Privacy Policy - Muse-ocean

Last updated: November 2026

Introduction

Muse-ocean is committed to protecting your privacy and ensuring that your personal information is handled responsibly. This Privacy Policy explains how we collect, use, store, and protect information when you use our website and services.

By using our website or engaging with our services, you acknowledge that you have read and understood this Privacy Policy.

Information We Collect

Information You Provide

We collect information that you voluntarily provide when:

Submitting enquiry forms on our website
Booking experiences or programmes
Subscribing to newsletters or updates
Communicating with us via email
Providing feedback about our services

This information may include your name, email address, telephone number, postal address, and details about your interests and preferences.

Information Collected Automatically

When you visit our website, we automatically collect certain technical information including:

IP address and approximate geographic location
Browser type and version
Operating system
Pages visited and time spent on each page
Referring website addresses
Device information

How We Use Your Information

We use the information collected for the following purposes:

To respond to your enquiries and provide requested information
To process bookings and deliver our cultural heritage experiences
To send administrative communications regarding your bookings
To improve our website and services based on user behaviour
To send marketing communications where you have provided consent
To comply with legal obligations

Legal Basis for Processing

We process your personal information based on the following legal grounds:

Contract: Processing necessary to fulfil our contractual obligations when you book an experience
Consent: Where you have given explicit consent for specific processing activities
Legitimate interests: Processing necessary for our legitimate business interests, provided these do not override your rights
Legal obligation: Processing required to comply with applicable laws

Data Sharing

We do not sell, rent, or trade your personal information to third parties. We may share your information with:

Partner organisations involved in delivering experiences you have booked
Service providers who assist with website hosting, payment processing, and email delivery
Professional advisers and auditors where necessary
Law enforcement or regulatory bodies when required by law

All third parties with whom we share data are required to maintain appropriate security measures and process information only according to our instructions.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected. Specific retention periods include:

Booking records: 7 years for financial and legal compliance
Enquiry correspondence: 2 years from last contact
Marketing consent records: Until consent is withdrawn
Website analytics data: 26 months

Your Rights

Under data protection legislation, you have the following rights:

Access: Request a copy of the personal information we hold about you
Rectification: Request correction of inaccurate or incomplete information
Erasure: Request deletion of your personal information in certain circumstances
Restriction: Request limitation of processing in certain circumstances
Portability: Request transfer of your data to another organisation
Objection: Object to processing based on legitimate interests or for marketing purposes
Withdraw consent: Withdraw previously given consent at any time

To exercise any of these rights, please contact us using the details provided below.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission, secure server infrastructure, and restricted access to personal data.

International Transfers

Your personal information is primarily stored and processed within the United Kingdom and European Economic Area. Where data is transferred outside these regions, we ensure appropriate safeguards are in place.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The updated policy will be posted on this page with a revised date. We encourage you to review this policy regularly.

Contact Us

For questions about this Privacy Policy or to exercise your data protection rights, please contact:

Data Protection Officer
Muse-ocean
Heritage House
42 Meadowbank Lane
Cheltenham, GL50 2HN
United Kingdom

Email: [email protected]

Supervisory Authority

If you are not satisfied with our response to any privacy concern, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.