1. About Natural History Museum Abu Dhabi

Natural History Museum Abu Dhabi will take visitors on a 13.8-billion-year journey through the story of our universe and our planet, offering a view into the origins and complexity of life as we know it. Igniting a lifelong passion for the natural world, visitors will leave with a thought-provoking perspective into a sustainable future for our planet, empowering a new generation of advocates to help shape the next chapter of Earth's story.

2. About the Privacy Notice

This Privacy Notice complies with UAE PDPL. It outlines the legal basis for processing, user rights, and data protection practices. This Privacy Notice applies to information we collect about:

Visitors to our digital channels (e.g., website, apps, social media channels).
People who choose to receive our marketing-related communications.

The notice provides information on how we use any personal information we collect about anyone interacting with us through online platforms. It explains their individual rights to access, correct, and manage the information we hold about them, including privacy preferences and cookie settings. Additionally, it outlines how to contact us for queries or complaints about our use of personal information or how to opt out from non-transactional communication.

3. Processing of Personal Information

Each processing activity is based on a lawful basis such as consent, legitimate interest, legal obligation, or contract. When requesting your personal information, we will clearly explain the purpose for which it is needed and how it will be used. We will also guide you to our relevant Privacy Notice for further details. Safeguarding your data is a top priority for us, and we take great care in storing this data.

4. When Do We Collect Personal Information

Personal information is collected directly from you when you interact with us and allow us to do so.

For instance, we gather your information when you perform the following actions with us:

Sign up to Natural History Museum Abu Dhabi’s services or activities, including but not limited to creating a website profile or signing up to marketing-related communications.
Send or receive an email from us.
Make an inquiry.
Visit our website or other platforms.
Apply for a role with us.
Provide us with your feedback.
Contact us via our customer contact center.

Information may be collected through our website, social media channels, or from any form of communication established with us.

5. What We Collect and How We Collect It

The personal information we collect may include the following but not limited to:

Full Name
Email Address

Cookie Usage: Our website does not use cookies to collect personal data. We only use cookies that are strictly necessary for the basic functionality of the website. The information that we may collect about you broadly falls into the following categories:

5.1. How We Use Your Information

General Visit Information

The General Visit Information is used to help us better understand how our customers behave. We do this by generating reports based on such aggregated data. We may also aggregate and combine your General Visit Information with the General Visit Information of many people across our network.

We use the reports for a variety of purposes, such as to:

Improve customer experience and service;
Improve operation of our facilities;
Determine timing for promotions and sales;
Measure the effects of advertising and marketing;
Plan and execute marketing and advertising campaigns;
Set staffing levels;
Set store hours; and
Other business and operational purposes, such as financial and product planning and execution.

Please note, once you are registered with our services, your General Visit Information is combined with your Registration Information and Activity Information as set forth in the “Registration Information and Activity Information” section below. This information helps us improve your experience if you opt in to receive promotional communications, by allowing us to send you personalized communications based on your visits. Such data may also be combined with Third Party Data and used for research and analytics and/or to help serve advertising. We do not combine Registration Information and Activity Information with General Visit Information previously collected from your mobile device.

Registration Information and Activity Information

As noted above, once you register with our services, we may combine and associate your Registration Information and Activity Information with your General Visit Information. All such information may be used by us for the following purposes:

So that we may provide you with more personalized advertising, offers, experiences, and features;
Providing advertising we or they believe is more relevant and tailored to your interests;
Contacting you with special offers and incentives, where this is in accordance with your marketing preferences;
Analytics and market research purposes, such as understanding the shopping preference of you and large groups of people (for example, helping our partners understand which people like to go to a restaurant for dinner after seeing a movie);
Fulfilling your requests;
Other business and operational purposes, such as financial and product planning and execution.

Other Uses

Help us internally operate and maintain our services (such as fixing malfunctions, testing our security systems, etc.).
Enhance, improve, and further develop the services (such as creating new features or functions, refining the user experience, increasing the technical performance of our services, etc.).
Provide you with notices related to your use of the service (such as account notifications and legal notices).

We may also use your provided personal information to contact you regarding products, services, and offers when you opt in to receive them. You can opt out from receiving promotional communications from us at any time, as described in the “How You Can Opt-Out” section below.

5.2. How We Use Cookies and Similar Technology

We may use cookies and similar tracking technology (collectively “Cookies”) to collect and use Activity Information about you (including to serve interest based advertising). For further information about the types of Cookies we use, why, and how you can control Cookies, please see our Cookie Notice.

5.3. Disclosure of Your Personal Information

Except as described in this Policy, we will not disclose your Personal Information to third parties without your consent. We may disclose Personal Information to third parties in the following circumstances:

To Service Providers: We may disclose Personal Information to third-party service providers (e.g., payment processing, data storage and processing facilities) that host our servers and databases and that provide other services to us. We limit the Personal Information provided to these service providers to that which is necessary for them to perform their functions, and we require them to agree to maintain technical and organizational measures necessary to ensure adequate protection and confidentiality of such Personal Information. We ensure, for example by contractual regulations, that these service providers process personal data in accordance with European data protection law to guarantee a high data protection level, even if personal data are transferred into a country with a different data protection level and for which no adequacy decision of the Commission of the EU exists.
Upon Transfer of the Business: Information about users, including Personal Information, may be disclosed and otherwise transferred to an acquirer, successor, or assignee as part of any merger, acquisition, debt financing, sale of our company assets, or similar transaction, as well as in the event of an insolvency, bankruptcy, or receivership in which Personal Information is transferred to one or more third parties as one of our business assets.
To Affiliated Companies: We may disclose Personal Information and other information to our parent company and other corporate affiliates. These affiliated third-party companies may use and disclose Personal Information and other information that we disclose to them in accordance with their privacy policies and procedures.
To Protect Our Interests: We also may disclose Personal Information and other information if we believe that doing so is legally required or is in our interest to protect our property or other legal rights (including, but not limited to, enforcement of agreements) or the rights or property of others, or to otherwise help protect the safety or security of the Services or other users of the guest Wi-Fi services.

5.4. Promotional Communications Opt-Out

We offer you choices regarding the receipt of promotional communications when you access the guest Wi-Fi services. If you receive promotional communications from us or from our customers, you may unsubscribe at any time by contacting us using the contact details provided under the “Contacting Us” heading below.

Once we receive your opt-out request, you will no longer receive communications for direct marketing purposes from us and/or from our customers. Your “opt-out” will not affect the lawfulness of the processing based on consent before the withdrawal.

For clarity, we may still collect and use (except for direct marketing purposes) your MAC Address.

6. Information We Collect Automatically

6.1. Location Data

When you carry your device (with its Wi-Fi and/or Bluetooth function enabled) into one of our venues, the technology we use senses the following: the presence of your device, its signal strength, its manufacturer (Apple, Samsung, etc.), the geographic position and a unique identifier known as its Media Access Control (MAC) address. This combination of numbers and letters identifies a specific device to the surrounding Wi-Fi or Bluetooth networks. Because the MAC Address does not disclose the device owner’s real-world identity, that information is never collected. We promptly de-identify and de-personalize any MAC addresses we collect. General Visit Information is collected as your mobile device moves across different Locations that use our technology. For clarity, this information is automatically collected if your device’s WiFi is enabled – even if you do not actually “connect” to the Location’s WiFi network.

6.2. Activity Information

When you use Our Service, we may also automatically collect additional information from your mobile device. In some countries, including countries in the European Economic Area (“EEA”), this information may be considered personal information under applicable data protection laws. We refer to this information as – “Activity Information”. This information does not reveal your specific identity but may include information about the specific mobile device you are using to access the Our Service, such unique device identifiers known as MAC Address, device type and model, operating system, browser type and language, your browser’s Internet Protocol address, start and stop timestamps of your connections, amount of traffic, hotspot from which you are connected, and the logout reason type. It may also include broad geographic location-related data (e.g. country or city-level location). We may use cookies and other tracking technologies to collect some of this Activity Information, as further explained under the section headed “How We Use Cookies and Similar Tracking Technologies”.

7. Information You Provide Voluntarily

7.1. Registration Information

When you use the guest Wi-Fi services in one of our venues, registration is sometimes required. The “Registration Information” you may provide includes, for example, full name, telephone number, email address or demographic information (e.g. date of birth, gender, geographic area and preferences). You understand and agree that by providing Registration Information to Us, you are permitting Us to: a) store and access your personal data; b) link your personal data to the MAC address and your location, as offered by your mobile device; and, c) use your Registration Information in such other ways which accord with the terms and conditions herein set forth.

7.2. Information We Collect from Third-Party Sources

If you Log-In to the WiFi network via a third-party service, such as Facebook Login, Twitter Login or Google OpenID, we may access the information described in the third-party service’s request for authorization, such as your name, email address, gender, age, and home zip code. Please review your privacy settings with these third-party services to ensure you are sharing the information you wish to share.

8. How Long We Retain Your Information

We retain your information for as long as you are a user of the guest Wi-Fi services. We also retain this information after you are no longer a user or until it is no longer needed for the purposes for which it was collected. As far as such information is subject to any statutory data retention period exceeding afore-said storage period, We will store the data each concerned for the duration stipulated in the respective statutory provisions. In the latter case, the data will be stored in restricted form whereas further processing is allowed exclusively for the establishment, exercise or defense of legal claims, the protection of the rights of another person, or reasons of important public interest.

After this period, your personal data will be irreversibly destroyed. Any personal data held by us for marketing and service update notifications will be kept by us until such time that you notify us that you no longer wish to receive this information.

9. Where We Store Your Information

As of the date of this Policy, we store information in United Arab Emirates (UAE). We use third party provider who may process your personal data on Our behalf. We assessed the compliance and security measures implement by all of our providers and we signed Data Processing and Data Transfer agreements (where applicable) with them that comply with the PDPL & GDPR.

9.1. How We Keep Your Personal Information Secure

We use appropriate administrative, organizational, technical, and physical safeguards to protect the personal information we collect and process about you. The measure we use are designed to provide a level of security appropriate to the risk of processing your personal information and to help ensure that your data is safe, secure, and only available to you and to those you provided authorized access. Specific measures we use include using secure socket layer protection (which you can look up on your favorite search engine). We also take steps, like employing firewalls and authentication, to safeguard your information and prevent unauthorized access to it. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so you should take care in deciding what information you send us in this way.

9.2. Third Party Sites

The guest Wi-Fi services may, from time to time, contain links to and from the website of third parties. If you follow a link to any of these websites, please note that these websites and any services that may be accessible through them have their own privacy policies and that we do not accept any responsibility or liability for these policies or for any Personal Information that may be collected through these websites or services. Please check these policies before you submit any personal data to these websites or use these websites.

9.3. Privacy Policy for Children

We do not knowingly collect information from anyone under the age of 16 unless we first obtain permission from that child’s parent or legal guardian. However, if despite our best efforts we learn that we have collected information from a child under the age of 16 on our Platform, we will delete that information as quickly as possible.

If you become aware that your child has provided us with personal information without your consent, please contact us using the contact details provided under the “Contacting Us” heading below.

9.4. Recourse, Enforcement and Liability

We are dedicated to ensuring that its privacy practices are in compliance with the Principles and this Policy. Any employee that we determine is in violation of this Policy may be subject to disciplinary action up to, and including, termination of employment. We encourage you to direct any questions, concerns or complaints regarding the collection and use of your personal information to Our data protection officer (contact information provided below). We will investigate and work expeditiously to resolve any complaints or disputes in accordance with the Principles and this Policy. If we do not provide a timely response to you, or you are not satisfied with the way we have handled your matter, please contact the appropriate independent dispute resolution service identified in the beginning of this Policy. The services the Privacy Shield BBB are provided to you at no cost.

We promise to do our best to remedy any problems arising out of the failure to comply with the Principles, including taking responsibility for a third party agent’s processing of personal information received under the Privacy Shield. If the third party agent does not process your personal information consistent with this Policy and the Principles, and We are responsible for the events giving rise to the damage you have incurred, then we remain liable to you under the Principles.

9.5. Amendments to This Policy

We may update this Privacy Notice from time to time. This Privacy Notice applies to information we collect while that notice is in effect. When such changes occur, you will be able to view the new version of this Privacy Policy on our website. If we change this Policy in a manner that materially alters your rights or obligations under this Policy, we will use reasonable efforts to notify you of the change. For example, we could generate pop-up or similar notification when you access the Services for the first time after such material changes are made. Your use of the Platform after the effective date of the changes constitutes acceptance of the amended terms. We reserve the right to apply the amended terms to the information we have already collected, subject to any legal requirements. We suggest that you review our Privacy Policy regularly to see if there have been any changes.

10. Cookie Usage

Our website does not use cookies to collect personal data. We only use cookies that are strictly necessary for the basic functionality of the website.

11. How We Use Your Information

We collect your information to fulfil our public task (which serves as our legal basis for this data collection) and to provide you with the service(s) you have requested.

When you sign up, subscribe, or opt in to our communications through online channels, you are giving us your consent to send you non-transactional communications via email. We will never send you these communications without your consent, and you can opt out or withdraw your consent at any time.

The personal data we collect from you is only used for the purposes for which it was obtained. We ensure that we have a legal basis to use your personal information for the purposes mentioned in this Notice — usually with your consent, as part of a legitimate interest assessment, or because the use of your data is necessary to comply with a legal obligation.

12. Transactional communications

There are transactional communications that we are required to send regardless of your contact preferences. These are essential communications, deemed necessary to fulfil our contractual obligations to you. This may include thanking you and renewal letters, member benefits, queries regarding returned mail, bounced payments, booking, and purchases-related communications.

13. Responding to Your Queries

If you contact us with queries, comments, compliments or, complaints then we will keep a record of this correspondence and any associated documents so that we have the information available in the event of a follow up, dispute, or investigation.

14. Notifying You of Changes to Policies

If we make updates to our policies that may affect you, we will use your contact details to inform you of the changes.

15. Marketing and Communications

We may send you promotional communication based on your consent. The communication that we might share with you includes:

Details of other products, services, or events related to the museum, such as exhibitions, events, eCommerce shop, café, or restaurant offers, etc.
News and updates about the museum such as our programmes, learning, promotions, or newsletters.
Studies and feedback surveys to provide you a better experience and serve you better.

You can choose to opt out from receiving marketing-related communications at any time by visiting our website or using the unsubscribe link provided in our emails.

16. Analytics

It is within the Museum's legitimate interests to store and perform analytics on your data to continue to improve our understanding of our visitors. This allows us to deliver world-class transformative, visitor-focused experiences, customer support, and a knowledgeable visit.

Visitor analytics is done on an aggregate basis so that individuals cannot be readily identified.

We carry out customer analytics to improve our understanding of our target audiences. This helps us target our marketing more efficiently, understand what topics you are interested in, and personalize and improve your experience if you have consented to receive communications from us.

You can choose to opt out from our marketing-related communications at any time by visiting our website.

17. Sharing Information with Third Party

We will never sell, trade, or transfer your personal information to any third parties or external organizations, except as required by law. Your data will be used solely for the purposes stated in this Privacy Notice and will not be shared or sold under any circumstances.

18. How Long Do We Retain Your Data?

The information that we hold about you will only be kept for such periods as is necessary to perform the required purpose unless a longer period for the retention of your personal information is required by law.

19. Your Rights to Manage Your Data

Under the UAE data privacy legislation, you have the following rights to have your data managed as per your wish:

The right to be informed about the collection and use of your personal data.
The right to access personal data and supplementary information.
The right to have inaccurate personal data rectified or completed if it is incomplete.
The right to erasure (to be forgotten) in certain circumstances.
The right to restrict processing in certain circumstances.
The right to data portability, which allows you to obtain and reuse your personal data for your own purposes across different services.
The right to object to processing in certain circumstances.
Rights in relation to automated decision-making and profiling.
The right to withdraw consent at any time (where relevant).
The right to complain to the relevant Supervisory Authority.

Please note that the above rights are not absolute, and we may be entitled to refuse your requests where exceptions apply.

20. Protection of Your Data

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal information to those employees, agents and contractors who have a business need to know. They will only process your personal information on and as per our instructions, and they are subject to a duty of confidentiality.

21. Data Breach Notification

We have put in place procedures to deal with any suspected data security breach and will notify you and the relevant authorities of a suspected breach where we are legally required to do so.

22. Changes to This Privacy Notice

Natural History Museum Abu Dhabi may change and/or update this Privacy Notice from time to time to meet changes in the laws/standards, business needs, or to satisfy the needs of our visitors and members. We keep our Privacy Notice under regular review. Any changes to this Privacy Notice will be posted on our website and date-stamped so that you are always aware of the latest update.

23. Have Privacy-Related Queries?

Contact us — should you have any concerns or questions regarding your privacy, you may submit your inquiries to data.privacy@naturalhistorymuseum.ae.