Privacy Policy
Last Updated on 02/25/2025
Who is the Data Controller for Customers’ Personal Data?
Hawaii Activities and Concierge (hereinafter referred to as the "Company"), with its registered business address in the State of Hawaii, operates various tour booking websites. We collect personal data from our customers to ensure a safe and convenient booking experience. The protection of personal data is of utmost importance to us, and we comply with all applicable laws, including Hawaii Revised Statutes (HRS) Chapter 487J (Hawaii Personal Information Protection Act) and HRS Chapter 487N (Security Breach of Personal Information Law).
When the Company Collects Personal Data
The Company collects personal data from customers with their consent when required by law or when necessary to accomplish the purposes of use outlined in this Privacy Policy.
When the Company Uses Personal Data
The Company uses collected personal data solely for the purposes specified in this Privacy Policy.
How the Company Saves and Stores Personal Data
The Company stores and secures personal data using appropriate technical and organizational measures to prevent unauthorized access, data breaches, or leakage in compliance with HRS Chapter 487R (Destruction of Personal Information Law).
Deletion and Erasure of Personal Data
The Company retains personal data only as long as necessary for the stated purposes. Once data is no longer needed, it is securely deleted or anonymized in compliance with state and federal laws.
Customer Rights Regarding Personal Data
Customers have the right to:
Access their personal data and receive a copy upon request.
Rectify inaccurate or incomplete personal data.
Request erasure of their personal data, subject to applicable legal requirements.
Restrict or object to processing of personal data.
Withdraw consent where applicable.
To exercise these rights, customers may contact us at info@hiaac.com
Provision of Personal Data to Third Parties
The Company does not share personal data with third parties, except:
When customers give explicit consent.
When required by law or in response to legal requests.
When necessary for booking services, including with tour operators, transportation providers, or insurance companies.
When required to protect the life, safety, or property of an individual.
Entrustment of Handling Personal Data
If the Company outsources the handling of personal data to a third-party service provider, we ensure appropriate security measures and compliance with data protection laws.
Collection of Cookies Information
The Company uses cookies to enhance user experience, track site performance, and provide personalized content. Customers can manage cookie preferences through browser settings, but disabling cookies may affect website functionality.
Security Control Measures for Personal Data
The Company implements strict security controls, including:
Restricted access to personal data to authorized personnel only.
Use of Secure Sockets Layer (SSL) encryption for online transactions.
Regular audits and employee training on data protection best practices.
International Transfer of Personal Data
As a Hawaii-based international travel company, the Company may transfer personal data outside the U.S. when required for booking services. In such cases, we ensure appropriate safeguards in accordance with U.S. Privacy Shield Framework and other applicable data protection regulations.
External Links
The Company's websites may contain links to third-party websites. We are not responsible for the privacy practices of other sites and encourage customers to review their policies.
Changes to This Privacy Policy
The Company may update this Privacy Policy as necessary. Customers will be notified of changes through our website.
Contact Information
For questions regarding this Privacy Policy or to exercise data rights, please contact us at:
Hawaii Activities and Concierge
Lahaina, Hawaii
info@hiaac.com
808-638-3230
We strive to respond to all inquiries within five (5) business days.