Privacy

When you place an order: your name, email address, billing address, shipping address, telephone number if you give one, what you ordered, and the payment details described on the payment-security page — a token, the last four digits, the card brand and the issuing country, never a full card number.

When you email us: the message and whatever is in it, kept with your order so the next person to read it has the history.

When you browse: your IP address, the pages you requested and your browser's user agent, in ordinary server logs. Your IP is also transmitted with an order, because it is one of the things that distinguishes a genuine customer from a stolen card and it is required evidence if a charge is later disputed.

This site sets one cookie-equivalent: the contents of your basket, stored in your own browser so it survives a reload. It never leaves your device until you check out, and clearing your browser data clears it.

There are no advertising cookies, no third-party tracking pixels, no remarketing tags and no social-media trackers on this site. That is why there is no consent banner: there is nothing to consent to.

Our payment provider, which handles the card details and the charge. The shipping carrier, which gets your name, address and telephone number because it cannot deliver without them. Our email provider, which sends order confirmations and replies. Our hosting provider, which operates the servers this site runs on.

That is the complete list. Each receives only what it needs for its part of the order, and each is bound to use it only for that.

We do not sell personal information, we do not rent it, and we do not share it for anyone else's advertising. There is no exception to that and there is no version of this business in which there is one.

Order records, including the payment token and the last four digits: seven years, as tax and accounting rules require. Email correspondence: three years. Server logs: 90 days. Basket contents: in your browser only, until you clear them.

Once the retention period ends the record is deleted rather than archived.

Email privacy@museandoak.com to get a copy of everything we hold about you, to correct something, or to have it deleted. We reply within 30 days and there is no charge.

Deletion has one limit: we cannot delete an order record inside its statutory retention period, because we are required to keep it. Everything outside that — correspondence, an email address on a list — goes immediately.

We send one email per order and nothing else. There is no marketing list on this site, so there is nothing to unsubscribe from.

This store is not directed at children and we do not knowingly collect information from anyone under 13. If you believe a child has given us information, email us and we will delete it.

This policy was last updated on 2026-09-12. If it changes materially the date changes with it, and the version in force when you ordered is the one that governs that order.