Privacy Policy
This policy explains what museum-journey.com collects, why, and how to have it removed. We collect only what is needed to answer you and to run a tour.
At a glance
- We never see your card details: payment happens on the payment provider's page.
- One cookie of our own, mj_lang, remembers your language. No advertising cookies and no cross-site tracking.
- We do not sell personal data and do not share it with advertising networks.
- Our visit counters are cookie-free and do not build a profile of you.
- Ask for a copy or a deletion by email; we answer within 30 days.
Effective from October 14, 2026
Who is responsible
Museum Journey operates this website and decides how the data below is used. For anything concerning personal data, write to the address at the end of this page.
What we collect
This is the full list — there is nothing beyond it.
| Where | What exactly | Why | How long |
|---|---|---|---|
| Enquiry form | First name, last name, email, phone, and your message; the art advisory form also asks for an address. | So we can reply and arrange details. | Until you ask us to delete it. |
| A booking | The tour, date, number of places, price, and your contact details. | To run the tour and keep a record of it. | While the record is needed; on request we delete it unless the law requires us to keep it. |
| Newsletter sign-up | Your email address and the language of the page you subscribed on. | To send the newsletter to people who asked for it. | Until you unsubscribe. |
| Visiting the site | Which page was viewed, the language, the referring source, and the date. | To see what people read. | Daily counters only — no profile of a person. |
| Admin sign-in | The email and name of an account on our administrator list. | To protect the site and show who is working in it. | While that address stays on the list. |
What we do not collect
- bank card details — payment runs on the provider's page;
- precise location;
- your browsing history on other sites;
- anything from your social accounts — the WhatsApp, Instagram, and YouTube links go to those services directly, and while you are on our site they receive nothing about you.
Cookies and analytics
We use one cookie of our own and one measurement script from our hosting provider.
| What | Who sets it | What it does | How long |
|---|---|---|---|
| mj_lang | This site | Remembers your language choice (RU or EN) so the next page opens in it. | 1 year |
| cloudflareinsights.com script | Cloudflare (our host) | Counts page views. It works without cookies and builds no profile of a visitor. | — |
There are no advertising cookies, no retargeting, and no cross-site tracking. You can change language at any time with the RU / EN buttons; the choice is kept for a year.
Our host may set technical cookies needed to keep the site safe from automated attacks. They are not used for advertising.
Your browser decides whether to accept cookies. Refuse them and the site still works — it simply will not remember your language.
How we use it
There is no automated decision-making and no profiling: a person reads an enquiry, not an algorithm. An IP address is used briefly to protect the forms and is not stored in our databases.
- answer your enquiry and arrange the details;
- confirm, run, and if needed move a tour;
- send the newsletter to the people who asked for it;
- see which parts of the site are read and which tours interest people;
- protect the site and the forms from automated submissions.
The services behind the site
Our providers process data on our behalf. Each does one part of the job and works under its own privacy terms. We do not sell or rent personal data.
| Provider | What it handles |
|---|---|
| Cloudflare | Hosting, protection, and delivery of the pages, plus cookie-free page counters. |
| Google Cloud Firestore | The site's database: tours, pages, enquiries, subscriptions, counters; administrator sign-in through Google. |
| GoDaddy Payments | The payment page for a tour. Card data goes only to them — it never reaches us. |
| WhatsApp, Instagram, YouTube | Nothing while you are on our site. They receive your data only when you contact them or follow the link. |
Transfers between countries
The site is operated from the United States, and our providers process data in data centres around the world. By using the site and sending an enquiry you send your information to the United States. We do not pass data to anyone beyond the providers listed above.
How long we keep it
Enquiries and correspondence are kept while they are needed as the record of our contact and bookings — delete on request. A newsletter subscription is kept until you unsubscribe. Visit counters are kept per day in aggregate form and are not linked to a person.
Your rights
We honour these requests for everyone, wherever you live. Write from the address you gave us — that is how we know whose data to find. We answer within 30 days and there is no fee. If you are in the EU or the UK you also have the right to complain to your data protection authority; in practice a note to us settles it.
- ask for a copy of what we hold about you;
- ask us to correct anything inaccurate;
- ask us to delete your data;
- unsubscribe from the newsletter at any time.
Security
The site is served over HTTPS. Database writes are possible only through a service credential, never from a visitor's browser. Access is limited to the administrators on our list and our technical providers. The console is closed: sign-in is through Google, and only confirmed addresses can reach the content.
Children
The site is not intended to collect a child's data without an adult involved. If you believe we hold data about a child, tell us and we will remove it.
Changes
A new version is published on this page and applies from the date shown at the top.
How to reach us
Write to the address at the end of this page. See also the Terms of Service for booking, prices, and refunds.
Questions and requests: museumjourney@gmail.com+1 201 759 5937 · Home