Privacy Policy

This Privacy Policy describes how Bishop Museum (“the Museum,” “we,” “us”) collects, uses, shares, and protects information when you use the Mary Kawena Pukui Society website at www.marykawenapukuisoc.org (the “Site”), including its planned-giving tools, illustrations, and the “Ask” assistant. By using the Site you agree to this Policy. If you do not agree, please do not use the Site.

1. Who we are

Bishop Museum is a 501(c)(3) nonprofit organization (EIN 99-0161980) located at 1525 Bernice Street, Honolulu, HI 96817. Questions about this Policy or your information may be sent to Liza.lee@bishopmuseum.org.

2. Information we collect

Information you provide

The Site is designed so that you choose what to share. We collect information only when you submit it through a form or type it into the Ask assistant:

• Gift intent form: your name and, optionally, email, phone, mailing address, the type of gift you have planned, an estimated value or percentage, an intended purpose, whether the gift is documented, whether you wish to join the Society, whether you prefer anonymity, and any notes you add.
• Bequest language and beneficiary tools: the gift type, amount or percentage, purpose, and custodian you enter are used in your browser to generate text. Nothing is transmitted to us unless you choose to “tell the Museum,” in which case we receive your name, email, and the gift details you entered.
• Stock gift inquiry and IRA (QCD) letter tools: your name, email, phone, mailing address, the security or custodian, share count or amount, estimated value, expected date, purpose, and notes. We do not request, and you should not enter, brokerage or IRA account numbers. Where a tool offers an optional account-number field for your own letter, that value is used only in your browser and is not sent to the Museum.
• Ask assistant: the questions you type, and, within a session, your prior questions and the assistant’s prior answers, which are sent along with each new question so the assistant can follow the conversation.
• Staff portal: Museum staff sign in with an email address and password. This portion of the Site is not available to the public.

Information collected automatically

The Site does not use advertising trackers, analytics pixels, or third-party marketing cookies. Our hosting provider records standard server logs (such as IP address, browser type, requested pages, and timestamps) to operate and secure the Site. We measure usage of the Site without identifying you: which pages are viewed and when, the website that referred you (domain only), any campaign tag in the link you followed (for example, which newsletter), whether the device is a phone or a desktop, and which tools are used. For the Ask assistant we record only which of the Museum’s published pages were consulted to answer — never your question. We do not record IP addresses, device identifiers, or session identifiers for this purpose, we set no cookies for it, and we honor Do Not Track and Global Privacy Control signals.

Cookies and browser storage

You may block or delete cookies in your browser settings; parts of the Site may not function if you do.

3. How we use information

• To respond to you — for example, to send stock transfer instructions you requested, to thank you for a planned gift, or to welcome you to the Society.
• To maintain accurate records of planned and pending gifts so that gifts can be matched, acknowledged, and honored as you intend.
• To generate the sample language, instruction sheets, and letters you ask the Site to prepare.
• To answer your questions through the Ask assistant.
• To operate, secure, troubleshoot, and improve the Site.
• To comply with law, and to establish, exercise, or defend legal claims.

We do not sell or rent your personal information, and we do not use it for third-party advertising.

4. The Ask assistant and automated processing

When you use the Ask assistant, the text you type is sent to third-party artificial-intelligence service providers to generate a response. Depending on availability, these providers may include Anthropic, OpenAI, and Google, and your question is also processed by Voyage AI to find relevant passages of the Museum’s published content. These providers process your text as our service providers and under their own terms; they may retain inputs for a limited period for security and abuse-prevention purposes. The Museum does not store transcripts of your Ask conversations on its own systems. Responses are generated automatically, may be inaccurate or incomplete, and are not reviewed by Museum staff before they are shown to you. No decision about you is made by automated means.

5. Who we share information with

We share personal information only as described here:

• Service providers who process information on our behalf and under contract, currently: Vercel (website hosting and server logs); Supabase (database hosting for form submissions and staff authentication); Resend (transactional email notifications to Museum staff); Anthropic, OpenAI, Google, and Voyage AI (Ask assistant processing, as described above).
• Museum staff and professional advisors who need the information to carry out the purposes above, including the Museum’s auditors, attorneys, and accountants.
• Legal and safety: when required by law, subpoena, or court order; to protect the rights, property, or safety of the Museum, our supporters, or others; or in connection with a merger, reorganization, or transfer of assets, subject to this Policy.

We do not share personal information with other charities or with commercial list brokers.

6. Retention

We keep gift-intent and gift-inquiry records for as long as needed to steward, match, and honor the gift, which for planned gifts may extend across many years, and thereafter as required by applicable law and the Museum’s record-retention practices. Server logs are retained for a limited period by our hosting provider. Ask transcripts are not retained by the Museum. You may ask us to delete information you have submitted, subject to the limits in Section 8.

7. Security

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including encryption in transit (HTTPS), access controls that restrict submitted records to authorized staff, and hosted infrastructure with industry-standard protections. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your choices and rights

• You may use the Site’s educational content, illustrations, and document tools without submitting any personal information.
• You may ask us to access, correct, or delete personal information you have submitted, or to stop contacting you, by emailing Liza.lee@bishopmuseum.org. We will respond within a reasonable time and may need to verify your identity. Certain records of gifts and pledges may be retained where required for accounting, legal, or audit purposes.
• You may withdraw a gift intent at any time; sharing a plan through this Site creates no legal obligation.
• Depending on where you live, you may have additional rights under applicable privacy laws. We honor such rights to the extent they apply, and we do not discriminate against you for exercising them.

9. Children

The Site is intended for adults planning charitable gifts. We do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted information, please contact us and we will delete it.

10. Links to other sites

The Site links to third-party websites, including financial custodians and the Museum’s other websites. Those sites have their own privacy practices, which we do not control.

11. Changes to this Policy

We may update this Policy from time to time. The effective date at the top reflects the latest version. Material changes will be indicated on this page. Your continued use of the Site after a change means you accept the updated Policy.

12. Contact

Bishop Museum
Attn: Liza Lee, Director of Individual Giving
1525 Bernice Street, Honolulu, HI 96817
Liza.lee@bishopmuseum.org