Archived version. This is the Privacy Notice, version 2.8, in force from 30 September 2026 to 18 October 2026. It has been replaced. Read the current version.

One policy, all four sites

Covers: tkscmlimited.com · lopsiii.com · findyummylove.com · tkscm.com, and every subdomain of each

The short version

• If you are only reading, we collect almost nothing about you, and nothing that identifies you. Our hosts count visits. We look at totals, not at people.
• If you write to us, we keep your name, email, message and the topic you picked for as long as it takes to deal with what you wrote about — and writing to us does not subscribe you to anything. A copyright notice is the exception: it is a legal record and we keep it.
• We do not promise a response time. We read everything.
• If you buy something, we need a name, an email and a delivery address. Payment details never reach us.
• We do not sell, rent, share or trade information about you. Ever, to anyone.
• There is no advertising on any of our sites, and we earn no advertising revenue.
• We will never require a telephone number from you.
• Ask us to delete what we hold and we will, as far as the law allows.
• If you ever pay us over a public ledger, we can delete our records — but nobody can edit a public ledger, including us. We never put your personal information on one.

1 · Who we are

tkscm, limited, a Hawaii limited liability company, operates all four sites and is responsible for the information described here.

Contact: theconduit@tkscmlimited.com · 1617 Kapiolani Blvd. #1203, Honolulu, HI 96814 · 808-272-2193

2 · What we collect, and when

2.1 Reading

We collect nothing that identifies you. No account, no profile. Our hosting platforms record ordinary technical information and count visits — see §3.

2.2 Writing to us

Our contact form asks you to choose what your message is about, and then for a name, an email address and a message. Nothing else, and never a telephone number.

The topic you choose is used only to route your message and to tell you what to include. It is stored with the message. The four choices are a general enquiry, a consulting enquiry, a privacy or data request, and a copyright notice.

We keep what you send for as long as it is useful to deal with what you contacted us about, and then we delete it — sooner if you ask, longer only where the law requires (§7). Two things do not follow that rule:

• A privacy or data request. We keep a record that you made it and what we did about it, because we have to be able to show we acted on it. That record outlives the request.
• A copyright notice. A notice sent to our designated agent is a legal document. We keep it, and any counter-notice, as a permanent record — we cannot delete it on request, because it is the evidence of what we were told and when.

For a copyright notice, the name you type is your electronic signature, because the law requires a notice to be signed. That is the only circumstance in which anything you type on our form is treated as a signature.

Writing to us does not subscribe you to anything. We will not contact you later about something unrelated to why you got in touch.

We do not promise a response time. We read everything that arrives. The one exception is a formal dispute notice, where §19 of the Terms of Service commits us to replying within 30 days.

2.3 Mailing lists

We do not operate a newsletter or mailing list, and we do not send marketing email.

2.4 Buying from findyummylove

To fulfil an order we need your name, email address and delivery address. For orders to South Korea we also need your Personal Customs Clearance Code, which Korean customs requires and which we pass to the carrier for that purpose alone.

Payment details never reach us. Card information goes directly to our payment processor. We see that a payment succeeded and nothing more.

2.4a Buying a design (buyout purchases)

Every original piece carries a Design, and buying the piece buys the Design. That makes the purchase a contract as well as an order, so we collect a little more:

• Whether you are buying as a business or as an individual. We ask because it decides which consumer-protection rules apply to your order. We use it for that, and for nothing else — it does not affect your price, and it is not used to profile you.
• If you buy as a business: the business name, its address, and a tax or registration number where an invoice requires one.
• A record of what you agreed to — the full text of the buyout terms as they read at that moment, the time, and the order they belong to.

We keep the terms text itself rather than a link to it, so that a later change to our terms can never alter the record of what you actually saw.

There is nothing to send us before a purchase. We do not ask for a business plan, a production forecast, or anything about what you intend to make. The sale does not require us to know, so we do not collect it.

What we publish after a sale. Sun keeps the right to show her own past work (Terms of Service §7A), so a sold piece is entered in The Chest, the record of work that has left us. An entry shows the piece — its photograph, title, registry mark and a short note — and when it was sold. It never shows your name, your contact details or the price. An entry may also carry a short location line such as “Private collection — Hawaiʻi.” We keep that line general, we never publish a street address or a city small enough to point to you, and we will change it or remove it if you ask.

2.5 Consulting clients

Engagements are governed by their own signed agreement, which carries confidentiality obligations stricter than this policy.

3 · What runs on each site

tkscmlimited.com — audited 2026-09-13

Runs on WordPress.com.

Counting visits. Google Analytics 4, added through Jetpack, in its most basic form — not configured to identify users, track purchases or record anything custom, and with IP anonymisation switched on. (Google Analytics 4 does not store visitors’ IP addresses in any case; an address is used briefly for an approximate location and then discarded.) Visit-level data is kept for two months, the shortest period Google offers. You can opt out across all websites using Google’s browser add-on at tools.google.com/dlpage/gaoptout. Alongside it, Jetpack Stats, provided by Automattic, counts views and referrers. Neither is connected to anything else and neither identifies you.

The Conduit form. Asks for a name, an email address and a message. What you send is stored on this site as well as emailed to us, so a request does not get lost. Handled as described in §2.2.

Spam filtering. Form submissions are checked by Akismet, run by Automattic — the content of what you send passes through their systems to be assessed. The form also records how long it took to fill in, as a signal that a person rather than a script submitted it.

Serving the pages. Automattic’s infrastructure delivers images and files (a content-delivery network), avatars (Gravatar), video where embedded (VideoPress), and fonts. Each receives a request from your browser in order to send you the file, and each keeps its own records under its own policy — which we do not control and cannot delete on your behalf.

Not in use: no mailing list · no site search service · no connected social accounts · no comments · no advertising.

lopsiii.com — audited 2026-09-13 · re-verified 2026-09-17

Runs on WordPress.com. This is the quietest of our sites, and there is very little to report.

Counting visits. Jetpack Stats only, provided by Automattic, which counts views and referrers. There is no Google Analytics on this site and no tracking cookies of any kind — we checked, and the site sets none.

No forms, no comments, no mailing list, no site search service, no advertising.

Fonts and images. Typefaces and images are served by Automattic, the company that hosts this site — the fonts from WordPress.com’s own font service, the images through its content-delivery network. Your browser requests each file from them, so they receive a request and keep their own records under their own policy. Nothing on this site is requested from Google. (Until 17 September 2026 some typefaces were loaded directly from Google Fonts. They are now hosted by WordPress.com and that request is gone.)

Spam filtering. Akismet, run by Automattic, is installed by our hosting platform and cannot be removed by us. Where a site has comments or a form it checks submissions, which means their content passes through Automattic’s systems. On this site there is nothing for it to check — its entire recorded activity here is one submission, in July 2026.

findyummylove.com — audited 2026-09-13 · re-verified 2026-09-17 · WooCommerce installed 2026-09-19

Runs on WordPress.com.

Shop software. WooCommerce is installed on this site. At the time of writing nothing is for sale; a single piece is announced for 19 December 2026. The supply shop is not open: its pages are private and send visitors to an information page, The Depot, and it takes no orders. WooCommerce runs on our own site — it is not a third party and your order information is not sent anywhere by it.

What WooCommerce does with your information. If you put something in a basket or place an order, WooCommerce keeps that on our site: what is in your basket, your name, your email address, your delivery and billing address, and what you ordered. It sets a small number of cookies that make the basket and the checkout work — they remember what you put in the basket and keep you attached to the right checkout session. They do not track you across other websites and they carry no advertising purpose. Blocking them will break the basket, which is the only thing they do.

Accounts. You do not need an account to buy from us. If we ever offer one, it will be optional and this section will say so first.

Payment details never reach us. Card information goes directly to our payment processor — PayPal, and Stripe where PayPal is not available. We see that a payment succeeded and nothing more.

Payment scripts, and exactly when they load. A page that has something for sale on it loads a small script from the payment processor so the payment button can appear. Your browser fetches that script directly from the processor, which means the processor learns your IP address and which page you are on — whether or not you buy anything. That is simply how the button works; there is no way to display it without your browser making that request.

On a page with nothing for sale, the script does not load and the processor receives nothing. This is a rule about what the page is offering, not a promise about particular pages — a page that has nothing for sale today and something for sale later will load the script only once it does. If you do buy, the processor handles the payment and the delivery address under its own policy, and we receive from it only what §2.4 describes.

Counting visits. Jetpack Stats only. No Google Analytics on this site.

Images and fonts. Images are delivered through Automattic’s content-delivery network. Typefaces are served by WordPress.com. No typeface on this site is requested from Google, so no font request tells Google that you were here.

Spam filtering. Akismet, installed by our hosting platform and not removable by us, as described above.

No comments · no mailing list · no site search service · no advertising.

Print partner. When the supply shop opens, supply items will be made and shipped by a print-on-demand partner. We have not chosen one, and no information about anyone is sent to one today. Before the supply shop takes its first order, we will name the partner here and in §6, together with what it receives: a delivery name and address, used to make and ship that order and for nothing else.

tkscm.com

Published on Blogger, which is operated by Google. Google’s own collection applies there, under Google’s privacy policy, and we neither control it nor can we delete it on your behalf. Confirmed present: Google Custom Search · Google Fonts (loaded directly, so your IP reaches Google on each page view) · a contact form collecting a name, email and message · an embedded TradingView market-data widget, which receives a request from your browser and operates under its own policy. A message sent through the contact form is delivered by Google to the site owner’s email. Where comments are open on a post, anything you write there is published by Blogger and held by Google under Google’s policy.

4 · Cookies and Do Not Track

Cookies our sites set. The analytics described in §3 set cookies to tell a repeat visit from a new one. Your browser can block or delete them; nothing on our sites stops working if you do.

Shop cookies on findyummylove.com. WooCommerce sets a small number of cookies that make the basket and the checkout work — they remember what is in your basket and keep you attached to the right checkout session. They are strictly functional: no advertising, no cross-site tracking, no profile. Block them and the basket stops working; nothing else changes.

Cookies we do not set. We run no advertising cookies, no remarketing pixels and no cross-site tracking of any kind.

Do Not Track. Some browsers can send a “Do Not Track” signal. We do not respond to it, and neither do the analytics providers described in §3. There is no agreed standard for what honouring it should mean, and we would rather tell you that than imply a protection we do not deliver.

5 · Advertising

There is no advertising on tkscmlimited.com, on lopsiii.com, on findyummylove.com, or on Sun’s personal and artistic work. That is a permanent commitment, not a description of current arrangements.

As of September 2026 we serve no advertising on any of our sites and earn no advertising revenue from any of them.

tkscm.com is published on Blogger, and Google may serve its own host-level advertising there. Those ads are not ours — we do not choose them, we are not paid for them, and we have no control over what appears.

5 bis · Who we do not advertise to

We run no advertising at all, so this is about who we do not go looking for.

We do not target advertising or marketing at anyone in the European Union or the United Kingdom, and we do not target children anywhere. Our sites are made for an adult readership.

That does not mean we turn away a reader in Paris or Manchester — anyone may read, and anyone in a country we ship to may buy. It means we do not aim promotion at those places or at children, and we do not build audiences for that purpose.

6 · Who else sees your information

We do not sell your information, and we do not share it for anyone else’s marketing.

7 · How long we keep things

Records of an order or payment: six years. That covers the three years Hawaii’s general excise tax law requires records to be kept, and the longest ordinary federal period during which a return may be examined.

Records of a design buyout — the terms you accepted, and when: for as long as we exist. The buyout carries a promise with no expiry: that we will never let anyone else produce that Design. A promise that lasts forever needs a record that lasts with it, and it is also your proof of what you bought. It stays a contract record and is never used for anything else.

Messages and form submissions: only as long as useful to deal with what you contacted us about, then deleted.

Copyright notices and counter-notices: permanently. A notice sent to our designated agent is a legal document. It is the record of what we were told and when we were told it, and we cannot delete it on request without destroying our own evidence (§2.2).

Records of a privacy or data request: kept after the request is closed. We keep what was asked, what we did, and when. We have to be able to show we honoured it — a deletion we cannot evidence is indistinguishable from one we never carried out.

Anything else: not kept.

7 bis · Payments made over a public ledger

We do not accept payment in digital currency today. If we ever do, this is how it works, and we would rather say it before than explain it after.

A wallet address is information about you. It does not carry your name, but it can often be connected back to a person once it is set beside other records — so we treat it as personal information, not as anonymous data.

What we can delete, and what nobody can. We can delete our copy of a wallet address and the payment record attached to it, and we will if you ask, subject to the tax records we are required to keep. We cannot change a public ledger. That record is not ours, we did not create it, and no one — us, you, or anyone else — can remove it. Anyone telling you otherwise is mistaken.

What we will never do. We will never write your name, email address, order number or any other personal detail into a ledger transaction, in a memo field or anywhere else. A payment to us records a transfer and nothing about you. We keep the connection between a payment and a person in our own records, where we can delete it.

8 · Your choices, and what we will do

Write to theconduit@tkscmlimited.com and we will: – tell you what we hold about you; – correct anything wrong; – delete it, without asking why.

We apply this identically for everyone, wherever you live.

The one honest limit: where a record must be kept for tax (§7), we cannot delete it until that period has run. We will tell you that plainly rather than quietly keep it, and we will delete everything else immediately.

What we cannot delete: our sites are served by other companies’ infrastructure, and those companies keep their own records under their own policies. We cannot reach into a content-delivery network’s logs or a search provider’s systems on your behalf. Where a provider offers its own opt-out we point you at it; where none exists we say so rather than promise something we cannot perform.

9 · Children

Our sites are not directed at children, and we do not knowingly collect information from anyone under 13. Our services are not sold to minors. If you believe a child has given us information, tell us and we will delete it.

10 · Readers and customers outside the United States

We are a small Hawaii business operating under United States law. Our sites are in English and our prices are in US dollars.

We do consult internationally, and our contact page says so. If you write to us from anywhere in the world we will read it. We do not promise a response time, to anyone, anywhere (§2.2). Goods are a different matter: we ship only to the destinations offered at checkout.

Anyone, anywhere, can ask us what we hold about them, ask us to correct it, or ask us to delete it — and we will, as far as the law allows. We do not ask where you live before honouring it, and nothing here gives someone abroad fewer rights than someone in Honolulu.

What we cannot honestly claim is a formal compliance programme under the European Union’s or the United Kingdom’s data protection rules. We are not established there, we have not appointed a representative there, and we do not operate the specific procedures those rules require. We would rather say so plainly than imply a protection we do not run. If we ever take on work that makes those rules apply to us, we will build to them properly and say so here first.

11 · Information leaving the country

Shipping to South Korea means your name, address and PCCC are transferred to Korean customs and carriers to clear the parcel. That transfer is necessary to deliver what you bought, and the information is used for nothing else.

12 · Security

We keep what we hold to a minimum, which is the most reliable protection there is. Our sites run on managed platforms that handle patching and encryption in transit. No system is perfectly secure, and we would rather say so than claim otherwise.

13 · Changes to this policy

Every version carries a version number and an effective date. Material changes are announced on the site before they take effect, and previous versions stay available at their own permanent addresses so you can see exactly what changed and when. We do not edit an old version in place.

14 · How we contact you, and how to reach us

We prefer email and messaging, and we work that way by default. Enquiries, quotes, order updates and delivery questions are handled in writing, so there is a record both of us can check.

We do have a business telephone line: 808-272-2193. We may use it where a conversation is genuinely faster, and you are welcome to call it.

We will never require a telephone number from you. No form on any of our four sites makes one mandatory in order to read, buy, enquire or engage us. If you give us one it is because you chose to, and we use it only to reach you about the thing you contacted us about.

One number, published here. 808-272-2193 is the only telephone number we use for business. A call from any other number claiming to be us is not us, and we will never ring you to ask for payment details, passwords or account access.

theconduit@tkscmlimited.com · 1617 Kapiolani Blvd. #1203, Honolulu, HI 96814 · 808-272-2193

Version 2.8 · effective 30 September 2026