1. We are committed to protecting the privacy and data of our clients, partners, and employees in accordance with GDPR.

At the Kīnā'ole Foundation Family of Companies, we place a high priority on protecting the privacy and data of our clients, partners, and employees. We are committed to complying with the GDPR, a comprehensive privacy law that sets guidelines for the collection, use, and processing of personal data. Our commitment to GDPR compliance means that we strive to maintain the highest standards of data privacy and security, ensuring that our stakeholders can trust us with their personal information

• 2) We collect personal data through various means and use it only for the purposes for which it was collected or as otherwise authorized by law.

We collect personal data from our clients, partners, and employees through various means, such as our website, email, phone, or other channels. We also collect personal data through automated means, such as cookies, when visitors interact with our website. We ensure that personal data is collected only for specific, legitimate purposes and is not processed in a manner that is incompatible with those purposes. We do not share personal data with third parties, except as necessary to fulfill our legal or contractual obligations or as authorized by law.

• 3) We take appropriate measures to safeguard personal data against unauthorized access, disclosure, alteration, or destruction and provide individuals with the right to access, correct, or delete their personal data.

We take appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. We also provide individuals with the right to access, correct, or delete their personal data, as well as the right to object to the processing of their personal data and to withdraw their consent at any time. We have implemented policies and procedures to ensure that personal data is processed securely and that our employees are trained to handle personal data in a responsible and confidential manner.

Personal Data Collection

We may collect personal data through various means, including when you:

• Contact us through our website, email, phone, or other channels;

• Sign up for our newsletter, events, or promotions;

• Apply for a job with us;

• Participate in surveys, contests, or other marketing activities.

The types of personal data we may collect include:

• Name, address, and contact details;

• Employment history and education;

• Financial information;

• Government-issued identification documents;

• Information about your interests and preferences.

We may also collect personal data through automated means, such as cookies, when you visit our website. For more information on our use of cookies, please see our Cookie Policy.

Use of Personal Data

We may use personal data for the following purposes:

• To provide you with information, products, or services that you have requested from us;

• To administer and manage our relationships with clients, partners, and employees;

• To comply with legal or regulatory requirements;

• To improve our products, services, and marketing activities;

• To protect our rights and interests.

We will only use personal data for the purposes for which it was collected or as otherwise authorized by law.

Disclosure of Personal Data

We may disclose personal data to the following parties:

• Our affiliated companies, subsidiaries, and third-party service providers who process personal data on our behalf;

• Legal or regulatory authorities, as required by law;

• Third parties in connection with a merger, acquisition, or sale of our assets.

We will only disclose personal data to third parties for the purposes for which it was collected or as otherwise authorized by law.

Data Security

We take appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Limiting access to personal data to authorized personnel only;

• Implementing physical, electronic, and procedural safeguards to protect personal data;

• Regularly monitoring and testing our security measures;

• Conducting periodic data protection impact assessments.

Your Rights

You have the right to access, correct, or delete personal data that we hold about you. You also have the right to object to the processing of your personal data and to withdraw your consent at any time.

To exercise these rights, please contact us using the contact information provided below.