Privacy Policy

Effective June 21, 2026. Last updated July 5, 2026.

This Privacy Policy explains how National Civil Rights Museum (“we,” “us,” or “our”) collects, uses, shares, and protects personal information when you visit ncrmdev2.kinsta.cloud (the “Site”). It also describes the privacy rights available to you and how to exercise them. By using the Site you acknowledge that you have read and understood this policy.

For the purposes of the EU and UK General Data Protection Regulation (GDPR), National Civil Rights Museum is the “data controller” of the personal information described below. Where we rely on your consent to process personal information, we ask for it separately and you may withdraw it at any time.

Information We Collect

We collect personal information in two ways: information you give us directly, and information collected automatically when you use the Site.

Information you provide to us

When you complete our contact form or otherwise reach out, we collect what you choose to submit, which typically includes:

• Your name
• Your email address
• Your phone number, if you choose to provide it
• The contents of your message

You are not required to provide this information, but we need it to respond to you.

Information collected automatically

When you visit the Site, certain information is collected automatically through cookies and similar technologies (see Cookies and Tracking Technologies below):

Category	Examples
Device and connection	IP address, browser type, operating system, device identifiers
Usage	Pages viewed, links clicked, time on page, referring and exit pages
Analytics and advertising identifiers	Cookie IDs and similar identifiers set by analytics and advertising tools

We do not intentionally collect special categories of sensitive personal information (such as health, biometric, or financial account data) through the Site.

Cookies and Tracking Technologies

We use cookies and similar technologies (such as pixels and tags) to operate the Site, remember your preferences, measure traffic, and — where applicable — support advertising. Cookies fall into the following general categories:

• Strictly necessary — required for the Site to function; cannot be switched off
• Analytics and performance — help us understand how visitors use the Site so we can improve it
• Advertising and targeting — may be used to measure and deliver relevant advertising, including across other websites

Google Analytics

We use Google Analytics to understand how visitors interact with the Site. Google Analytics sets cookies and collects information such as your IP address, device and browser details, and pages visited. This information is processed by Google in accordance with Google’s Privacy Policy. You can opt out across all websites by installing the Google Analytics Opt-out Browser Add-on.

Managing cookies and your choices

Where required by law, we request your consent before setting non-essential cookies, and you can change your choices at any time through our cookie banner or preference center. You can also control cookies through your browser settings, though disabling some may affect how the Site functions. We do not currently respond to “Do Not Track” (DNT) browser signals because there is no common industry standard for DNT. Where required by law, we honor recognized opt-out preference signals such as the Global Privacy Control (GPC) as a valid request to opt out of the “sale” or “sharing” of personal information from that browser.

A complete inventory of cookies and what controls are available is in our Cookie Policy.

How We Use Your Information

We use the personal information we collect to:

• Respond to your inquiries and provide the information or assistance you request
• Operate, maintain, and secure the Site
• Understand and analyze how the Site is used and improve it
• Measure and, where applicable, deliver relevant advertising
• Detect, prevent, and address fraud, abuse, or security issues
• Comply with our legal obligations and enforce our terms

Legal Bases for Processing (EEA and UK)

If you are located in the European Economic Area or the United Kingdom, we process your personal information only where we have a valid legal basis:

• Consent — for non-essential cookies, analytics, and advertising technologies, where required. You may withdraw consent at any time.
• Legitimate interests — to respond to your inquiries, secure and improve the Site, and understand how it is used, provided those interests are not overridden by your rights.
• Legal obligation — where processing is necessary to comply with applicable law.

How We Share Information

We do not sell your personal information for money. We share personal information only in the following circumstances:

• Service providers — vendors who process information on our behalf, such as website hosting, IT, email, and analytics providers
• Advertising partners — providers of the analytics and advertising technologies described above. Under some U.S. state laws this activity may be considered “sharing” or a “sale” for cross-context behavioral advertising (see Do Not Sell or Share My Personal Information)
• Professional advisors — such as lawyers, accountants, and auditors, where necessary
• Legal and safety — when required by law, regulation, or valid legal process, or to protect rights, property, or safety
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets

International Data Transfers

We are based in the United States, and our service providers may process information in countries other than the one in which you live. Those countries may have data-protection laws that differ from yours. Where we transfer personal information internationally — including from the EEA or UK — we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or another lawful transfer mechanism.

Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this policy, including to respond to your inquiry and maintain records, and for as long as required to meet legal, accounting, or reporting obligations. When information is no longer needed, we take reasonable steps to securely delete or anonymize it. Retention periods for cookies and analytics data are determined by the relevant tools and your cookie choices.

Your Privacy Rights

Depending on where you live, you may have some or all of the following rights regarding your personal information. We will not discriminate against you for exercising any of them.

Rights available to all users

• Request access to the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information
• Opt out of marketing communications

Additional rights in the EEA and UK (GDPR)

• The right to restrict or object to certain processing, including processing based on legitimate interests
• The right to data portability
• The right to withdraw consent at any time, without affecting prior processing
• The right to lodge a complaint with your local data-protection supervisory authority

Additional rights for U.S. state residents

Residents of California and certain other U.S. states (such as Virginia, Colorado, Connecticut, and Utah) may also have the right to:

• Confirm whether we process their personal information and access it
• Know the categories of personal information collected, the sources, the purposes, and the categories of recipients
• Opt out of the “sale” or “sharing” of personal information and of targeted advertising
• Limit the use of sensitive personal information
• Appeal a decision we make about a privacy request, where provided by law

How to exercise your rights

To make a request, please send us a message. We may need to verify your identity before responding. You may use an authorized agent to submit a request on your behalf where permitted by law. We generally respond within 30 days under the GDPR (extendable by up to 60 days for complex requests) and within 45 days under U.S. state laws such as the CCPA (extendable by an additional 45 days), and we will tell you if we need more time.

Do Not Sell or Share My Personal Information

We do not sell personal information for money. However, our use of analytics and advertising technologies (such as cookies and pixels) may be considered a “sale” or “sharing” of personal information for cross-context behavioral advertising under certain U.S. state laws. You can opt out by adjusting your choices in our cookie banner or preference center, by using a recognized opt-out preference signal such as the Global Privacy Control (GPC), or by sending us a message.

SMS and Text Messaging

If you provide your mobile phone number and opt in to receive text messages from National Civil Rights Museum, the following terms apply.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are never shared with any third parties.

• Consent — By opting in, you agree to receive text messages from us at the mobile number you provided. Consent is not a condition of any purchase.
• Message types — Messages may include responses to your inquiries, service or appointment updates, and, if you separately opt in, promotional offers.
• Message frequency — Message frequency varies.
• Cost — Message and data rates may apply, depending on your mobile carrier’s plan.
• Opt out — Reply STOP at any time to unsubscribe. After you send STOP, we will send a confirmation message and then stop sending text messages to that number.
• Help — Reply HELP for assistance, or reach us through our contact page.

Carriers are not liable for delayed or undelivered messages.

Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, or alteration. However, no method of transmission over the internet or method of storage is completely secure, and we cannot guarantee absolute security.

Children’s Privacy

The Site is not directed to children, and we do not knowingly collect personal information from children under 13 (or under 16 in the EEA and UK). If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

Third-Party Links

The Site may contain links to third-party websites or services that we do not operate or control. This Privacy Policy does not apply to those sites, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policy of any website you visit.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. The “Last updated” date at the top reflects the most recent revision. Material changes will be highlighted where appropriate. Your continued use of the Site after any change takes effect constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, or wish to exercise your privacy rights, please send us a message. You may also reach us by mail at:

National Civil Rights Museum

If you are in the EEA or UK, you also have the right to lodge a complaint with your local data-protection supervisory authority. We ask that you contact us first so we can try to resolve your concern.

Send a Message