Privacy Policy

Who we are and what this policy covers

Hoʻāla Design operates in California and Hawaiʻi. This policy explains how we handle personal information through hoaladesign.com, our contact and booking forms, our chat and voice agents, and related communications, payments, and services.

For privacy questions or requests, email [email protected] or use our contact page. This policy describes our own business. A business using systems we build for it is responsible for explaining its own practices to its customers.

Information we collect

• Information you provide: your name, email address, phone number, business name, industry, service interests, appointment details, and information you include in an inquiry.
• Conversation information: saved chat messages, voice-conversation transcripts, and details needed to respond, arrange a booking, or route your request to a person.
• Payment information: billing and transaction information associated with payments processed through Stripe. Stripe processes payment credentials under its own applicable terms and privacy notices.
• Website information: online and cookie identifiers, device and browser information, pages visited, referral information, interactions, and approximate location information processed through our website and connected services.

Information comes directly from you, from your interactions with our agents and services, and automatically through website technologies. Please provide only information relevant to your request.

How we use information

We use information to answer inquiries, understand the support you are requesting, arrange appointments and follow-up, provide agreed services, process payments, maintain necessary business records, and protect our systems. We also use website and connected Google measurement tools to understand site activity and the effectiveness of communications and advertising.

Submitting an inquiry does not add you to an unrelated promotional mailing list. Our direct follow-up concerns your inquiry, booking, or agreed service. We do not rent or sell your contact information to other businesses for their marketing, or provide your chats or transcripts to other businesses for that purpose.

Chat, voice processing, and saved records

Malia’s chat conversations are saved. Kai’s voice conversations are transcribed, but audio is not retained as a recording for later playback.

Processing voice to respond is different from retaining an audio recording. A voice agent must receive and process your speech to understand it, produce a response, and route the conversation when needed. That live processing takes place even when no audio recording is kept afterward.

A transcript is a saved text record of the conversation. The absence of a retained audio recording does not mean that no conversation record exists. Transcripts and chat messages are handled under the retention and deletion practices below.

Regular business calls may be answered by an AI voice agent and routed to a live person. If a call uses retained audio recording, notice is given when recording is introduced and any consent required by applicable law must be obtained before recording. This policy is not a substitute for notice and consent during the interaction.

If you do not want to use voice processing or have a voice conversation transcribed, contact us by email instead. Do not begin or continue a voice interaction if you do not wish to use that channel. AI responses can contain errors; you may ask to speak with a person or email us to clarify information.

Providers that process information

Operating the website and responding to you requires services provided by other companies. Relevant information is processed through these services:

• GoHighLevel / LeadConnector: website and CRM functions, forms, booking, messaging, chat, voice-agent operation, and call routing, including the communications and AI providers supporting those functions.
• Stripe: payment processing and related billing, fraud-prevention, and transaction functions.
• Google: Analytics and connected advertising and measurement services. The site also uses Google-hosted fonts.
• Hosting, content delivery, email, and communications providers: delivering the site, its assets, and the communications needed to respond to you.

Service-provider processing is different from giving another business your contact list for its own marketing. Some providers, including Google and Stripe, also process certain information for purposes described in their own privacy notices. See HighLevel’s privacy information, Stripe’s privacy policy, and how Google uses information from sites that use its services. HighLevel acts as a processor for customer information we manage through its platform; our policy governs our instructions and practices for that information.

Information may also be disclosed when legally required or reasonably necessary to address fraud, security threats, legal claims, or the rights and safety of people affected by our services.

Cookies and connected Google services

Website services may use cookies, local storage, and similar technologies for functionality, security, analytics, and connected advertising measurement. Google may receive online identifiers, page and interaction information, device information, and IP-address information through its services. Depending on account, browser, consent, and advertising settings, information may be associated with other activity and used to measure or personalize advertising.

Disclosing identifiers or browsing activity for cross-context behavioral advertising can count as “sharing” under California privacy law, even without selling a contact list or receiving money. Our statement about not selling or renting your contact information is not a claim that connected advertising tools never receive website information.

You can manage cookies through your browser, review Google’s advertising preferences, or use Google’s Analytics opt-out browser add-on where supported. These tools have different scopes; changing advertising preferences does not necessarily stop analytics, and blocking cookies can affect site features.

To request that we stop advertising-related use or disclosure of information associated with you, email [email protected]. Include enough information for us to locate the relevant records without sending unnecessary sensitive information. An email request does not itself block a tag already running in your browser; browser and website tracking choices operate separately from changes to your contact record.

Retention, archiving, and deletion

We keep inquiry and conversation records active for one year after the last response or contact. After that period, records are archived so they are not used to restart outreach.

Archiving is not deletion. Archived records remain stored. You may request deletion of active or archived information. Our one-year inquiry schedule does not require deletion of payment, accounting, contractual, or other records that must be kept for legal obligations or resolving outstanding matters.

When we complete a deletion request, we send an email confirming what was deleted. If limited information must be retained, we explain the applicable reason and scope rather than stating that every record has been erased. Where necessary to honor a request not to be contacted, a minimal suppression record may be retained solely for that purpose. It is not used to resume marketing or outreach.

Your choices and requests

You can ask us to explain what personal information we hold about you, provide access to it, correct inaccurate information, delete it, or stop contacting you. Send your request to [email protected] or through our contact page. We may need to verify your identity or authority before disclosing or changing records.

We handle requests subject to applicable legal requirements and exceptions. Depending on the law that applies to you and to our business, you may also have rights to obtain a portable copy, opt out of sale or sharing or targeted advertising, limit certain uses of sensitive information, or act through an authorized agent. We will not discriminate against you for exercising applicable privacy rights.

A request to stop follow-up is different from a request to delete a record. You can ask for either or both. To stop inquiry-related SMS messages, reply STOP; you may also email us. Message and data rates may apply. Stopping messages does not by itself delete existing records.

Security and processing locations

We use safeguards appropriate to the information and systems involved, but no internet transmission or storage system can be guaranteed completely secure. Our technology providers may process or store information in the United States and other locations where they operate, subject to applicable requirements.

Children’s information

Our business services are intended for business owners and their adult representatives, not children under 18. We do not knowingly seek personal information from children under 18. If you believe a child has provided information, contact us so we can address it.

Changes to this policy

We post updates on this page and revise the date above. If a material change requires additional notice or consent, we will provide it as required before applying that change. An update to this policy does not itself supply consent where consent is required.