Privacy Policy

Controller

The controller responsible for personal data on mhfoundation5050.com is:

Puyallup Tribe
Tacoma / Fife, Washington, US
[email protected]

Privacy contact: [email protected]

Data held

• Technical data: IP address; the approximate geolocation implied by it; user agent; device category; which pages were opened; the referring address.
• Contact-form data: name, email address, topic and message, but only once you send the email that the form composes.
• Cookie choices: the setting saved from our cookie panel, held locally.

Purposes

• Keeping pages online and resisting abuse (necessary).
• Analytics, to understand which pages are read, if you allow it.
• Marketing and affiliate attribution, which tells referral partners a reservation came via mhfoundation5050; only with consent.
• Replying to people who email us.

Legal bases

Where the GDPR applies, we rely on legitimate interest for site operation and security, consent for analytics and advertising cookies, and pre-contractual steps you ask for when we answer correspondence.

Sharing with third parties

We share data only with providers that help us run the site (hosting, analytics) and, once you opt in, with affiliate networks, partner programmes and hotel reservation partners that log referrals. When you click through to a hotel, that hotel's own privacy policy then governs what it collects. We do not sell contact-form data.

Cross-border processing

Some vendors handle data in other countries. When the law calls for it, transfers lean on approved mechanisms, the EU model clauses among them.

Retention

Raw server logs roll off after at most 90 days. Aggregated analytics reports may stay for up to 26 months. Email threads are deleted no later than two years after the final exchange, unless a legal obligation demands longer.

GDPR rights

Readers covered by EU or UK data law can request a copy of their data, fix it, delete it, limit its use, take it elsewhere or object to how it is used. Consent given earlier can be pulled back whenever you like, and a supervisory authority near you will hear complaints.

CCPA / CPRA rights

People living in California may learn which categories of personal information mhfoundation5050 holds, have it corrected or erased, and say no to its sharing for cross-context behavioural advertising. mhfoundation5050 treats a GPC browser signal as exactly that refusal. Exercising a right costs you nothing and earns no worse service.

Minors

Adults planning trips are the audience. Nobody under 18 is targeted, and if a minor's message reaches the inbox we remove it once told.

Changes

When this policy changes we update the date below. Last revised October 2026.