PRIVACY POLICY

Basic Policy

FIRST CABIN HAWAII LLC (hereinafter referred to as "the Company", “we” or “us”) recognizes the management of our customers' personal information as a valuable privilege and is committed to ensuring its protection. We fully respect the principles of accuracy, fairness, legality, and transparency.

"Data" refers to any information that can be used to identify you as an individual. This includes, but is not limited to, your name, contact number, email address, postal address, age, gender, passport, driver’s license, or other identification document details and other personal information collected from you. By accessing or using our services, you are deemed to have agreed to the collection, storage, and use of your personal information as described in this Privacy Policy and our Terms of Service.

1. Information We Collect and Use

We collect the following categories of personal information to provide you with a personalized, convenient, and efficient experience:

  • • Reservation Information: Name, email address, postal address, phone number, fax number, and other personal details required to complete a reservation.
  • • Payment Information: Credit card numbers, billing addresses, bank account details, and, in some cases, credit status information.
  • • Accommodation Information: Check-in and check-out dates, purchased products and services, and details necessary for handling special requests.
  • • Demographic Data: Age, gender, and location.
  • • Communication Records: Correspondence and communication history between you and the Company.
  • • Website Usage Information: Behavioral data when using our website.
  • • Mailing List and Event Registration: Information provided when signing up for newsletters or events.
  • • Survey Participation Data: Data collected when participating in third-party surveys (subject to third-party privacy policies).
  • • App Usage Data: ID image data uploaded during check-in via mobile apps.
  • • CCTV and Security Systems: CCTV footage is retained for security purposes and is stored for 30 days, unless otherwise required by law or specific incidents necessitate longer retention. After the retention period, footage is securely deleted to protect privacy and comply with data protection regulations.

Additionally, we may collect:

  • • Email Links and External Websites: Links in our emails may redirect to external websites or social media platforms. Please review their privacy policies.
  • • Mobile Device Information: Unique identifiers from your mobile device when accessing our website.
  • • Third-Party Tracking: Behavior-based advertising may collect data via cookies or other technologies. You can manage these through browser settings or opt-out options.

We collect data for the following purposes:

  • • Processing reservations and purchases.
  • • Communicating with and providing support to customers.
  • • Improving services and enhancing customer experiences.
  • • Responding to employment inquiries and other requests.
  • • Providing marketing and promotional information.
  • • Internal management and customer relationship management.
  • • Using data for purposes described when collected, or with customer consent.
2. Access or Revision to Personal Data

A. Marketing Communications

If you wish to stop receiving promotional emails, click the "unsubscribe" link in the email. Non-promotional messages such as account confirmations or payment notifications cannot be unsubscribed.

B. Online Advertising

Third-party advertising networks may use cookies or tracking technologies. You may manage these through your browser or device settings.

C. Data Retention

We retain your data while your account is active. Your account is considered “active” if you have a valid account that is currently in use, such as when you have ongoing reservations or recent activity associated with your account. Even if your account is active, you may request deletion of your account or account information by contacting us at info@first-cabin.us. However, please note that while you have the right to choose whether to provide personal information to us, if you request to delete your account, or withhold or delete personal information that is needed to provide the requested services and products from us, you may not be able to use the requested services or products offered by us.

D. Deletion of User Content

To delete or anonymize posted content, contact us at info@first-cabin.us .

3. Information We Received from Third Parties

We may receive customer-related information from third parties, including publicly available information. Such data is used to provide services, send communications, confirm payments, issue notifications, and ensure security.

4. Information Security and Storage

A. Protection of Information. We take reasonable measures to protect data integrity and security but cannot guarantee absolute security. If a data breach occurs, we will respond promptly and appropriately.

B. Notice of Security Breach. In the event a Security Breach (as defined below) involving unauthorized access to and acquisition of unencrypted or unredacted records or data containing Personal Information (as defined below) where illegal use of the Personal Information has occurred, or is reasonably likely to occur and that creates a risk of harm to a person, notice will be provided to affected persons in the following manner, subject to the legitimate needs of law enforcement if informed by law enforcement of the need to delay notification to further a criminal investigation or prevent jeopardizing national security in compliance with Section 487N-2(c), Hawaii Revised Statutes, and necessary and appropriate countermeasures and corrective measures will be taken.

For purposes of this notice, “Personal information” is information about an individual that includes the person's first name or first initial and last name in combination with any one or more of the following data elements, when either the name or the data elements are not encrypted:

  • (1) Social security number;
  • (2) Driver's license number or Hawaii identification card number; or
  • (3) Account number, credit or debit card number, access code, or password that would permit access to an individual's financial account.

"Personal information" does not include publicly available information that is lawfully made available to the general public from federal, state, or local government records.

“Security breach” means an incident of unauthorized access to and acquisition of unencrypted or unredacted records or data containing personal information where illegal use of the personal information has occurred or is reasonably likely to occur and that creates a risk of harm to a person. Any incident of unauthorized access to and acquisition of encrypted records or data containing personal information along with the confidential process or key constitutes a security breach. Good faith acquisition of personal information by an employee or agent of the business for a legitimate purpose is not a security breach, provided that the personal information is not used for a purpose other than a lawful purpose of the business and is not subject to further unauthorized disclosure.

In the event a security breach involves more than one thousand persons at one time, we will notify in writing, without unreasonable delay, the State of Hawaii's Office of Consumer Protection and all consumer reporting agencies that compile and maintain files on consumers on a nationwide basis, as defined in 15 U.S.C. section 1681a(p), of the timing, distribution, and content of the notice.

The Notice will include information on:

  • (1) The breach incident in general terms;
  • (2) The type of personal information that was subject to the unauthorized access and acquisition;
  • (3) The general acts of the Company to protect the personal information from further unauthorized access;
  • (4) A telephone number that the person may call for further information and assistance, if one exists; and
  • (5) Advice that directs the person to remain vigilant by reviewing account statements and monitoring free credit reports.

The Notice to affected persons will be provided by one of the following methods:

  • (1) Written notice to the last available address the Company has on record;
  • (2) Electronic mail notice, for those persons for whom the Company has a valid electronic mail address and who have agreed to receive communications electronically if the notice provided is consistent with the provisions regarding electronic records and signatures for notices legally required to be in writing set forth in 15 U.S.C. section 7001;
  • (3) Telephonic notice, provided that contact is made directly with the affected persons; or
  • (4) If it would cost more than $100,000 to provide notice, or more than 200,000 people are affected, or if we do not have sufficient contact information or consent to provide notice in writing, electronic mail, or telephonic notice, for only those affected persons without sufficient contact information or consent, or if unable to identify particular affected persons, for only those unidentifiable affected persons, substitute notice may be provided by providing all of the following:
    • (A) Electronic mail notice when to the subject persons for whom we have an electronic mail address on file;
    • (B) Conspicuous posting of the notice on our website; and
    • (C) Notification to major statewide media.

C. Disposal. In accordance with law, we will take reasonable measures to protect against unauthorized access to or use of the information in connection with or after its disposal, including:

  • • implementing and monitoring compliance with policies and procedures that require the destruction of personal information, electronic media, and other non-paper media in a manner that the information cannot be practicably read or reconstructed; and/or
  • • describing procedures relating to the adequate destruction or proper disposal of personal records as standard procedure in the writings of the business entity, including requiring the shredding of hard copies of documents containing personal information, and collection of such documents in a specified collection facility for secure disposal.
5. Users Under 18

Our services are not intended for individuals under 18 years of age. We take reasonable steps to prevent the collection of data from individuals under 18. If we inadvertently collect such data, it will be securely deleted as soon as it is discovered.

6. Link to Third-Party Website

Users are advised to review the privacy policies of third-party websites, as we are not responsible for their practices.

7. Updates to this policy

We may revise this Privacy Policy as necessary. Important changes will be announced on our website, and for significant changes, we will obtain prior consent.

8. Contact Information

FIRST CABIN HAWAII LLC
2270 Kalākaua Ave, Suite 1400
Honolulu, HI 96815

Email Address: info@first-cabin.us

9. Last Revision Date

This policy was revised and applied in December 2024.