Privacy & Terms

Privacy Policy

Last updated: 24 November 2020.

Purpose of this policy

We are committed to protecting your personal information and being transparent about what information we hold about you. Museum in a Box offers a range of services, transactions and communications which requires the processing of your personal data.

Using personal information allows us to provide you with relevant and timely information about the work that we do and to develop a better understanding of our audiences. As a registered Community Interest Company, it also helps us to engage with potential donors and supporters.

We use your information in accordance with all applicable laws concerning the protection of personal information. This policy explains:

If you have any queries about this policy, please contact the Data Protection Officer at Museum in a Box, 2/4 Ash Lane Rustington, Littlehampton, West Sussex, United Kingdom, BN16 3BZ or email

Who We Are

Museum in a Box is an educational technology (edtech) community interest company based in London. Our mission is to put cultural education into hard to reach places. Our technology is simple to use and enables history, art and culture to travel anywhere in the world. We are working with a variety of museums to bring their objects to life, and a community of educators learning new digital skills to enrich their classroom experiences and improve student learning outcomes.

Our full company information is listed on Companies House:

Privacy Policy contents

  1. Amendments
  2. When do we collect information
  3. What information we collect
  4. Data control
  5. Why we collect your personal information and how we use it
  6. Who do we share your information with
  7. How we protect your information
  8. Your rights and how to contact us
  9. Third party links
  10. Our websites
  11. Cookies
  12. Amendments to this Privacy Policy

    We may revise and update this Privacy Policy at any time and will indicate at the top of this page when this Privacy Policy was last revised.

    Please periodically review the Privacy Policy, as your continued use of our Sites and/or other Museum in a Box services indicates your agreement with any changes that we make.

    When do we collect information from you?

    Generally, we collect your information when you decide to interact with us. This could include buying a Box or collection, asking us for information over the phone or in person or it could be when you sign up to receive emails from us. We also look at how our users use our website, so that we can offer the best possible experience whether you’re buying a Box or just trying to find out more about what we are up to.

    You directly provide Museum in a Box with most of the data we collect. We collect data and process data when you:

    Museum in a Box may also receive your data indirectly from the following sources:

    What information do we collect about you?

    The personal data we collect about you varies depending on the service you request from us.

    When you contact us, buy a Box, register your interest or sign up to our newsletter we may collect:

    Payment details

    When you buy from our shop we will collect payment information from you such as credit or debit card details or bank information for the purposes of taking payment or setting up a direct debit through our third party providers.

    All debit and credit card information is processed securely, and in accordance with the Payment Card Industry Data Security Standard (PCI-DSS).

    Data control

    Museum in a Box is the data controller for all data we collect and store. We collect personal information through a number of different inputs when you choose to interact with us, all of which are subject to strict data security processes to ensure your personal information is kept safe at all times.

    In addition we use the following data processors to enable us to collect, process and securely store the data we obtain.

    Any data processed on behalf of Museum in a Box is processed only to the extent required by them to perform the services that Museum in a Box requests. Any use for other purposes is strictly prohibited within a data sharing agreement between us and the provider. Furthermore, any data that is processed by third parties must be processed within the terms of this policy and in accordance with the United Kingdom Data Protection Act 2018 and General Data Protection Regulation 2018.

    We also use other web services where your data is primarily subject to their privacy policy, where those services then share your data with with us (if you have not opted out to them doing so) at which point it is process in accordance to Museum in a Box’s privacy policy.

    Why we collect your personal information and how we use it

    We use information in a number of ways, the main ways being:

    Specifically we use your information in the following ways:

    1. To carry out our business and to provide a service or carry out a contract with you:
      • Fulfilling purchases or order from our online shop (including confirmation of your purchase by email and/or letter).
      • Processing payments (Please note we do not store any Credit Card or other payment information once the transaction has been completed).
      • Providing the best possible customer services and to help us with our internal administration.
      • Contacting you with important information relating to your purchase or enquiry, such as confirming your order, letting you know about updates to product, service or company details.
    2. Where we have your consent:
      • Sending you updates via email about what’s on, news or about supporting us.
      • Emailing you about a specific area you’ve requested to hear more about such as our commissions or other projects.
    3. Where we have justifiable reason (including legal obligation and legitimate interest):
      • Analysing your purchase history in order to learn about your interests and preferences to help us target our marketing communications so that they’re more relevant to you.
      • Sending you occasional mail informing you of important news and how you can support Museum in a Box.
      • Classifying our audience into groups or segments, using purchase and publicly available information. These segments help us to understand our audience better and ensure we’re sending relevant messages to each group.
      • Measuring and understanding how our subscribers respond to a variety of marketing activities so we can ensure relevance.
      • Contacting you to ask you to participate in audience research. You are under no obligation to participate in research and, should you provide any further information, Museum in a Box will inform you how any further information will be used. All information gathered for research purposes is anonymised and aggregated for analysis.
      • Analysing and continually improving the services we offer, including our website and our online shop.
      • Keeping our database accurate and relevant, for example, using National Change of Address.
      • Informing you of any changes related to your purchases.
      • Undertaking due diligence to detect and reduce fraud and credit risk.
      • Analysing the way in which our website is used and the content and links that you interact with, in order to improve our website services.
      • Analysing the way in which our emails to you are received by you, and the content and links that you interact with, in order to improve our communications with you.
      • Helping diagnose issues with, and management of, the website, to audit the geographical make-up of users, and to establish how you have arrived at the website (this is through your public IP address which is a unique number which allows a computer, group of computers or other internet connected device to browse the internet. The log file records the time and date of your visit, the pages that were requested, the referring website (if provided) and your internet browser version).

    Who do we share your information with?

    We don't sell your information.

    We don't share the information that is provided to us except:

    How do we protect your information?

    Museum in a Box is committed to ensuring your personal information is secure at all times. We store and process your personal data securely using suitable physical, electronic and operational procedures to safeguard and secure all personal information. We will ensure that any third parties we use for processing your personal data do the same. We limit internal access to your personal data to only those who require it, and provide all our staff with Data Protection and Information Security training. We ensure that high standards of security and protection are met by abiding by our Data Protection Policies and Procedures.

    Museum in a Box may transfer your data to USA-based organisations such as TinyLetter (which we use to manage our email communications). The USA has weaker data protection laws than that of the EEA and we will ensure that we only use organisations who are a part of the EU privacy shield initiative to handle your personal information, therefore ensuring your data rights are maintained. More details on this certification can be found at

    We keep your personal information:

    Your rights and how to contact us

    You should find it easy to access and amend the personal information that we hold on you, or request that we stop contacting you. It’s your data and we want to make sure you feel in control of it.

    If you have an online account with us (if you have created an account on or through the shop), you can amend your personal details and email contact preferences at any time.

    In addition, every email we send to you will include details on how to change your communications preferences or unsubscribe from future communications.

    If you prefer, you can contact us by phoning, emailing, or writing using our contact details below.

    You have a number of rights in relation to your personal data. These include the right to:

    You have the right to request details of what information we hold about you. We will take steps to verify your identity before responding to your request and will then respond as soon as possible but no later than within a month. Please send a description of the information you would like to see, together with proof of your identity to

    You have the right to get information held about you by us corrected. If you have any concerns about the accuracy of your personal data, please let us know using the contact details below.

    At the end of your relationship with us, you can ask us to delete your personal data and we will do so as far as we are reasonably able and subject to our legal requirements to retain such data. You can also request that we provide you with written confirmation of the deletion of your personal data, which we will provide if we have deleted that data and can provide evidence of this.

    You have the right to lodge a complaint with the supervisory authority, The Information Commissioner’s Office:

    If you would like to exercise any of your rights outlined in this policy or have any concerns or questions about the way in which Museum in a Box handles your personal data, please contact us: Museum in a Box, Unit 9, Energy Centre, Bowling Green Walk, London N1 6AL United Kingdom. Email: or call us at: 02077292753.

    Third party links

    Our sites may contain links to other sites and resources provided by third parties. We have no control over the contents of those sites or resources.

    If you use any third party sites or resources linked from a Museum in a Box site, their rules and policies will apply and you should always check these before you submit any personal data to them. We do not accept any responsibility or liability for these policies.

    This privacy policy applies solely to information collected by Museum in a Box.

    Our websites

    The websites that this Privacy Policy applies to are:

    Cookies Information

    A cookie is a small text file that is downloaded onto your computer when you visit certain websites and allows a website to recognise a user's device.

    Cookies are used on and other Museum in a Box sites to enable some services to recognise your device so you don't have to give the same information several times during one task and to provide Museum in a Box with information to help improve the experience of using our websites.

    We use a company to manage our website and they collect data from cookies. You can see what and how they use this data on their website:

    Third party cookies

    On some of our sites we may embed content from third parties such as YouTube, Facebook and Twitter. These sites may deliver their own cookies. We do not have any control over these third party cookies and you should visit their websites to find out more about their use of cookies.

    How do I restrict or delete cookies?

    Your web browser should allow you to restrict or delete cookies set by this Site. The Help function within your browser should tell you how. Alternatively, you can visit which provides general information about cookies and how you can manage cookies on your computer.



    Museum in a Box Community Guidelines

    Last updated: 26 November 2019.

    Museum in a Box’s mission is to help museums increase access to their collections, and bring cultural education into hard-to-reach places. As a young student in Auckland once said, it’s “really fun because it’s like playing and learning combined.”

    In order to make sure everyone enjoys playing and learning, we have a few guidelines for being in this place.

    Rights and responsibilities

    These Community Guidelines set out the rights and responsibilities of Museum in a Box (“we”, “us”, “our”) that manages this website (this “Site”) and in return we require people creating Collections and being part of the Museum in a Box network (“you”, “your”) to agree to your rights and responsibilities.

    Our aim is to respect the rights of individuals and organisations who have provided content for this Site and to ensure that their content is used in accordance with their wishes. We also want to ensure that this Site is accessible and a safe environment for all users.

    When you use this Site it is important that you make yourself aware of your rights and responsibilities set out in these Community Guidelines, as by using this Site you agree to abide by these Community Guidelines.

    If you do not agree with these rights and responsibilities, please do not use this Site. If you have any queries over these Community Guidelines or your rights to view and use any content on this Site, please contact us.


    We may revise and update these Community Guidelines at any time and will indicate when they were last revised under the main heading. Please periodically review this document, as your continued use of this Site indicates your agreement with any changes that we make.

    Contributing content to this Site

    In these Community Guidelines “Content” includes all text, images, photos, video, audio, 3D models, software and other material included on, or linked to, from this Site. Content is included on this Site via a number of routes.

    Some Content is created by us, for example the Gods & Goddesses Collection or any Content posted by our team or volunteers as part of their role with us. Other Content has been provided to us by individuals and organisations as part of a membership, collaboration, commission or other activity in which we facilitated or supported.

    In these Community Guidelines, "Contributors" are any individuals, organisations or corporations who provide Content to us that is included on this Site by whatever means. You are a contributor if you post Content to this Site via the Interactive Areas.

    Your commitments when using Content on this Site


    Most of the content you will find on the Museum in Box website, Heart (where our members’ network and create Collections) has been made in partnership with museums, artists, creative companies, schools, universities and passionate individuals. Some of it has been created by Museum in a Box HQ. All of the content is protected by copyright, except in the specific case where an asset has “no known copyright”.

    There are various different types of copyright and it’s important you understand which applies so can avoid issues. There is lots of help and full descriptions online. We support full copyright, each of the Creative Commons licenses, and an assertion of “no known copyright” for each object in the system. It is your responsibility to upload assets under the correct license or assertion, and provide attribution correctly.

    Providing your details before you post content

    Before you are able to post Content in Your Collections, we ask you to create an account (name, valid email address) and to actively accept these Community Guidelines, including our Code of Conduct (detailed below). We ask you to do this as we want to make sure that you understand your particular responsibilities when posting Content to this Site.

    The personal information you provide will only be used in accordance with our Privacy Policy (see above).

    We reserve the right at any time to restrict your access to the Collections area, however we will only generally do so where we believe that you have breached these Community Guidelines. We are under no obligation to reactivate your access once it has been blocked.

    The Content you post via Collections

    You alone are responsible for the content and accuracy of any Content that you post via Your Collections and the consequences of that posting. We will not be responsible or liable to any third party for any Content posted by you or anyone else on this Site.

    You will ensure that the Content you post does not violate or infringe (a) the rights of any third party including copyright, trade mark, privacy, publicity or other personal or proprietary rights, or (b) our Code of Conduct below.

    You must only post Content to this Site that you have created yourself or which you have permission to post. You confirm to us that:

    We do not claim any ownership rights in the Content that you post. You retain full ownership of all the Content posted by you via Your Collections, including all copyright and other intellectual property rights.

    By submitting content, you grant to us a royalty-free, perpetual, irrevocable, non-exclusive right and license to:

    You must keep your own copy of your Content

    We are unable to guarantee that we will keep copies of your Content for any length of time. We may remove your Content from this Site and delete your Content from our systems at any time for any reason. You are responsible for making back-up copies of your Content that you post to this Site. We are not liable for any loss of or damage to your Content.


    Code of Conduct

    Last updated: 26 November 2019.

    You are responsible for your activities on this Site and for any Content that you post on this Site. In return for being allowed to use Your Collections, you agree to comply with this code of conduct (“Code of Conduct”) which governs the way in which you may use Your Collections and interact with other users and post Content on this Site.

    Our web platform ( is designed to be a welcoming space and to build a community of people using the Boxes, sharing stories and making museum items accessible to others across the globe. We provide a facility for people to share their experiences and opinions in a constructive and respectful way. You must respect the other participants in this community when posting Content. You are expected to conduct yourself in an appropriate way that encourages inclusion and cooperation.

    In particular you agree that:

    You will not post Content that in our opinion:

    When using Your Collections or any services available through this Site, you will not:

    The prohibited actions described in the Code of Conduct will be a material breach of these Community Guidelines. We reserve the right to delete from this Site any Content that violates these Community Guidelines. We may also block your access to this Site.

    We may disclose your name and contact details where we are required to do so under a subpoena or court order, or following any other request (including criminal and civil matters) if we believe that the response is required by law or is reasonably necessary to protect the values and objectives of this Site or other users.

    We may also disclose your name and contact details to any third party who is claiming that any Content posted by you constitutes a violation of their intellectual property rights, or of their right to privacy, although we will try to notify you first before doing this by using the contact details you have provided.

    You will reimburse Museum in a Box for any losses, expenses or liabilities we and they incur as a result of you failing to comply with the Code of Conduct.

    We will monitor, moderate and remove any Content we deem to violate our Code of Conduct or Community Guidelines. We will delete any and all Content that in our discretion violates our Community Guidelines and Code of Conduct.

    Abuse Notifications

    If you believe that any Content on this Site infringes any intellectual property rights of yours or any third party, or is otherwise contrary to the Code of Conduct, you may send a written notification of that alleged unlawful Content ("Unlawful Content") to us. When doing so you must:

    You will reimburse us for any costs, claims, expenses, losses or other liabilities we may incur as a result of you misrepresenting content as Unlawful Content.

    We reserve the right to remove or disable access to any Unlawful Content. We reserve the right to block the access to this Site of any person found to have posted Unlawful Content.


    We are committed to ensuring that your personal information is used properly and is kept securely in accordance with our Privacy Policy (see above).

    Our Intellectual Property

    Except for Content that is posted by members in Your Collections and except for other Content that we post on this Site and credit as being owned by a third party, all the Content on this Site and all intellectual property rights (including copyright, trademarks and database rights) arising in that Content and this Site generally are owned by us or our licensors. All such rights are reserved.

    "Museum in a Box" and other marks used on this Site are our trade marks and may not be used without our prior written permission. You may not use any meta tags or any other hidden text using our names or trade marks without our prior written permission.

    Links from this Site

    We may provide links to third party web sites.

    The linked sites are not under our control, and we make no representations as to the quality, suitability, functionality or legality of the sites to which we may provide links. We accept no responsibility for these sites or for any loss or damage that may arise from your use of them.

    Viruses, hacking and other offences

    You must not misuse this Site by knowingly introducing viruses, Trojans, worms, logic bombs or other material which is malicious or technologically harmful. You must not attempt to gain unauthorised access to this Site, the servers on which this Site is hosted or any server, computer or database connected to this Site. You must not attack this Site via a denial-of-service attack or a distributed denial-of-service attack.

    We will not be liable for any loss or damage caused by a distributed denial-of-service attack, viruses or other technologically harmful material that may infect your computer equipment, computer programs, data or other proprietary material due to your use of this Site or to your downloading of any material posted on it, or on any website linked to it.

    Legal disclaimer

    Content, commentary, contributions and any other materials posted on this Site are not intended to amount to advice on which reliance should be placed. These are the personal opinions of the individuals who post such materials and are not necessarily our views or the views of Museum in a Box.

    Therefore, we disclaim all liability and responsibility arising from any reliance placed on those materials by you or any user or visitor to this Site or any third party or by anyone who may be informed of any that material. We do not verify the accuracy or completeness of any Content, content, commentary, contributions or any other materials posted on this Site.

    You understand and agree that any material, software and/or data downloaded or otherwise obtained through the use of this Site is at your own discretion and risk and that you will be solely responsible for any damage to your own computer system or loss of data that results from the download of such material, software and/or data. We are not responsible for any damage caused by the downloading of any material, software and/or data from this Site.

    Mention of third party products, services, companies and websites on the Site is for information purposes only and constitutes neither an endorsement nor a recommendation.

    Disclaimer of Warranties

    You expressly agree that use of this Site is at your sole risk.

    We provide no assurances that the Content on this Site is capable of being used by you in the manner envisaged by these Community Guidelines. We also provide no assurances that the use by you of the Content will not infringe third party rights, such as copyright.

    We make no warranty that this Site will be uninterrupted, secure or error free. We will not be liable if for any reason this Site is unavailable at any time or for any period. From time to time we may suspend or restrict access to this Site in order to carry out repairs, maintenance or to introduce new facilities.

    Limitation of Liability

    While we have taken care in preparing the contents of this Site, we shall not be liable for any loss or damage arising out of or in connection with your use of this Site. Nothing in these Community Guidelines shall operate to limit or exclude our liability for death or personal injury caused by our negligence or for fraud (including, but not limited to, fraudulent misrepresentation) or for that which cannot lawfully be excluded. Your statutory rights are not affected.

    Contact Us

    If you have any questions about these Terms please contact us at:

    Museum in a Box
    Unit 9, Energy Centre
    Bowling Green Walk
    London N1 6AL
    United Kingdom

    … or email