Privacy
policy.

Who handles your data

HAVIKWAY operates this website and determines how personal data is used for the platform features described in this policy.

If HAVIKWAY later operates through a formally registered legal entity, the legal name, registration details and official business address should be added to this page.

Personal data we may process

The exact information processed depends on how you use the HAVIKWAY website. Not every visitor uses every feature.

Why information is used

HAVIKWAY may process personal data when it is necessary to provide a requested feature, maintain website security, manage a relationship with a supporter or respond to a communication.

• creating and operating user accounts;
• authenticating users and protecting sessions;
• processing donations, memberships or supporter records;
• responding to enquiries and messages;
• sending expedition updates when a visitor subscribes;
• preventing abuse, fraud and unauthorized access;
• maintaining technical logs and diagnosing failures;
• measuring website use where analytics consent exists;
• meeting applicable legal or administrative obligations.

Location data and live tracking

HAVIKWAY may collect expedition location data from GPS, satellite or related tracking systems. This information is operational expedition data and can be highly sensitive when it reveals a person's precise physical location.

Not every stored location point must be made public. Public location views may intentionally use a delay, reduced precision, privacy zones, time-based restrictions or complete temporary suppression.

A missing public point does not mean no movement occurred. Public tracking should not be used as an emergency service or as proof that a person is currently at a displayed point.

User accounts

When account functionality is used, HAVIKWAY may store account details such as name, email address, password hash, role, verification state, login timestamps and session information.

Passwords should not be stored as readable plain text. Account credentials are used for authentication and access control.

Users should keep their own credentials confidential and report suspected unauthorized access as soon as possible.

Newsletter and expedition updates

If you voluntarily subscribe to expedition updates, HAVIKWAY may process your email address for that purpose.

Newsletter information should not be used for unrelated marketing purposes unless an appropriate basis or separate consent exists.

Subscribers should be able to stop receiving non-essential email updates through an unsubscribe mechanism or by contacting HAVIKWAY.

Donations, memberships and supporters

When financial-support features are used, HAVIKWAY may keep records required to administer the payment, supporter relationship, membership status, refund request or financial reporting.

Payment-card or bank information may be processed directly by the selected payment provider rather than being stored by HAVIKWAY itself.

The exact data processed by an external payment provider is also governed by that provider's own privacy terms.

Cookies and browser storage

HAVIKWAY uses a cookie-consent system that separates necessary cookies from optional preferences, analytics and marketing categories.

Necessary cookies may be used for security, sessions and remembering privacy choices. Optional categories should only activate where the visitor has allowed them.

Hosting and service providers

HAVIKWAY may rely on third-party infrastructure or service providers for functions such as hosting, email delivery, payments, maps, satellite tracking or analytics.

These providers may process limited information where necessary to deliver their service. The specific providers used by the live website should be documented when integrations are activated.

How long information is kept

Personal data should be retained only for as long as reasonably needed for the purpose for which it was collected, for legitimate operational requirements, or where applicable rules require a longer period.

Different information may require different retention periods. For example, a temporary web session may expire quickly, while certain financial or security records may need to be retained longer.

Your privacy rights

Depending on the law applicable to your situation, you may have rights concerning personal data held about you.

Security

HAVIKWAY uses technical and organizational measures intended to reduce the risk of unauthorized access, disclosure, alteration or loss.

Examples may include password hashing, restricted administration access, session security, CSRF protection, secure transport over HTTPS and separation of sensitive configuration from public website files.

No online service can guarantee absolute security. Security measures should therefore be reviewed and improved as the platform develops.

Changes to this privacy policy

This policy may be updated when HAVIKWAY adds new platform features, changes service providers, introduces new payment or tracking integrations, or when legal requirements change.

The update date at the top of this page identifies the current published version.

Privacy contact

Questions about personal data, account information, location privacy, cookies or privacy rights can be submitted through the HAVIKWAY contact page.