This Privacy Policy applies to the website gear.museumofaviation.org (the “GEAR Site” or “Site”), which is operated by the Museum of Aviation Foundation, Inc. (also referred to as “we,” “us,” or “our”), a 501(c)(3) nonprofit organization located at 1942 Heritage Blvd, Robins AFB, GA 31098. The GEAR Site hosts information and ticket sales for STEM educational classes and programs.

We are committed to protecting your privacy and complying with all applicable privacy laws and regulations.

Our goal is not to collect unnecessary information. Instead, we collect only the minimum data required to complete your transactions and to make future ticket purchases and class registrations easier by securely saving the basic information you provide.

By using the GEAR Site, you consent to the practices described in this policy. We do not and will not sell your personal data to any third parties.

1. Information We Collect

We collect only the information you voluntarily provide or that is automatically generated as part of normal website operation. We never collect more than is necessary to process your ticket purchases and deliver STEM classes.

Information You Provide:

• Contact and billing details: name, email address, mailing address, phone number.
• Student/participant details (if required for class registration): student name, age or grade level, and any notes or preferences you include in forms.
• Optional Medical or Allergy Information: When adding student names to event tickets or registrations, you may choose to provide medical information such as allergies, special needs, or emergency contact details. This information is completely optional. If you choose to provide it, we retain it solely for the class roster and share it only with the instructor for the safety and well-being of the student. Providing this information does not create any liability for us — we cannot be held responsible for any exposures to allergens or other issues, even if the information is disclosed.
• Any other information you voluntarily submit via contact forms, registration, or surveys.

Payment Information: All payments are processed exclusively through Stripe via our WooCommerce platform. We do not collect, store, or process any credit card numbers, expiration dates, CVV codes, or other payment card data on our servers. Stripe handles the entire payment transaction securely under its own privacy practices.

Automatically Collected Information:

• Technical data: IP address, browser type and version, device information, operating system, and pages visited.
• Usage data: session duration, referring URL, and basic interaction metrics.
• Cookies and similar technologies: We use only essential cookies (e.g., for shopping cart functionality, session management, and security) and limited functional cookies required by WooCommerce. We do not use cookies for behavioral advertising or third-party tracking. Read more here: Stripe Privacy Policy , WordPress/Woocommerce Privacy Policies (these links are provided for convince only. Visit each company’s website for up-to-date information)

We do not collect sensitive personal data unless you voluntarily provide it for accommodation purposes.

2. How We Use Your Information

We use the collected information solely to:

• Process ticket purchases, register participants for STEM classes, and deliver the educational experience.
• Communicate with you about your order, class details, changes, cancellations, or refunds.
• Provide customer support and respond to inquiries.
• Improve the GEAR Site and our programs (using anonymized data only).
• Comply with legal obligations.
• Send occasional transactional emails (e.g., order confirmations, class reminders). You may opt out of non-essential communications at any time.

Optional medical or allergy information (if provided) is used exclusively for student safety during classes.

3. How We Share Your Information

We do not sell, trade, rent, or otherwise transfer your personal information to third parties for marketing or commercial purposes.

We may share information only in these limited cases:

• Service providers: With trusted vendors who assist us, such as Stripe (payments), our web hosting provider, WooCommerce/WordPress support, and email delivery services. These providers are contractually required to use your data only for the purpose we specify and to maintain confidentiality.
• Legal requirements: If required by law, court order, or government request.
• Business transfers: In the unlikely event of a merger, acquisition, or reorganization of the Museum of Aviation Foundation, your data may be transferred as part of the assets (subject to the same protections).

No other sharing occurs.

4. Cookies and Tracking Technologies

We use only strictly necessary cookies required for the Site to function (e.g., remembering your cart contents or login status). We do not:

• Use tracking cookies for advertising.
• Allow third-party behavioral tracking.

You can manage cookies through your browser settings. Disabling essential cookies may prevent you from completing ticket purchases.

5. Data Security

We take reasonable and appropriate technical and organizational measures to protect your information, including:

• Secure Socket Layer (SSL) encryption on all pages.
• Regular malware scanning and security updates.
• Restricted access to personal data (only authorized staff with a need-to-know).
• Secure third-party processors (Stripe is PCI-DSS compliant).

In the event of a data breach affecting personal information, we will notify affected users as required by law.

6. Data Retention

We retain personal information only as long as necessary:

• Order and transaction records: up to 7 years (for accounting and legal compliance).
• Class registration data: until the class ends, plus a short period for follow-up and safety records.
• Marketing/communication lists: until you unsubscribe.

You may request deletion of your data at any time (subject to legal retention requirements).

7. Children’s Privacy

The GEAR Site offers STEM classes primarily for students, many of whom may be minors. We take special care to protect the privacy of children and encourage parents and guardians to supervise their children’s use of the Site. When a parent or guardian purchases a ticket or registers a child, we treat the parent/guardian as the authorized representative. Parents may review, delete, or refuse further collection of their child’s information by contacting us (see Section 9).

8. Your Privacy Rights

You may:

• Request access to, correction of, or deletion of your personal information.
• Opt out of non-essential emails at any time.

To exercise any rights, email us at the address below. We will respond promptly.

9. Third-Party Links and Services

The GEAR Site may contain links to other websites (e.g., the main museumofaviation.org site). We are not responsible for the privacy practices of those sites. Stripe’s privacy practices are governed by their own policy. Read more here: Stripe Privacy Policy , WordPress/Woocommerce Privacy Policies (these links are provided for convince only. Visit each company’s website for up-to-date information)

10. Changes to This Privacy Policy

We may update this policy periodically to reflect changes in our practices or legal requirements. We will notify users of material changes via email or a prominent notice on the Site.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Museum of Aviation Foundation

Email: information@museumofaviation.org

Attn: GEAR Privacy Officer / GEAR Lab

1942 Heritage Blvd

Robins AFB, GA 31098

This Privacy Policy is tailored to the GEAR Site’s operations (WooCommerce + Stripe ticket sales for STEM classes) and reflects our commitment to minimal data collection focused solely on completing transactions and ensuring student safety.