Privacy Policy

Museu provides event memory services, including photo booths, video and audio guestbooks, QR guest uploads and personalised items. Museu Ltd is the controller of the personal information collected through this website, which means we decide how and why it is used.

• Legal entity: Museu Ltd, a company registered in England and Wales (company number 17448714), trading as Museu
• Correspondence address: 82A James Carter Road, Mildenhall, Suffolk IP28 7DE, United Kingdom
• Email: hello@museu.co.uk

Enquiries. When you use our contact form we collect your name, email address, telephone or WhatsApp number (if given), preferred contact method and time, the type of enquiry and event, event date, venue or location, approximate guest count and your message.

Client accounts. If Museu gives you access to the client portal we hold your name, email address, sign-in details (your password is stored by our authentication provider in a protected, non-readable form), which event or events you are assigned to and whether your access is active or has an end date.

Event files. Photographs, videos, audio recordings and related file information (such as file name, type, size and upload date) provided by Museu or by an event client for an event.

Guest uploads. If you upload through an event's QR guest-upload page we collect the photographs and videos you choose, your name and message if you add them, any photo mission you select, your confirmation that you took the files or have permission to share them, the upload time, and file details (name, type and size).

Security and technical information. To keep the service working and prevent abuse we process:

• sign-in session information for clients and administrators;
• on the guest-upload page, a random session identifier held in your browser tab, and a keyed, scrambled (hashed) form of your connection's network (IP) address, used to count uploads per connection for rate limiting. Because the same connection always produces the same scrambled value while the key is unchanged, this is still personal information and is not anonymous;
• records of administrator moderation actions (such as approve, reject or delete) on guest uploads;
• technical logs kept by our hosting and database providers, which may include IP addresses, browser details and request times.

• Responding to enquiries and preparing quotes — steps you ask us to take before entering into a contract; where the enquirer is a business, our legitimate interests in responding to business enquiries.
• Arranging and delivering booked services — performance of our contract with the client.
• Operating client accounts and private event galleries — performance of our contract with the client.
• Receiving, reviewing and moderating guest uploads, and providing approved content to the event client — our legitimate interests, and those of the event client, in collecting and delivering the event's memories as part of the service the client has booked.
• Sending essential service emails (for example, enquiry notifications to Museu and sign-in or password emails) — contract, or steps before a contract.
• Protecting the service (rate limiting, security logs, preventing misuse) — our legitimate interests in keeping the service safe and available, using the minimum information needed.
• Keeping records we are required to keep — legal obligation, where one genuinely applies.

We do not use consent as the lawful basis for any of these purposes, and we do not send marketing emails from the contact form.

The guest-upload checkbox. Before uploading, guests tick a box confirming: “I took these, or I have permission to share them.” This is a confirmation that you are entitled to share the files. It is not consent to this policy, not a transfer of copyright and not agreement to marketing.

We do not sell personal information. We share it only as follows:

• The event client. Guest uploads that Museu approves and publishes become visible to the client or clients assigned to that event through their private portal. Unapproved, unpublished or rejected uploads are not shared with the client, and other guests cannot see your uploads.
• Lovable — hosts and runs this website, and sends our service emails (such as enquiry notifications) from notify.museu.co.uk.
• Supabase — provides our database, file storage and client sign-in.
• Cloudflare — the website runs on Cloudflare's network via our hosting provider. If we later enable Cloudflare Turnstile on the guest-upload page, Cloudflare will also process information to check that uploads come from a real person.
• Professional advisers, insurers or authorities where required by law or to establish or defend legal claims.

Some of our service providers may process information outside the UK. Where this happens we will rely on an approved safeguard, such as UK adequacy regulations or the UK International Data Transfer Agreement or Addendum. You can ask us for more information about these safeguards.

Some of the deletion described below is currently carried out manually by Museu rather than automatically. We carry it out within the periods stated.

• Enquiries that do not lead to a booking. Kept for up to 12 months after our last meaningful contact, then deleted unless needed for a legal dispute.
• Client accounts. Kept while needed to provide active event access. After all event access has ended, accounts are deleted or anonymised within 90 days, unless records must be kept for legal, tax or dispute purposes.
• Portal event files. Kept during the client-access period for the event and scheduled for deletion within 30 days after access ends, unless a different written arrangement exists or we are legally required to keep them.
• Guest-upload windows. Each event's upload link can have an opening and closing time set by Museu. Uploads are refused outside that window or when the link is switched off.
• Pending guest uploads. Uploads that have not been reviewed are deleted 30 days after the event's guest-upload period closes.
• Rejected guest uploads. The file and the guest's details (name, message and file name) are removed immediately. A minimal moderation record is removed after 30 days.
• Approved guest uploads. The source file and moderation details are kept only while needed to transfer, moderate and provide the event content, then deleted with the associated event records.
• Rate-limit and abuse-prevention records. Normally removed after approximately two hours.
• Download links. Preview and download links issued to clients expire after 5 minutes; links used by Museu to preview guest uploads expire after 30 seconds.
• Email, hosting and security logs held by our service providers. Kept according to each provider's documented retention periods.
• Legal, tax and regulatory records. Records needed for tax, accounting, legal claims or regulatory compliance may be kept for the applicable legal period.
• Booking and financial records. This website does not take payments or store booking or financial records. Any such records are handled separately under your booking agreement.

We will not delete information where a legal obligation or an active dispute requires us to keep it.

Under UK data protection law you have the right to access your information, to have it corrected, erased or restricted, to object to our use of it (including use based on legitimate interests), and, where applicable, to data portability. Where we rely on consent you can withdraw it at any time.

These rights are not absolute. We may be unable to fully meet a request where we need to keep information for a legal obligation, to establish or defend legal claims, or where it would affect the rights of others (for example, another person in the same photograph or an event client's collection).

To make a request, or to ask for a guest upload to be removed, email hello@museu.co.uk with the event name and a description of the upload.

You can complain to the Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the chance to resolve your concern first.

This website is not designed for children. Event photographs, videos and recordings may include children where these are provided by an authorised adult or the event client. Guests should only upload images of identifiable people, particularly children, where they have appropriate permission.

We use reasonable technical and organisational measures to protect personal information, including private file storage, access limited to each event's assigned clients, short-lived download links and review of guest uploads before they are shared. No online service can be completely secure, so we cannot guarantee absolute security.

See our Cookie Policy for the small amount of browser storage this website uses.

We may update this policy from time to time. The date at the top shows when it was last changed.