Privacy Policy

Who controls your information

The controller of personal information collected through this site is Krueger Editions LLC, a Hawaii limited liability company, of 745 Fort Street, Honolulu, HI 96813, United States.

Privacy questions and requests go to [clerk@kruegertravel.com](mailto:clerk@kruegertravel.com). General reader mail goes to [shoreline@kruegertravel.com](mailto:shoreline@kruegertravel.com), and requests sent there about personal data are forwarded internally rather than ignored. Postal requests reach the same company at the address above, and the telephone line is +1 (808) 462-3170 during posted desk hours.

Krueger Editions LLC decides why and how personal information is processed on this site. Nobody else has that role, and no part of this site is operated on behalf of another company.

What this site actually collects

This is a small publication and the amount of personal information involved is correspondingly small. Reading the site requires nothing from you.

Information you type into a form. If you send a message through the contact page, the fields you complete are transmitted so a reply can be written: your name, your email address, the subject you select, and the text of your message. If you join the reader note list, only an email address is transmitted. Nothing on this site asks for a postal address, a telephone number, a date of birth, a payment method, or a government identifier, and nothing here will ever ask for a password, because there are no accounts.

Information your browser sends. As with every site on the internet, requesting a page sends your internet protocol address, the address of the page you asked for, your browser and operating system identification, and a referring address where one exists. This is how the internet works rather than something this site chose to switch on. The hosting provider records it in short lived server logs used to serve pages and to investigate faults or abuse.

One item stored in your browser. A single local storage entry, `kt_shore_notice_v2`, records whether you have answered the storage notice, so it does not reappear on every page. It holds one short word and nothing else. The Cookie Policy lists it in full.

What is not collected. As published, this site sets no advertising identifiers, runs no analytics product, embeds no social media widgets, loads no third party fonts or scripts, and contains no tracking pixels. There is no profiling, no cross site tracking, no automated decision making, and no sale or sharing of personal information as those terms are defined under United States state privacy laws.

Why each item is processed

Messages you send are processed to answer them, to make corrections to published stories, and to keep a record of correspondence about a correction so the same question is not answered twice with two different answers.

An address given for the reader note list is processed only to send that note. It is not used for anything else, it is never passed to another party, and every note carries a working way to leave the list.

Server logs are processed to deliver pages, to keep the site available, and to investigate errors, abusive traffic, and attempts to break the site.

The local storage entry exists to respect the answer you already gave, which is the least intrusive way to stop asking the same question repeatedly.

Where a legal basis framework applies to you, the bases are these: consent for the reader note list, which you may withdraw at any time; legitimate interests in answering correspondence, keeping the site running and secure, and correcting published work; and legal obligation where a law requires a record to be kept or a request to be honoured.

How long anything is kept

Reader correspondence is kept for up to twenty four months, then deleted, except where a message led to a published correction. In that case the correction itself stays published and the underlying message is kept for up to five years so the record of why a story changed is intact.

Addresses on the reader note list are kept until you leave the list, and are deleted within thirty days of that.

Server logs held by the hosting provider are short lived and are typically discarded within thirty days.

The local storage entry stays in your browser until you clear site data or remove it yourself. Clearing it simply means the notice appears again on your next visit.

Who else can see it

Personal information is not sold, rented, or traded, and it is not shared for anybody else's marketing.

A small number of service providers necessarily handle data in order for the site to function. The hosting provider serves the pages and holds the server logs. A form delivery service passes the contents of a submitted form to the publisher's mailbox. The email provider stores the resulting message. Each of these acts on instructions, is bound by its own contractual confidentiality obligations, and is not permitted to use the information for its own purposes.

Beyond that, information is disclosed only where the law requires it, where it is necessary to establish or defend a legal claim, or where it is needed to investigate abuse of the site or a threat to somebody's safety.

Where information is handled

The publisher is in the United States and the service providers used are United States based, so information described here is handled in the United States.

If you write from outside the United States, sending a message necessarily involves transferring what you typed to the United States, and privacy law there differs from the law where you live. Where a transfer mechanism is required for people in a jurisdiction that requires one, the publisher relies on standard contractual clauses or an equivalent lawful mechanism with the relevant provider.

Your rights

The list below is available to you in whole or in part according to your place of residence: to learn what personal information exists about you and to obtain a copy; to correct information that is inaccurate; to delete information; to receive it in a portable form; to limit or object to certain processing; to withdraw consent for anything based on consent; and not to be treated worse for exercising any of these rights.

Residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and other states with comprehensive privacy statutes have these rights under their own laws, including the right to opt out of sale, sharing, or targeted advertising. Because this site does not sell or share personal information and runs no targeted advertising, there is nothing to opt out of, and a global privacy control signal sent by your browser finds nothing to switch off. If that ever stops being true, this section and the Cookie Policy will be updated before any such processing begins.

To exercise a right, write to [clerk@kruegertravel.com](mailto:clerk@kruegertravel.com) from the address you used, or describe enough about the correspondence for it to be located. Requests are acknowledged promptly and answered within forty five days, extendable once where the law allows and where you are told about the extension. Verification asks for the minimum needed to be sure a request is genuine, which is usually confirmation from the same email address. An authorised agent may act for you with written permission.

If you are unhappy with the outcome, you may appeal by replying to the decision, and the appeal will be reviewed by the same publisher within the period the applicable state law requires. You may also complain to your state attorney general or, outside the United States, to your local supervisory authority.

Children

This site is written for adults and is not directed at children under thirteen. It does not knowingly collect personal information from children under thirteen, has no features designed to appeal to them, and offers no accounts, profiles, or user generated content of any kind.

If a parent or guardian believes a child has sent personal information through this site, write to [clerk@kruegertravel.com](mailto:clerk@kruegertravel.com) and it will be deleted promptly.

Security

Pages are served only over an encrypted connection. Form submissions travel encrypted. The mailbox that receives reader mail is protected by multi factor authentication, and access to any of it is limited to the one person who runs the publication.

No method of transmission or storage is completely secure, and no publisher can promise otherwise. What can be promised is that the amount of personal information involved is deliberately kept small, because the safest data is the data that was never collected.

Advertising and measurement

As published, this site carries no advertising and runs no audience measurement.

If advertising or measurement were introduced in future, this policy and the Cookie Policy would be updated to describe exactly what was placed in your browser, by whom, for how long, and how to refuse it, and that update would happen before anything was placed rather than after. Any advertising would be labelled as advertising. Nothing of the sort operates today, and this section exists so the policy stays accurate if that changes rather than quietly becoming wrong.

Changes to this policy

When this policy changes, the revision date at the top of the page changes with it. Substantive changes, meaning anything that alters what is collected, why, or who sees it, are noted on this page for at least ninety days so a returning reader can see that something moved.

Continuing to use the site after a change means the current version applies. If a change ever required consent, it would be asked for rather than assumed.