with our partner museums to facilitate your entry.
• Payment Processors: Secure payment handling through PCI-DSS compliant providers.
• Analytics Providers: Aggregated usage data shared with analytics services to improve our platform.
• Legal Authorities: When required by law or to protect our legal rights.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Booking records are typically retained for a period of five (5) years for accounting and legal compliance purposes.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• The right to access and receive a copy of your personal data.
• The right to rectify inaccurate or incomplete personal data.
• The right to erasure ("right to be forgotten") under certain circumstances.
• The right to restrict the processing of your personal data.
• The right to data portability.
• The right to object to processing based on legitimate interests or direct marketing.
• The right to withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at privacy@tickmuseum.lat.

8. Data Security

We implement industry-standard security measures to protect your personal information, including 256-bit SSL/TLS encryption for data in transit, encrypted data storage, firewalls, and access controls. However, no method of electronic storage or transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us and we will take steps to delete such information.

10. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: privacy@tickmuseum.lat
• Phone: +971 4 580 2400
• Address: Building 7, Block C, Dubai Design District (d3), Dubai, UAE