Privacy Policy
The short version: we collect what we need to get you on a tour, we do not sell your information, and you can ask us to delete it.
This policy covers Pearl Harbor Guide (“we”, “us”) and explains what happens to your personal information when you browse this site, send us a message, or book a tour or product. It is written in plain English on purpose. If anything here is unclear, ask us.
1. What we collect
We only ask for what a booking or a reply actually needs.
Information you give us
- Booking details: your name, email address, phone number, tour date and time, number of travelers, and anything the operator needs to run the tour, such as a hotel pickup location or accessibility requirements.
- Order details: if you buy a physical product, your shipping address.
- Messages: whatever you write in our contact form or in a message to an operator, plus the name and email you send it with.
- Reviews: the name, rating, and text you submit with a review of a tour you booked.
- Vendor accounts: if you are a tour operator with a dashboard login, your account and company details. Travelers do not need an account to book.
Information we collect automatically
- Standard server logs from our hosting provider: IP address, browser type, pages requested, and timestamps. These are used to keep the site running and to spot abuse.
- Basic anti-spam signals on our contact form, such as how long the form was open before it was submitted.
We do not run advertising trackers, we do not build profiles of you across other websites, and we never sell or rent your personal information to anyone.
2. How we use it
- To take your booking and pass the details to the operator running your tour.
- To send you a confirmation, a receipt, and any updates about your booking or order.
- To answer your questions and provide support before and after your trip.
- To ship physical products you order.
- To publish reviews you choose to submit, shown with the name you provide.
- To detect and prevent fraud, spam, and abuse.
- To keep records we are required to keep, such as transaction and tax records.
If you are in a place where a legal basis is required, ours is performance of a contract for bookings and orders, legitimate interests for security and service improvement, and consent where you have given it.
4. Payments
Card payments are processed by Stripe. Your card number is entered directly into Stripe’s hosted fields and is never stored on our servers. We keep a record of the transaction, such as the amount, the last four digits, the date, and what it was for, so we can support refunds, receipts, and accounting. Stripe’s handling of your payment data is covered by their own privacy policy.
6. Email from us
We send transactional email: booking confirmations, receipts, replies to your messages, and anything important about a trip you have booked. If we ever send marketing email, every message will have a one-click unsubscribe, and opting out will not affect emails about a booking you already have.
7. How long we keep it
- Booking, order, and payment records: kept for as long as required for accounting and tax purposes, typically seven years.
- Contact form messages and support threads: kept while they are useful for support, then deleted.
- Reviews: kept while published, unless you ask us to remove yours.
- Server logs: kept for a short period for security and troubleshooting.
8. Your rights
Wherever you live, you can ask us to show you what we hold about you, correct it, or delete it. Depending on where you live, you may also have the right to a copy of your data in a portable format, to object to or restrict certain processing, and to complain to your local data protection authority.
For California residents: we do not sell or share personal information as those terms are defined by the CCPA, and we do not offer financial incentives in exchange for it. You will never be treated differently for exercising a privacy right.
To make a request, send us a message. We will reply within 30 days. We may need to verify who you are first, and we may have to keep records tied to a completed transaction even after a deletion request.
9. Children’s privacy
This site is meant for adults booking travel. We do not knowingly collect personal information from children under 13. Children are welcome on the tours themselves, but the booking should be made by a parent or guardian. If you believe a child has given us information directly, contact us and we will delete it.
10. Security
Traffic to this site is encrypted in transit. Payment card data goes straight to Stripe and is never stored by us. Access to booking data is restricted to the people who need it and to the operator running your tour. No system is perfect, and we will not pretend otherwise, but if a breach ever affects your personal information we will notify you as required by law.
11. Changes to this policy
If we change this policy we will update the date at the top of the page. For anything significant, we will make it obvious on the site rather than quietly editing the text.
12. Contact us
Questions about your data, a booking, or anything in this policy? Use our contact form and a person will get back to you, usually within a day.
See also our Terms of Service.