Privacy Policy
Privacy Policy
The North Carolina Transportation Museum (“NCTM,” “we,” “us,” or “our”)
Last updated: September 6, 2025
Contact: webmaster@nctransportationmuseum.org
The North Carolina Transportation Museum operates NCTransportationMuseum.org to share information about our exhibits, programs, events, and educational resources, and to facilitate ticketing, memberships, donations, and communications. We believe responsible data use builds trust with our visitors and supporters. We are committed to respecting and protecting your privacy and being transparent about how we handle personal data in accordance with applicable laws.
This Privacy Policy explains what personal data we may collect about you (or, where applicable, your authorized representative) when you interact with our website, how we use and share that information, and the rights and choices available to you. For this website, The North Carolina Transportation Museum is the data controller of the personal data you provide.
Residents of California have additional rights under the California Consumer Privacy Act (CCPA) (see Section 8). Individuals in the EU/EEA have rights under the GDPR (see Section 7).
1) Information We May Collect
A. Information related to your use of the website (analytics & profiling)
We and our service providers use cookies, pixels, and similar technologies to automatically collect information about how you use the site—pages visited, links clicked, search terms, referring/exit pages, time/date stamps, and engagement with content. We may analyze this information to improve the site, personalize content, and inform our outreach strategies (this may include limited “profiling” as described in Section 7).
B. Technical data
We automatically collect device and network information such as IP address, device identifiers, browser type/version, operating system, language settings, approximate location (derived from IP), and cookie IDs. See the Cookie Notice below for details and choices.
C. Contact data
You may provide your name, email address, phone number, mailing address, and similar information when you subscribe to newsletters, request information, purchase tickets or memberships, register for programs, make donations, complete forms, or contact us.
D. Transaction & relationship data
If you donate, buy tickets, register for an event, or become a member, we may collect related details such as purchase/donation amounts, event selections, membership tier and renewal dates, and your communications preferences. (Payment card data is processed by our payment processors; we do not store full card numbers.)
E. Marketing & communications preferences
We maintain your preferences about receiving email updates, event announcements, fundraising appeals, or educational content.
2) How We Use Your Information
Except where required by law, we use personal data to:
- Deliver the information, tickets, registrations, memberships, or services you request;
- Send newsletters, event updates, fundraising appeals, educational content, and other museum announcements (per your preferences);
- Respond to inquiries and provide visitor support;
- Analyze, operate, secure, and improve our website and services;
- Personalize content and measure effectiveness of our outreach;
- Protect NCTM, our visitors, staff, partners, and systems from fraud, abuse, or security threats; and
- Comply with legal obligations.
Typical legal bases (GDPR): consent (e.g., newsletters), contract (e.g., fulfilling a ticket purchase), legitimate interests (e.g., improving the site, safeguarding security, responsible promotion of programs consistent with your interests), and legal obligations.
3) Information Sharing & Disclosure
We do not sell or rent your personal information.
We may share personal data with:
- Service providers that help us operate the website, send emails, process payments, manage events/memberships, provide analytics, or host our systems. These providers are contractually limited to using data only to perform services for us.
- Successors in the event of a reorganization or transfer of museum operations, to the extent permitted by law.
- Regulators or law enforcement when required by law or to protect the museum, our visitors, and systems from fraud, security threats, or illegal activities.
- Others with your direction or consent, or as otherwise disclosed at the time of collection and permitted by law.
4) Data Transfers
If you access our site from outside the United States, your information may be processed in the U.S., where data protection laws may differ from those in your jurisdiction. Where required, we implement appropriate safeguards for such transfers.
5) Your Choices
- Cookies & tracking: You can control cookies via your browser settings (see the Cookie Notice below). Blocking cookies may affect site functionality.
- Email preferences: You can unsubscribe from museum marketing emails at any time via the link in the message. You may still receive non-marketing emails (e.g., transaction confirmations, service notices).
- Do Not Track: Our site may not respond to all DNT signals, but you can use the cookie controls and advertising opt-out tools referenced below.
6) Data Retention & Security
We retain personal data only as long as necessary for the purposes described in this Policy, to comply with legal obligations, resolve disputes, and enforce agreements. We maintain administrative, technical, and physical safeguards designed to protect personal data. However, no system can be guaranteed 100% secure.
7) Your EU/EEA/UK Rights (GDPR)
Where GDPR or similar laws apply, you may have the right to:
- Access your personal data;
- Correct inaccurate data;
- Delete your data (subject to lawful exceptions);
- Restrict or object to processing (including certain profiling or direct marketing);
- Data portability (for data you provided to us); and
- Withdraw consent at any time where processing is based on consent.
To exercise these rights, contact webmaster@nctransportationmuseum.org. We may need to verify your identity and will respond within required timeframes. You also have the right to lodge a complaint with your local data protection authority.
Profiling note: We may use limited automated analysis (e.g., analytics-based audience segments) to tailor content or measure engagement; you may object to such processing where applicable.
8) Your California Privacy Rights (CCPA/CPRA)
If you are a California resident, you may have the right to:
- Know/Access the categories and specific pieces of personal information we collected about you, the sources, purposes, and categories of third parties with whom we share it;
- Delete personal information (subject to exceptions);
- Correct inaccurate information;
- Opt out of “sharing” for cross-context behavioral advertising (if applicable);
- Non-discrimination for exercising your rights.
We do not sell personal information. If we “share” personal information for cross-context behavioral advertising, we will offer a method to opt out (e.g., a “Do Not Share My Personal Information” link where legally required).
To submit a verifiable request, email webmaster@nctransportationmuseum.org with sufficient details for us to identify you and your request. You may use an authorized agent (subject to verification). We will respond within the time required by law.
9) Children’s Privacy
Our website and programs are family-oriented, but we do not knowingly collect personal information online from children under 13 without appropriate parental consent (consistent with COPPA). If you believe a child under 13 has provided personal information to us through the website, please contact webmaster@nctransportationmuseum.org, and we will promptly delete it. Where EU/EEA/UK laws apply, the relevant age threshold may be higher (up to 16).
10) External Links
Our site may link to third-party websites (e.g., ticketing platforms, social media, partner institutions). Their data practices are governed by their own privacy policies. We are not responsible for the privacy or security of those sites.
11) Updates to This Policy
We may update this Privacy Policy to reflect legal, technical, or operational changes. The “Last updated” date indicates the latest revision. Material changes will be highlighted where appropriate.
12) How to Contact Us
Questions about this Policy or our data practices? Need to exercise a right?
Email: webmaster@nctransportationmuseum.org
Supplementary Information (Key Terms)
- “Data controller”: entity that determines the purposes and means of processing personal data.
- “Personal data / personal information”: information that identifies, relates to, describes, or can reasonably be linked to an individual or household.
- “Processing”: any operation performed on personal data (collection, use, sharing, storage, deletion, etc.).
- “Profiling”: automated processing to evaluate certain personal aspects (e.g., preferences, interests, behavior).
- “Transfer”: moving or accessing personal data from another country/jurisdiction.
Cookie Notice
How we use cookies
Cookies are small files stored on your device to make websites work, improve performance, measure usage, and personalize content. We may use:
- Strictly necessary cookies (site operation, security);
- Performance/analytics cookies (aggregate usage and improvements);
- Functionality cookies (remember choices);
- Advertising/measurement cookies (where used, to understand reach and effectiveness).
Your choices
You can manage cookies through your browser settings. Blocking some cookies may limit site functionality.
- U.S. ad preferences: http://optout.aboutads.info/?c=2&lang=EN
- EU/EEA choices: https://www.youronlinechoices.com/
Do-Not-Track
Browser DNT signals may not be consistently recognized; please use the tools above or your browser settings.
Questions about cookies or this Policy?
Email webmaster@nctransportationmuseum.org.
This Policy is provided for general informational purposes and does not constitute legal advice. Please consult your counsel to ensure the Policy fits your specific operations, integrations (ticketing/membership vendors, analytics platforms), and jurisdictional requirements.