Last updated: 24 November 2020.
We are committed to protecting your personal information and being transparent about what information we hold about you. Museum in a Box offers a range of services, transactions and communications which requires the processing of your personal data.
Using personal information allows us to provide you with relevant and timely information about the work that we do and to develop a better understanding of our audiences. As a registered Community Interest Company, it also helps us to engage with potential donors and supporters.
We use your information in accordance with all applicable laws concerning the protection of personal information. This policy explains:
If you have any queries about this policy, please contact the Data Protection Officer at Museum in a Box, 2/4 Ash Lane Rustington, Littlehampton, West Sussex, United Kingdom, BN16 3BZ or email email@example.com.
Museum in a Box is an educational technology (edtech) community interest company based in London. Our mission is to put cultural education into hard to reach places. Our technology is simple to use and enables history, art and culture to travel anywhere in the world. We are working with a variety of museums to bring their objects to life, and a community of educators learning new digital skills to enrich their classroom experiences and improve student learning outcomes.
Our full company information is listed on Companies House:
Generally, we collect your information when you decide to interact with us. This could include buying a Box or collection, asking us for information over the phone or in person or it could be when you sign up to receive emails from us. We also look at how our users use our website, so that we can offer the best possible experience whether you’re buying a Box or just trying to find out more about what we are up to.
You directly provide Museum in a Box with most of the data we collect. We collect data and process data when you:
Museum in a Box may also receive your data indirectly from the following sources:
The personal data we collect about you varies depending on the service you request from us.
When you contact us, buy a Box, register your interest or sign up to our newsletter we may collect:
When you buy from our shop we will collect payment information from you such as credit or debit card details or bank information for the purposes of taking payment or setting up a direct debit through our third party providers.
All debit and credit card information is processed securely, and in accordance with the Payment Card Industry Data Security Standard (PCI-DSS).
Museum in a Box is the data controller for all data we collect and store. We collect personal information through a number of different inputs when you choose to interact with us, all of which are subject to strict data security processes to ensure your personal information is kept safe at all times.
In addition we use the following data processors to enable us to collect, process and securely store the data we obtain.
Any data processed on behalf of Museum in a Box is processed only to the extent required by them to perform the services that Museum in a Box requests. Any use for other purposes is strictly prohibited within a data sharing agreement between us and the provider. Furthermore, any data that is processed by third parties must be processed within the terms of this policy and in accordance with the United Kingdom Data Protection Act 2018 and General Data Protection Regulation 2018.
We use information in a number of ways, the main ways being:
Specifically we use your information in the following ways:
We don't sell your information.
We don't share the information that is provided to us except:
Museum in a Box is committed to ensuring your personal information is secure at all times. We store and process your personal data securely using suitable physical, electronic and operational procedures to safeguard and secure all personal information. We will ensure that any third parties we use for processing your personal data do the same. We limit internal access to your personal data to only those who require it, and provide all our staff with Data Protection and Information Security training. We ensure that high standards of security and protection are met by abiding by our Data Protection Policies and Procedures.
Museum in a Box may transfer your data to USA-based organisations such as TinyLetter (which we use to manage our email communications). The USA has weaker data protection laws than that of the EEA and we will ensure that we only use organisations who are a part of the EU privacy shield initiative to handle your personal information, therefore ensuring your data rights are maintained. More details on this certification can be found at www.privacyshield.gov/welcome.
We keep your personal information:
You should find it easy to access and amend the personal information that we hold on you, or request that we stop contacting you. It’s your data and we want to make sure you feel in control of it.
If you have an online account with us (if you have created an account on heart.museuminabox.org or through the shop), you can amend your personal details and email contact preferences at any time.
In addition, every email we send to you will include details on how to change your communications preferences or unsubscribe from future communications.
If you prefer, you can contact us by phoning, emailing, or writing using our contact details below.
You have a number of rights in relation to your personal data. These include the right to:
You have the right to request details of what information we hold about you. We will take steps to verify your identity before responding to your request and will then respond as soon as possible but no later than within a month. Please send a description of the information you would like to see, together with proof of your identity to firstname.lastname@example.org.
You have the right to get information held about you by us corrected. If you have any concerns about the accuracy of your personal data, please let us know using the contact details below.
At the end of your relationship with us, you can ask us to delete your personal data and we will do so as far as we are reasonably able and subject to our legal requirements to retain such data. You can also request that we provide you with written confirmation of the deletion of your personal data, which we will provide if we have deleted that data and can provide evidence of this.
You have the right to lodge a complaint with the supervisory authority, The Information Commissioner’s Office: www.ico.org.uk.
If you would like to exercise any of your rights outlined in this policy or have any concerns or questions about the way in which Museum in a Box handles your personal data, please contact us: Museum in a Box, Unit 9, Energy Centre, Bowling Green Walk, London N1 6AL United Kingdom. Email: email@example.com or call us at: 02077292753.
Our sites may contain links to other sites and resources provided by third parties. We have no control over the contents of those sites or resources.
If you use any third party sites or resources linked from a Museum in a Box site, their rules and policies will apply and you should always check these before you submit any personal data to them. We do not accept any responsibility or liability for these policies.
A cookie is a small text file that is downloaded onto your computer when you visit certain websites and allows a website to recognise a user's device.
Cookies are used on museuminabox.org and other Museum in a Box sites to enable some services to recognise your device so you don't have to give the same information several times during one task and to provide Museum in a Box with information to help improve the experience of using our websites.
We use a company to manage our website and they collect data from cookies. You can see what and how they use this data on their website: https://automattic.com/cookies.
Your web browser should allow you to restrict or delete cookies set by this Site. The Help function within your browser should tell you how. Alternatively, you can visit www.allaboutcookies.org which provides general information about cookies and how you can manage cookies on your computer.
Last updated: 26 November 2019.
Museum in a Box’s mission is to help museums increase access to their collections, and bring cultural education into hard-to-reach places. As a young student in Auckland once said, it’s “really fun because it’s like playing and learning combined.”
In order to make sure everyone enjoys playing and learning, we have a few guidelines for being in this place.
These Community Guidelines set out the rights and responsibilities of Museum in a Box (“we”, “us”, “our”) that manages this website (this “Site”) and in return we require people creating Collections and being part of the Museum in a Box network (“you”, “your”) to agree to your rights and responsibilities.
Our aim is to respect the rights of individuals and organisations who have provided content for this Site and to ensure that their content is used in accordance with their wishes. We also want to ensure that this Site is accessible and a safe environment for all users.
When you use this Site it is important that you make yourself aware of your rights and responsibilities set out in these Community Guidelines, as by using this Site you agree to abide by these Community Guidelines.
If you do not agree with these rights and responsibilities, please do not use this Site. If you have any queries over these Community Guidelines or your rights to view and use any content on this Site, please contact us.
We may revise and update these Community Guidelines at any time and will indicate when they were last revised under the main heading. Please periodically review this document, as your continued use of this Site indicates your agreement with any changes that we make.
In these Community Guidelines “Content” includes all text, images, photos, video, audio, 3D models, software and other material included on, or linked to, from this Site. Content is included on this Site via a number of routes.
Some Content is created by us, for example the Gods & Goddesses Collection or any Content posted by our team or volunteers as part of their role with us. Other Content has been provided to us by individuals and organisations as part of a membership, collaboration, commission or other activity in which we facilitated or supported.
In these Community Guidelines, "Contributors" are any individuals, organisations or corporations who provide Content to us that is included on this Site by whatever means. You are a contributor if you post Content to this Site via the Interactive Areas.
Most of the content you will find on the Museum in Box website, Heart (where our members’ network and create Collections) has been made in partnership with museums, artists, creative companies, schools, universities and passionate individuals. Some of it has been created by Museum in a Box HQ. All of the content is protected by copyright, except in the specific case where an asset has “no known copyright”.
There are various different types of copyright and it’s important you understand which applies so can avoid issues. There is lots of help and full descriptions online. We support full copyright, each of the Creative Commons licenses, and an assertion of “no known copyright” for each object in the system. It is your responsibility to upload assets under the correct license or assertion, and provide attribution correctly.
Before you are able to post Content in Your Collections, we ask you to create an account (name, valid email address) and to actively accept these Community Guidelines, including our Code of Conduct (detailed below). We ask you to do this as we want to make sure that you understand your particular responsibilities when posting Content to this Site.
We reserve the right at any time to restrict your access to the Collections area, however we will only generally do so where we believe that you have breached these Community Guidelines. We are under no obligation to reactivate your access once it has been blocked.
You alone are responsible for the content and accuracy of any Content that you post via Your Collections and the consequences of that posting. We will not be responsible or liable to any third party for any Content posted by you or anyone else on this Site.
You will ensure that the Content you post does not violate or infringe (a) the rights of any third party including copyright, trade mark, privacy, publicity or other personal or proprietary rights, or (b) our Code of Conduct below.
You must only post Content to this Site that you have created yourself or which you have permission to post. You confirm to us that:
We do not claim any ownership rights in the Content that you post. You retain full ownership of all the Content posted by you via Your Collections, including all copyright and other intellectual property rights.
By submitting content, you grant to us a royalty-free, perpetual, irrevocable, non-exclusive right and license to:
We are unable to guarantee that we will keep copies of your Content for any length of time. We may remove your Content from this Site and delete your Content from our systems at any time for any reason. You are responsible for making back-up copies of your Content that you post to this Site. We are not liable for any loss of or damage to your Content.Top
Last updated: 26 November 2019.
You are responsible for your activities on this Site and for any Content that you post on this Site. In return for being allowed to use Your Collections, you agree to comply with this code of conduct (“Code of Conduct”) which governs the way in which you may use Your Collections and interact with other users and post Content on this Site.
Our web platform (heart.museuminabox.org) is designed to be a welcoming space and to build a community of people using the Boxes, sharing stories and making museum items accessible to others across the globe. We provide a facility for people to share their experiences and opinions in a constructive and respectful way. You must respect the other participants in this community when posting Content. You are expected to conduct yourself in an appropriate way that encourages inclusion and cooperation.
In particular you agree that:
You will not post Content that in our opinion:
When using Your Collections or any services available through this Site, you will not:
The prohibited actions described in the Code of Conduct will be a material breach of these Community Guidelines. We reserve the right to delete from this Site any Content that violates these Community Guidelines. We may also block your access to this Site.
We may disclose your name and contact details where we are required to do so under a subpoena or court order, or following any other request (including criminal and civil matters) if we believe that the response is required by law or is reasonably necessary to protect the values and objectives of this Site or other users.
We may also disclose your name and contact details to any third party who is claiming that any Content posted by you constitutes a violation of their intellectual property rights, or of their right to privacy, although we will try to notify you first before doing this by using the contact details you have provided.
You will reimburse Museum in a Box for any losses, expenses or liabilities we and they incur as a result of you failing to comply with the Code of Conduct.
We will monitor, moderate and remove any Content we deem to violate our Code of Conduct or Community Guidelines. We will delete any and all Content that in our discretion violates our Community Guidelines and Code of Conduct.
If you believe that any Content on this Site infringes any intellectual property rights of yours or any third party, or is otherwise contrary to the Code of Conduct, you may send a written notification of that alleged unlawful Content ("Unlawful Content") to us. When doing so you must:
You will reimburse us for any costs, claims, expenses, losses or other liabilities we may incur as a result of you misrepresenting content as Unlawful Content.
We reserve the right to remove or disable access to any Unlawful Content. We reserve the right to block the access to this Site of any person found to have posted Unlawful Content.
Except for Content that is posted by members in Your Collections and except for other Content that we post on this Site and credit as being owned by a third party, all the Content on this Site and all intellectual property rights (including copyright, trademarks and database rights) arising in that Content and this Site generally are owned by us or our licensors. All such rights are reserved.
"Museum in a Box" and other marks used on this Site are our trade marks and may not be used without our prior written permission. You may not use any meta tags or any other hidden text using our names or trade marks without our prior written permission.
We may provide links to third party web sites.
The linked sites are not under our control, and we make no representations as to the quality, suitability, functionality or legality of the sites to which we may provide links. We accept no responsibility for these sites or for any loss or damage that may arise from your use of them.
You must not misuse this Site by knowingly introducing viruses, Trojans, worms, logic bombs or other material which is malicious or technologically harmful. You must not attempt to gain unauthorised access to this Site, the servers on which this Site is hosted or any server, computer or database connected to this Site. You must not attack this Site via a denial-of-service attack or a distributed denial-of-service attack.
We will not be liable for any loss or damage caused by a distributed denial-of-service attack, viruses or other technologically harmful material that may infect your computer equipment, computer programs, data or other proprietary material due to your use of this Site or to your downloading of any material posted on it, or on any website linked to it.
Content, commentary, contributions and any other materials posted on this Site are not intended to amount to advice on which reliance should be placed. These are the personal opinions of the individuals who post such materials and are not necessarily our views or the views of Museum in a Box.
Therefore, we disclaim all liability and responsibility arising from any reliance placed on those materials by you or any user or visitor to this Site or any third party or by anyone who may be informed of any that material. We do not verify the accuracy or completeness of any Content, content, commentary, contributions or any other materials posted on this Site.
You understand and agree that any material, software and/or data downloaded or otherwise obtained through the use of this Site is at your own discretion and risk and that you will be solely responsible for any damage to your own computer system or loss of data that results from the download of such material, software and/or data. We are not responsible for any damage caused by the downloading of any material, software and/or data from this Site.
Mention of third party products, services, companies and websites on the Site is for information purposes only and constitutes neither an endorsement nor a recommendation.
You expressly agree that use of this Site is at your sole risk.
We provide no assurances that the Content on this Site is capable of being used by you in the manner envisaged by these Community Guidelines. We also provide no assurances that the use by you of the Content will not infringe third party rights, such as copyright.
We make no warranty that this Site will be uninterrupted, secure or error free. We will not be liable if for any reason this Site is unavailable at any time or for any period. From time to time we may suspend or restrict access to this Site in order to carry out repairs, maintenance or to introduce new facilities.
While we have taken care in preparing the contents of this Site, we shall not be liable for any loss or damage arising out of or in connection with your use of this Site. Nothing in these Community Guidelines shall operate to limit or exclude our liability for death or personal injury caused by our negligence or for fraud (including, but not limited to, fraudulent misrepresentation) or for that which cannot lawfully be excluded. Your statutory rights are not affected.
If you have any questions about these Terms please contact us at:
Museum in a Box
Unit 9, Energy Centre
Bowling Green Walk
London N1 6AL
… or email firstname.lastname@example.org.