Effective February 27, 2026

New Britain Museum of American Art Inc. ("we," "us," or "our") respects your privacy and is committed to protecting it through our compliance with this policy. This Privacy Notice describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services").

• Visit our website at https://nbmaa.org/
• Engage with us in other related ways, including any marketing or events

If you have questions about this policy please contact [email protected].

SUMMARY OF KEY POINTS

This summary provides key points from our Privacy Notice, but you can find more detailed information in the sections below.

What personal information do we process?

When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services.

Do we process sensitive personal information?

Some information may be considered sensitive in certain jurisdictions. We do not collect sensitive personal information unless absolutely necessary and generally do not process such information.

Do we collect information from third parties?

No, we do not collect personal information from third parties.

How do we process your information?

We process your information to provide, improve, and administer our Services, communicate with you, prevent fraud, and comply with law.

How do we keep your information safe?

We use organizational and technical safeguards to protect personal information.

What are your rights?

Depending on where you live, privacy laws may give you certain rights regarding your personal information.

TABLE OF CONTENTS

1. What Information Do We Collect?
2. How Do We Process Your Information?
3. What Legal Bases Do We Rely On?
4. When and With Whom Do We Share Personal Information?
5. Do We Use Cookies and Tracking Technologies?
6. How Long Do We Keep Your Information?
7. How Do We Keep Your Information Safe?
8. What Are Your Privacy Rights?
9. Controls for Do-Not-Track Features
10. Do United States Residents Have Specific Privacy Rights?
11. Do We Make Updates to This Notice?
12. How Can You Contact Us About This Notice?
13. How Can You Review, Update, or Delete the Data We Collect From You?

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

We collect personal information that you voluntarily provide when you register on our Services, express interest in our offerings, participate in activities on the Services, or contact us.

The information may include:

• Name
• Phone number
• Email address
• Mailing address
• Usernames
• Passwords

Children's Information

Our Services are not intended for individuals under 18 years old. We do not knowingly collect personal information from children. If we discover we have collected such data it will be deleted.

Sensitive Information

We do not process sensitive information such as biometric identifiers, health data, or financial insurance information.

Payment Data

Payment data may be collected when making purchases and is handled by third-party processors such as TN Express Web (TNEW).

Information Automatically Collected

Certain technical information is automatically collected when you access our Services.

• IP address
• Device information
• Browser type
• Operating system
• Language preferences
• Location information
• Usage behavior

This includes:

• Log and Usage Data – server logs, activity timestamps, usage patterns
• Device Data – hardware model, device identifiers, ISP information
• Location Data – approximate location derived from IP or device settings

2. HOW DO WE PROCESS YOUR INFORMATION?

We process personal information for purposes including:

• Creating and managing user accounts
• Delivering requested services
• Responding to support inquiries
• Protecting individuals from harm
• Preventing fraud and maintaining security

3. WHAT LEGAL BASES DO WE RELY ON?

We only process personal information when we have a valid legal basis such as:

• Consent
• Contract performance
• Legal obligations
• Vital interests

For Canadian residents processing may also occur under express or implied consent or other lawful exceptions allowed under Canadian privacy law.

4. WHEN AND WITH WHOM DO WE SHARE PERSONAL INFORMATION?

We may share personal information in limited situations including:

• Business transfers such as mergers or acquisitions
• Service providers operating under contractual obligations

We may also disclose aggregated information that does not identify individuals.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

We may use cookies, web beacons, and similar technologies to improve functionality, analyze site usage, and provide targeted advertising.

You may control cookie behavior through your browser settings.

Google Analytics

We use Google Analytics to analyze website usage. You may opt out at: Google Analytics Opt-Out

6. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain personal information only for as long as necessary for the purposes outlined in this policy unless longer retention is required by law.

When no longer needed the information will be deleted or anonymized.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

We implement appropriate technical and organizational security measures designed to protect your personal information. However, no internet transmission can be guaranteed to be completely secure.

8. WHAT ARE YOUR PRIVACY RIGHTS?

Depending on your location you may have rights including:

• Access to personal data
• Correction of inaccurate data
• Deletion of personal data
• Restriction of processing
• Data portability
• Withdrawal of consent

Requests can be made by contacting us at [email protected].

9. CONTROLS FOR DO-NOT-TRACK FEATURES

Most browsers offer Do-Not-Track settings. Because no standard exists for responding to these signals we do not currently respond to them.

10. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

Residents of certain US states may have rights to request access to, correct, or delete their personal information and to opt out of certain data processing activities.

We have not sold or shared personal information for commercial purposes in the past 12 months and do not plan to do so.

Your Rights

• Right to know whether personal data is being processed
• Right to access personal data
• Right to correct inaccuracies
• Right to request deletion
• Right to receive a copy of your data
• Right to non-discrimination for exercising your rights
• Right to opt out of targeted advertising or data sales

Authorized Agents

You may designate an authorized agent to make a request on your behalf.

Request Verification

We may require verification of identity before processing a request.

Appeals

If your request is denied you may appeal by emailing [email protected]. If the appeal is denied you may submit a complaint to your state attorney general.

11. DO WE MAKE UPDATES TO THIS NOTICE?

Yes. We may update this policy from time to time to comply with applicable laws or reflect changes to our services.

12. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or complaints regarding this notice you may contact:

New Britain Museum of American Art Inc.
56 Lexington St
New Britain, CT 06052
United States

Email: [email protected]

13. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on applicable laws you may have the right to request access to the personal information we collect from you, understand how it has been processed, correct inaccuracies, or delete your personal information.

You may also withdraw consent to processing of your personal information where applicable.

To request review, update, or deletion of your personal information please submit a data subject access request to the contact details listed above.