Home / Privacy
Privacy Policy.
This Privacy Policy describes how the Hub Heritage Visitor Guide ("we", "us", "our") collects, uses, and shares information when you visit hubheritage.com (the "Site"). We respect your privacy and aim to collect only the data we genuinely need.
This Site is an independent informational resource and is not affiliated with the Museum of Fine Arts, Boston. The museum's own privacy practices apply on its official website.
Information We Collect
Information you provide
- Contact form: name, email address, topic, and the message you write.
- Correspondence: any information you choose to include when you email us.
Information collected automatically
- Log data: IP address, browser type and version, operating system, referring URL, pages visited, and timestamps.
- Cookies and similar technologies: small text files used to remember preferences and to measure aggregate Site usage. See our Cookie Policy for details.
Information from third parties
We may receive aggregated reports from analytics providers (for example, page views by country) but we do not buy personal information from data brokers.
How We Use Information
- To respond to your messages and provide editorial assistance.
- To operate, secure, and improve the Site.
- To understand which pages are useful so we can publish better content.
- To detect and prevent fraud, abuse, and security incidents.
- To comply with legal obligations under U.S. federal and Massachusetts state law.
Legal Bases (where applicable)
Where the laws of your jurisdiction require a legal basis (for example, the EU/UK GDPR), we rely on:
- Consent — for non-essential cookies and email outreach.
- Legitimate interests — for Site operation, security, and aggregate analytics, balanced against your rights.
- Compliance with law — where required by valid legal process.
Sharing
We do not sell personal information. We share information only with:
- Service providers who host the Site, deliver email, or run analytics — bound by contract to use data only on our behalf.
- Legal authorities when required to comply with subpoenas, court orders, or applicable law.
- Successors in the event of a merger, acquisition, or sale of the Site's editorial assets, with notice to you where required.
Data Retention
We keep contact-form messages for as long as we need to follow up and to maintain editorial records — typically up to twenty-four (24) months — and then we delete or anonymize them. Server logs are retained for up to ninety (90) days for security and debugging.
Your Rights
Depending on where you live, you may have rights to access, correct, delete, port, or restrict the processing of your personal information. You may also object to processing or withdraw consent at any time.
Massachusetts residents
Massachusetts law (M.G.L. c. 93H and 201 CMR 17.00) requires us to safeguard personal information of residents and to notify you in the event of a data breach affecting your personal information. We maintain a written information security program (WISP) consistent with these requirements.
California, Colorado, Connecticut, Utah, Virginia residents
If you are a resident of a U.S. state with comprehensive privacy legislation, you have the right to know, the right to delete, the right to correct, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. We do not sell personal information.
Exercising your rights
Email info@hubheritage.com with the subject line "Privacy Request." We may need to verify your identity before responding. We will reply within forty-five (45) days; complex requests may take an additional forty-five (45) days with notice to you.
Cookies and Tracking
See our separate Cookie Policy for the categories of cookies we use, who sets them, and how to manage your choices.
Children's Privacy
The Site is not directed to children under thirteen (13). We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.
International Visitors
The Site is operated from the United States. If you access it from outside the U.S., you understand that your information may be processed in the United States and other countries whose data-protection laws may differ from those of your country.
Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No system is perfectly secure, however, and we cannot guarantee the absolute security of information transmitted to or from the Site.
Changes to This Policy
We may update this Privacy Policy from time to time. The "Effective date" above will reflect the most recent revision. Material changes will be highlighted on the Site for at least thirty (30) days before they take effect.
Contact
Questions or requests? Email info@hubheritage.com or write to Hub Heritage Visitor Guide, c/o Editorial, PO Box 5237, Boston, Massachusetts 02114, United States.