Privacy Policy

Last updated: April 11, 2026

1. Introduction

Welcome to Ka Ute TravelOG ("we," "our," or "us"). We are committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal information. This Privacy Policy explains our practices regarding your data when you visit our website.

2. Information We Collect

2.1 Information You Provide

• Comments and contact form submissions
• Email addresses when you subscribe to our newsletter
• Any information you voluntarily provide through forms or communications

2.2 Information Automatically Collected

• IP address and location data
• Browser type and version
• Pages visited and time spent on our site
• Referring website information
• Device information

2.3 Cookies and Tracking Technologies

We use cookies and similar technologies as described in our Cookie Policy.

3. How We Use Your Information

• To provide and maintain our website
• To communicate with you about our content and services
• To analyze website usage and improve our content
• To comply with legal obligations
• To protect our rights and prevent fraud

4. Legal Basis for Processing

Under GDPR, we process your data based on:

• Consent: For marketing communications and non-essential cookies
• Legitimate Interest: For website analytics and essential functionality
• Legal Obligation: To comply with applicable laws
• Contract: To provide services you've requested

5. Data Sharing and Third Parties

We may share your information with:

• Service Providers: Hosting, analytics, and email services
• Legal Requirements: When required by law or to protect rights
• Business Transfers: In case of merger or acquisition

6. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including standard contractual clauses and adequacy decisions.

7. Data Retention

• Personal data: Retained only as long as necessary for the purposes outlined
• Analytics data: Up to 26 months (Google Analytics standard)
• Comments: Retained indefinitely unless you request deletion

8. Your Rights

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interests
• Portability: Receive your data in a structured format
• Withdraw Consent: Withdraw consent at any time

9. Children's Privacy

Our website is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will delete it immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

11. Complaints

If you believe we have not complied with data protection laws, you have the right to lodge a complaint with your local data protection authority.