Legal — Data Handling & Third-Party Transfer
Handling and Third-Party Transfer of Personal Data
This page sets out our approach where we outsource or transfer the handling of personal data to external providers in order to deliver services such as booking and payment. It supplements our Privacy Policy.
This is an English reference translation of the Japanese original. The Japanese version prevails in the event of any discrepancy.
1. Use of external services
We use services provided by external companies for booking management, online payment, email delivery, access analytics and similar purposes. In using these services, we may provide personal data, or entrust its handling, to the extent necessary to achieve the purposes of use.
- Booking platform: JTB BÓKUN (Bókun, a Tripadvisor group service, provided through JTB Corp.): to manage booking details and contact information
- Payment: Stripe (Stripe, Inc.): to process online payments and refunds (we do not retain card numbers or similar data)
- Email delivery: Resend (Resend, Inc.): to send booking-related notices and information about the Arimatsu Osanpo Kippu holder benefit and surveys
- Site infrastructure and abuse prevention: Cloudflare (Cloudflare, Inc.): to deliver this site, to receive and store form submissions, and for bot protection (Turnstile)
- Access analytics: Google Analytics (Google LLC): to understand site usage so we can improve our services (only where you have consented)
If our contractors or recipients change, we will update this page accordingly.
2. Information sent from your browser to external services
Some pages on this site embed features provided by external companies. Displaying them sends information from your device to those companies automatically. In accordance with the external transmission rules of Japan’s Telecommunications Business Act, we disclose what is sent and to whom.
- Google Maps (Google LLC, United States): used to show the map of the meeting point on each programme page, and the participating-shop map on the Arimatsu Osanpo Kippu page. The information sent includes your IP address, information about your browser and device, the URL of the referring page, and identifiers such as cookies set by Google. The map loads only when you scroll down to it, so nothing is sent if you do not reach that part of the page. Google handles the data it receives under the Google Privacy Policy.
- Booking widget (JTB BÓKUN — Bókun, Tripadvisor group): used on each programme page to show availability and take your booking. The information sent includes your IP address, information about your browser and device, the URL of the referring page, identifiers such as cookies set by the provider, and the name and contact details you enter when booking. The widget loads only when you scroll down to the booking section, so nothing is sent if you do not reach that part of the page.
- Payment (Stripe, Stripe, Inc., United States): connected from the booking screen to process your payment. Your card details are sent directly to Stripe and are not retained by us.
- Bot protection (Cloudflare Turnstile, Cloudflare, Inc., United States): used on the benefit claim form and the post-visit survey to prevent abusive automated submissions. The information sent includes your IP address, information about your browser and device, and identifiers set by Cloudflare.
- Access analytics (Google Analytics, Google LLC, United States): used to understand how the site is used. It loads only if you choose “Accept” in the banner shown on your first visit; nothing is sent otherwise.
3. Our approach to providing data
Where we provide or entrust personal data to an external party, we verify their purposes of use and their security management arrangements, and exercise the necessary and appropriate supervision. We limit the information provided to what is necessary to achieve the purpose.
4. Where data is transferred overseas
Of the services above, Stripe, Resend, Cloudflare, Google and Bókun are provided by companies based, or with servers, outside Japan. Providing data to them constitutes a transfer of personal data to a third party in a foreign country, so we check the personal data protection regime of the country concerned and the measures taken by the recipient, and handle the data appropriately in accordance with applicable law. If our recipients change, we will update this page accordingly.
5. Consent and choice
Given the nature of the service, handling personal data to the extent required for booking and payment is essential in order to provide it. Where information is optional, or where use is conditional on consent, we say so clearly and respect your choice.
6. Contact
For questions about this page or about the handling of personal data, please contact us using the details in our Privacy Policy or via our contact form.