Privacy Policy

This Privacy Policy explains how TurtleTownMaui.net collects, uses, shares, and protects information when you visit the website, submit a contact form, use privacy controls, or follow an external link.

Effective date: September 28, 2026 Last updated: September 28, 2026

Who is responsible for your information?

The operator of TurtleTownMaui.net is responsible for personal information collected directly through this website and acts as the data controller where applicable.

You can contact the site operator or submit a privacy request through the contact page.

Tour operators, Viator, Tripadvisor, map providers, analytics providers, hosting companies, and other external services process information under their own roles and privacy policies.

Scope of this policy

This policy applies to TurtleTownMaui.net and the information the site controls.

It does not govern:

• A Viator or other booking account
• A tour operator's reservation records
• Payment information entered on another website
• A third-party map, video, social network, or embedded service
• Communications sent directly to a tour operator or government agency

When you follow an external link, review that service's privacy policy and terms.

Information we collect

Information you provide

When you use the contact form, we may collect:

• Name, if provided
• Email address
• Selected contact topic
• Page URL
• Message contents
• Privacy acknowledgment
• Any other information you choose to include

Do not submit payment-card details, passport information, government identification, passwords, complete booking documents, or detailed medical records.

Technical and usage information

The website and its service providers may automatically receive:

• Internet Protocol address
• Browser and device type
• Operating system
• Language and approximate region
• Referring and exit pages
• Pages viewed and interaction events
• Date, time, and session information
• Error, security, and performance logs
• Cookie and consent identifiers

Approximate location may be inferred from an IP address. The site does not request precise device location for its ordinary public-guide functions.

Affiliate-link information

Affiliate links may contain identifiers or campaign parameters that allow the booking platform to attribute a visit or qualifying booking to TurtleTownMaui.net.

The site may receive aggregated or transaction-level reporting such as:

• Link or campaign identifier
• Click or referral date
• Product or destination category
• Booking status
• Commission amount
• Limited transaction reference supplied by the affiliate platform

TurtleTownMaui.net does not receive the full payment-card details entered during a third-party booking.

Cookie and preference information

The website may store or read cookies and similar technologies for security, essential operation, consent choices, analytics, performance, and affiliate attribution.

How we use information

We may use information to:

• Operate, secure, and maintain the website
• Deliver pages and remember privacy preferences
• Respond to contact messages and privacy requests
• Investigate corrections, broken links, and access updates
• Measure page performance and understand aggregate usage
• Detect spam, fraud, abuse, and technical problems
• Attribute affiliate referrals and reconcile commissions
• Improve content, navigation, accessibility, and tour comparisons
• Keep records required by law
• Establish, exercise, or defend legal claims

We do not use a contact submission to add you to a marketing list unless you make a separate, informed choice to subscribe.

Legal bases for processing

Where the General Data Protection Regulation, United Kingdom data-protection law, or a similar framework applies, processing may rely on:

Consent

Consent may support optional analytics, advertising-related technologies, marketing communications, or another nonessential use. You may withdraw consent through the site's privacy controls or contact process. Withdrawal does not affect processing that was lawful before withdrawal.

Legitimate interests

Legitimate interests may support website security, fraud prevention, service improvement, basic audience measurement, responding to ordinary correspondence, and maintaining editorial records, provided those interests are not overridden by your rights.

Contract or steps you request

Processing may be necessary to respond when you ask for information or request a specific action through the contact form.

Legal obligation

Information may be processed or retained to comply with law, tax, accounting, regulatory, or valid legal-process requirements.

Cookies and similar technologies

Strictly necessary

These technologies support security, load balancing, form operation, fraud prevention, consent storage, and other functions needed to provide the website. They cannot always be disabled through the site's preference control.

Preferences

Preference technologies remember choices such as language, display state, or dismissed notices.

Analytics

Analytics technologies help measure visits, page use, device categories, performance, and errors. Where consent is required, these technologies remain inactive until consent is given.

Affiliate and advertising-related technologies

Affiliate links and external booking platforms may use cookies or similar identifiers to attribute referrals and bookings. Some jurisdictions may classify certain cross-site technologies as targeted advertising, sale, or sharing of personal information.

Where required, the site provides consent or opt-out controls before using nonessential technologies.

Managing privacy choices

You can use the site's privacy-choices control to review or change optional cookie categories. You can also:

• Adjust browser cookie settings
• Delete stored cookies
• Use browser tracking-protection features
• Send a supported Global Privacy Control signal
• Avoid optional embedded content
• Contact us about a privacy request

Blocking cookies may affect preferences, forms, affiliate attribution, and some website functions.

Browser controls do not automatically remove information already retained for a separate lawful purpose.

Analytics

The site may use an analytics provider to understand aggregate traffic and improve content. Depending on the deployed configuration, analytics may receive online identifiers, device information, page interactions, approximate region, and referral information.

The website is configured to:

• Avoid collecting unnecessary personal fields
• Disable optional analytics until consent where required
• Use available IP-reduction and retention controls
• Prevent contact-form content from appearing in analytics events
• Prevent full URLs containing personal data from being collected

The live cookie or service list identifies the deployed analytics provider and links to its privacy information.

Affiliate links and Viator

The site uses affiliate links to external booking pages, primarily on Viator. When you follow an affiliate link:

• The destination receives the request and related technical information.
• Link parameters may identify TurtleTownMaui.net as the referral source.
• The platform may set or read cookies under its own policies.
• A qualifying booking may generate commission for this site.
• Your booking and payment are handled by the external platform and operator.

Read the affiliate disclosure and the destination's privacy and cookie policies before booking.

Maps, media, and external content

The site may link to or display content supplied by map, video, image, weather, or other services. An embedded service can receive technical information as soon as it loads.

Where practical, nonessential third-party embeds use a click-to-load or consent-controlled design. A static image and ordinary external link may be used when an embed would disclose more information than necessary.

How we share information

We may disclose information to:

Service providers

Providers may process data for hosting, content delivery, security, backups, form delivery, spam prevention, analytics, maintenance, and privacy-request support. They receive only what is necessary for their assigned service.

Affiliate and booking platforms

Referral information may be sent when you choose an affiliate link. The destination processes the visit and booking under its own policy.

Professional advisers

Information may be disclosed to legal, tax, accounting, security, or insurance advisers when reasonably necessary.

Authorities and legal process

Information may be disclosed when required by law, court order, valid legal process, or to protect rights, safety, and security.

Business transition

If the website or its operating business is sold, reorganized, or transferred, relevant information may be included subject to applicable law and appropriate notice.

We do not publish contact-form messages as testimonials without a separate lawful basis and appropriate permission.

Selling or sharing personal information

TurtleTownMaui.net does not sell personal information for money.

Some privacy laws define “sale,” “sharing,” or targeted advertising broadly enough to include certain analytics, advertising, or cross-site affiliate technologies. Where those definitions and obligations apply, the site provides the required privacy control, honors supported Global Privacy Control signals, and processes verified opt-out requests.

Use the site's Privacy Choices control or the contact page to submit an applicable request.

Data retention

Information is kept only as long as reasonably necessary for the purpose collected, security, legal obligations, or dispute resolution.

The retention schedule is:

Data may be deleted earlier when it is no longer needed or kept longer when law, fraud prevention, security, or a legal claim requires it.

International transfers

The website may be accessed globally, and service providers may process information in countries outside your residence.

Where required, international transfers use an approved safeguard such as an adequacy decision, contractual clauses, or another lawful mechanism. No transfer method can eliminate all risk.

Security

Reasonable administrative, technical, and organizational measures are used to protect information. These may include encrypted transmission, access controls, updates, backups, spam filtering, logging, and provider review.

No website, storage system, or transmission method is completely secure. Do not submit unnecessary sensitive information.

Your privacy rights

Rights depend on your location and the law that applies. They may include:

• Access to personal information
• Correction of inaccurate information
• Deletion
• Restriction of processing
• Objection to processing
• Data portability
• Withdrawal of consent
• Opt-out from certain sale, sharing, or targeted advertising
• Appeal of a denied request where applicable
• Complaint to a data-protection or consumer-protection authority

Submit a request through the contact page and choose “Privacy request.” Describe the right you want to exercise and the information or interaction involved.

We may need to verify your identity and authority. We will not ask for more information than reasonably necessary. Authorized agents may be required to provide proof of authority.

European Economic Area and United Kingdom

If applicable, you may exercise the rights described above and complain to your local supervisory authority. The European Commission publishes information about data-protection rights, including access, correction, erasure, restriction, objection, portability, and consent withdrawal.

The site responds within the period required by the applicable law, subject to permitted extensions and identity verification.

California privacy notice

California residents may have rights under the California Consumer Privacy Act as amended, depending on whether the law applies to the site operator and the processing involved.

Potential rights include:

• Knowing the categories and specific pieces of personal information collected
• Knowing sources, purposes, and recipient categories
• Deletion
• Correction
• Opt-out of sale or sharing
• Limiting certain use of sensitive personal information
• Non-discrimination for exercising privacy rights

The site does not intentionally collect sensitive personal information for the purpose of inferring characteristics. Do not send sensitive information through the contact form.

Use the Privacy Choices control or contact form for an applicable California request.

Children

TurtleTownMaui.net is a general travel-planning website intended for adults. It is not directed to children, and the site does not knowingly collect personal information directly from children under 13.

Where a higher age threshold applies to consent-based processing, the site follows that requirement. A parent or guardian who believes a child submitted personal information may contact us to request review and deletion.

Do Not Track and Global Privacy Control

Browsers may transmit Do Not Track or Global Privacy Control signals. There is no universal response standard for Do Not Track.

Where applicable law requires recognition of Global Privacy Control as an opt-out signal, the site honors it for the browser or device sending the signal.

Changes to this policy

This policy may be updated when the website, service providers, data practices, or law changes. The revised page will show a new “Last updated” date.

When a change materially affects how previously collected personal information is used, additional notice or consent will be provided when required.

Contact

Submit privacy questions and requests through the contact page and select “Privacy request.”

Do not include payment-card numbers, passwords, passport information, government identification, complete booking documents, or detailed medical records in the initial message.