Privacy policy

1. What we collect

What you give us

• To make an account: your name as you want it shown, and your email address. Your password is stored in a protected form that cannot be turned back into the password, so nobody here can read it, including us.
• If you had an account on our earlier media site: we carried over your email address and your password, in the same protected form, so you can sign in as before. Your email address is used as your name until you change it on your account page.
• To donate: your name, your email address for the receipt, and the note if you write one. A donation does not need an account.
• When you write to us: whatever is in your message.

What using the service creates

• Purchases: which video, the amount and currency, how long the access lasts, the date, and the payment processor's reference for it. You can see all of this on your purchase history.
• Refunds of a purchase or a donation: how much, when, the reason we gave the payment processor, a short note from the member of staff who made it, and whether the video was taken out of your library. They are part of the payment record and are kept with it.
• Your library: which videos you have access to, and when that access starts and ends.
• Categories you follow, and when you last looked at your alerts - that is how we know what is new for you.
• Notifications, if you turn them on: the details your browser or phone gives us so a notification can reach it, and the type of browser. Turning notifications off removes them.
• Sign-in facts: when your account was made and last used, and the failed sign-in attempts we use to protect it. If your account came across from the earlier Aloha Hula Supply site, we keep a note that it did.
• Ordinary server logs: the pages requested, the time, and the IP address they came from. We also use IP addresses briefly to protect sign-in and password forms from abuse.

People featured in our videos

The teachers, performers and others who appear in our videos can have a profile on Our Pasifika: their name, photo, a short biography and links to their own websites and social media. We publish a profile only after they have agreed to it, and they can ask us to change it or take it down at any time. Contact details we keep to arrange their work with us are for our staff only and are never published.

What we don't collect

We do not collect your card number, we do not build a profile of you, we do not track you across other websites, and we use no advertising or analytics tools of any kind. We do not record what you watch beyond what your library and your purchases already say.

2. Why we use it

• To give you an account, and to keep you signed in.
• To sell you a video and to give you access to it - the reason we have the purchase record at all.
• To send the emails a transaction needs: confirming your address, your receipt, a password reset.
• To send the alerts and the weekly email about new videos, if you asked for them.
• To answer you when you write to us.
• To improve our content - see below.
• To send the tax receipt a donation needs, and to keep the records of donations that a 501(c)(3) organization is required to keep.
• To keep accounts and payments safe, and to meet our tax and accounting obligations.

If you are in the UK or the EU: we rely on performing our contract with you for your account and your purchases, your consent for notifications and the weekly email (which you can withdraw at any time), our legitimate interests in keeping the service secure and in improving what we make, and our legal obligations for financial records.

Improving our content

Our Pasifika exists to share the work of teachers and families, and we want to make more of what people find worthwhile. So we use the information we already hold to decide what to film, what to bring back and what to do better. That includes:

• which videos are bought and saved, and which are passed over;
• which categories people follow;
• the notes left with donations, and what you tell us when you write to us;
• what people search for, from the search requests that reach our server.

We look at this across everyone, not at you in particular: the question is "which workshops do people want more of", never "what did this person do". It does not change what we collect - everything used for it is listed above - and it is never used to advertise to you, never shared with the teachers or anyone else in a form that identifies you, and never sold. We may share what we learn in summary, such as how many people bought a teacher's workshop, with the teachers and families whose work it is.

3. Cookies, and what is kept in your browser

There is no cookie banner on this site because there is nothing to consent to: everything below is needed for the site to work, and none of it follows you anywhere.

• A sign-in cookie - keeps you signed in. It stays for up to 30 days while you keep using the site, and signing out removes it.
• A security cookie - stops another website from sending a form as if it were you.
• A short-lived message cookie - carries a one-line message to the next page, such as "Your account has been deleted", and is removed as soon as it has been shown.
• Your recent searches - kept in your own browser so the search box can offer them back. The list stays on your device - though each search itself is, of course, sent to us to find the results. Clearing your browser data removes the list.
• Display preferences - small notes that last only while the tab is open, so the page's animation doesn't restart on every page. They stay on your device.

The app keeps you signed in in a similar way, inside the app itself.

4. Who else is involved

We use a small number of companies to do things we cannot do ourselves. Each gets only what it needs, and none of them may use it for their own marketing.

• A payment processor. You enter your card details into the processor's own secure form; they go to the processor, not to us. We keep its reference for each payment, and a reference that keeps your saved cards yours. All we ever see of a card is its brand, last four digits and expiry date - never the number.
• An email delivery service, which sends our emails. It gets the address and the message.
• A video hosting service, which delivers the videos. When you press play, your device fetches the video from it, so it sees that request and your IP address. It is not told who you are on our service.
• A web font service, which supplies the typefaces the site uses, and sees the request and your IP address.
• Notification services run by your browser or phone maker - only if you turn notifications on. The message content is encrypted on its way through.
• Our hosting provider, where the site and its data are kept.

We will also hand over information if the law requires it, and we would tell you unless we are forbidden to. If the service is ever sold or transferred, accounts go with it, and these promises go with them.

These companies are in the United States, so information about you is processed there.

5. Emails, and how to stop them

Some emails come with having an account and cannot be turned off: confirming your address, your receipts, and a password reset you asked for.

Everything else is something you asked for. The weekly email about new videos, and the alerts in the site and on your devices, only go to people who follow a category, and only about the categories they follow. Unfollow a category on its own page and they stop for it; unfollow them all and they stop altogether. Browser and phone notifications also need your permission first, and you can turn them off in your browser or phone settings at any time.

We do not send marketing email to people who have not asked for it, and we do not pass your address to anyone who would.

6. How long we keep it, and deleting your account

You can delete your account yourself from your account page. Here is exactly what that does, because vagueness here is not useful to anyone:

• Removed at once: your library and your access to every video, your password, the categories you follow, your notification subscriptions on every browser and device, and any cards you saved with our payment processor.
• Replaced: your name and email address on your account, with a meaningless placeholder. Your account can no longer be signed into.
• Kept, with no name on it: the record that you bought a video - which one, the amount, the date and the payment reference. We keep those for tax and accounting.
• Kept, with your name on it: your donations. As a 501(c)(3) organization we are required to keep a record of who gave, how much and when, so a donation keeps your name and email address for as long as tax law requires. The note you left with a donation is removed.
• Our payment processor keeps its own record of your payments under its own policy.

Other than that: a donation made without an account is kept the same way, for the same reason; server logs are kept for no longer than 90 days; a notification subscription is dropped when it stops working or you turn notifications off. The links we email you - confirm your address, reset your password - are not stored at all, and stop working on their own after a short time.

7. What you can ask for

• See it. Most of it is already on your account page, your library and your purchase history. Ask and we will send you the rest.
• Correct it. Your name and email are yours to change on your account page.
• Delete it. The account page does it, or ask us and we will - except for the records the law requires us to keep, which are the payment and donation records described above.
• Take it with you. Ask and we will send your account, purchase and library records in a plain machine-readable file.
• Object, or withdraw consent for notifications and the weekly email, at any time.

Write to us to use any of these - see how to reach us. We will answer within 30 days, and we will not treat you differently for asking. If you are in California: we do not sell or share personal information, and we have not in the past twelve months. If you are in the UK or the EU, you may also complain to your data protection authority.

8. Children

Our Pasifika is not for children under 13, and we do not knowingly collect anything from them. Families watch together here, which is welcome - the account simply has to belong to an adult. If you believe a child under 13 has made an account, tell us and we will delete it.

9. How it is protected

• Passwords are stored in a protected form, never as text.
• Everything between your device and the site is encrypted in transit.
• Changing your password or deleting your account signs you out everywhere.
• The credentials for the services we rely on are stored encrypted.
• Access to our systems is limited to a few people, and changes they make are recorded.

No service can promise perfect security. If something happens to your information that puts you at risk, we will tell you and the authorities we are required to tell.

10. Changes to this policy

If we change this policy we will change the date at the top, and if the change is significant we will email account holders. We will not start using what we already hold for a new and unrelated purpose without asking you.

11. How to reach us

For anything about your information, or to use one of the rights above:

Our Pasifika media@ourpasifika.com Our Pasifika 4369 Lawehana Street, A2 Honolulu, HI 96818

See also our terms of use, which cover what you may do with the videos.