Privacy Policy

Scope and Purpose

This Privacy Policy applies to all digital services operated by or on behalf of the Principality of Kaharagia, including but not limited to websites, applications, and online platforms accessible through kaharagia.org domains and associated services.

The purpose of this policy is to explain clearly what information, if any, is collected when you access these services, how such information is used, and the measures taken to protect it.

Data Stewardship

The Principality of Kaharagia operates under a principle of data minimisation. We collect only that information which is strictly necessary for the operation and security of our services.

The Office of Digital Government & Cybersecurity serves as the data steward for all Kaharagian digital services. Enquiries regarding data handling should be directed to the Office.

Categories of Information

Information We May Collect

Where technically necessary for the operation of our services, the following categories of information may be collected:

• Technical data: IP addresses, browser type, operating system, and similar technical information transmitted automatically when you access our services
• Access logs: Records of pages accessed, timestamps, and referral sources for security and diagnostic purposes
• Voluntary submissions: Any information you choose to submit through official communication channels

Information We Do Not Collect

The Principality of Kaharagia does not:

• Collect personal identification documents unless specifically required for official processes
• Track individual browsing behaviour across sessions for profiling purposes
• Gather financial information through policy information sites
• Collect sensitive personal data including health, religious, political, or biometric information
• Purchase, acquire, or otherwise obtain personal data from third parties

Use and Retention

Information collected is used solely for:

• Ensuring the security and integrity of our digital services
• Diagnosing technical issues and maintaining service availability
• Fulfilling official functions of the Principality where applicable
• Responding to enquiries submitted through official channels

Retention periods are determined by operational necessity. Technical logs are retained for a maximum of ninety (90) days unless required for ongoing security investigations. Voluntary submissions are retained only as long as necessary to address the matter for which they were submitted.

Sharing and Transfers

The Principality of Kaharagia does not sell, trade, or rent personal information.

Information may be disclosed only in the following circumstances:

• To infrastructure providers solely as necessary for service operation
• Where required by the laws of the Principality of Kaharagia
• Where required by applicable law in jurisdictions where services are hosted or accessed, subject to Kaharagian legal review
• To protect the security of Kaharagian digital services against active threats

Security Posture

The Principality of Kaharagia implements reasonable technical and organisational measures to protect information against unauthorised access, alteration, disclosure, or destruction.

These measures include:

• Encrypted transmission (HTTPS) for all public-facing services
• Access controls limiting data access to authorised personnel
• Regular review of security practices
• Selection of infrastructure providers with appropriate security standards

No method of transmission over the internet is entirely secure. Whilst we strive to protect information, absolute security cannot be guaranteed.

Rights of Participants

Individuals who have provided information to Kaharagian services may:

• Request confirmation of what information, if any, is held concerning them
• Request correction of inaccurate information
• Request deletion of information, subject to legitimate retention requirements
• Withdraw consent for processing where consent was the basis for collection

Requests should be directed to the Office of Digital Government & Cybersecurity through official channels.

Children and Minors

Kaharagian digital services are not intended for use by children under the age of thirteen (13). We do not accept registrations from, nor knowingly collect information from, individuals under this age.

Minors who are Kaharagian nationals are maintained in the National Register as part of official civil registration processes. This is distinct from voluntary use of digital services and is governed by separate legal frameworks concerning civil status records.

For individuals aged thirteen (13) to seventeen (17), access to certain services may be permitted subject to applicable legal requirements and parental or guardian consent where required by law.

Contact and Enquiries

Enquiries concerning this Privacy Policy or data handling practices should be directed to:

Office of Digital Government & Cybersecurity, Secretariat of State
digital@state.kaharagia.org

Enquiries will be acknowledged and addressed in a reasonable timeframe.

Changes to This Policy

This policy may be amended from time to time to reflect changes in our practices or applicable requirements. Material changes will be indicated by updating the "Last Reviewed" date and, where appropriate, providing notice through our services.

Continued use of Kaharagian digital services following the posting of changes constitutes acceptance of the revised policy.