Privacy Policy

1. Principles of Processing Personal Data

The Company shall process personal data in accordance with the following principles:

• lawfully, fairly, and in a transparent manner;
• only for specified, explicit, and legitimate purposes;
• only to the extent necessary for those purposes;
• accurately and, where necessary, kept up to date;
• retained only for as long as necessary; and
• protected by appropriate technical and organisational measures.

2. Categories of Personal Data

The Company may process the following categories of personal data:

For representatives of business partners

• name, company name, department, and job title;
• business address, telephone number, and e-mail address; and
• inquiry, quotation, booking, contract, billing, and communication records.

For travellers whose information is provided by business partners

• name, nationality, age or date of birth, and contact details;
• itinerary, accommodation, transportation, flight, and booking information;
• emergency contact information; and
• dietary restrictions, allergies, mobility assistance, and other special requests, only where necessary to provide the requested services.

3. Purposes of Processing Personal Data

The Company processes personal data for the following purposes:

• responding to inquiries from business partners;
• preparing quotations, proposals, and itineraries;
• concluding and performing contracts;
• arranging hotels, ryokan, transportation, guides, restaurants, attractions, tickets, airport assistance, and other travel-related services;
• communicating booking details and operational information;
• responding to changes, disruptions, emergencies, complaints, and incidents;
• issuing invoices, processing payments, and maintaining accounting records;
• managing business relationships;
• complying with legal and regulatory obligations;
• establishing, exercising, or defending legal claims; and
• operating, securing, and improving this website.

The Company does not use traveller personal data for direct marketing unless separate consent has been obtained or such use is otherwise permitted by applicable law.

4. Legal Basis for Processing Personal Data

Where applicable data protection laws, including the General Data Protection Regulation (“GDPR”), require a legal basis, the Company processes personal data on one or more of the following bases:

• the processing is necessary for the performance of a contract or to take steps prior to entering into a contract;
• the processing is necessary for compliance with a legal obligation;
• the processing is necessary for the legitimate interests of the Company or a third party, provided that such interests are not overridden by the rights and freedoms of the data subject;
• the processing is necessary to protect the vital interests of the data subject or another person; or
• the data subject has given consent, where consent is required.

5. Sources of Personal Data

The Company may obtain personal data from:

• travel agencies;
• tour operators;
• destination management companies;
• corporate clients;
• authorised representatives; and
• service providers involved in the relevant travel arrangement.

6. Providing Personal Data to Third Parties

The Company may provide personal data, only to the extent necessary to perform the requested services, to recipients such as:

• hotels and ryokan;
• airlines, railway operators, bus companies, taxi companies, and other transportation providers;
• licensed guides, interpreters, escorts, and airport assistance providers;
• restaurants, attractions, event organisers, and ticket providers;
• insurance companies and emergency assistance providers;
• payment, accounting, IT, hosting, and other contracted service providers; and
• public authorities where required by law.

The Company shall appropriately supervise contracted service providers and require them to protect personal data.

7. International Transfers

Because the Company provides international travel services, personal data may be transferred to Japan or other countries outside the country in which it was collected.

Where personal data is transferred from the European Economic Area or another jurisdiction that restricts international transfers, the Company shall implement safeguards required under applicable law.

8. Data Retention

The Company retains personal data only for as long as necessary for the purposes described in this Privacy Policy and to comply with legal, accounting, tax, dispute resolution, and contractual requirements.

The specific retention period may vary depending on the type of information, the relevant service, and applicable law.

9. Rights of Data Subjects

Subject to applicable law, data subjects may have the right to:

• access their personal data;
• request correction of inaccurate personal data;
• request erasure of personal data;
• request restriction of processing;
• object to processing;
• withdraw consent at any time where processing is based on consent;
• receive personal data in a portable format; and
• lodge a complaint with a competent supervisory authority.

The Company may request information necessary to verify the identity and authority of the person making the request.

10. Safeguards for the Protection of Personal Data

The Company shall implement appropriate and necessary technical and organisational measures to prevent unauthorised access, loss, destruction, alteration, or leakage of personal data.

The Company shall also provide appropriate supervision and training for its employees and contracted service providers.

11. Changes to this Privacy Policy

The Company may revise this Privacy Policy when necessary due to changes in applicable laws, services, or operational practices. The latest version will be published on this website.