Privacy policy

Who we are

Kimasu, operated by Nicolas Weber (sole proprietor), Kyoto Building 402, 227 Daikokucho, Shichijodori Aburanokoji Higashi-iru, Shimogyo-ku, Kyoto, 600-8223, Japan, is the controller responsible for your personal data. For any privacy question or request, contact us at contact@kimasu.jp.

Data we collect

We collect only what we need to answer you and run your booking:

• Inquiry data you submit: name, email address, phone number, and the content of your message.
• Booking data: the tour, date, party size, and any preferences or details you provide to deliver the experience.
• Payment confirmation data: we never see or store your full card number. Card details are entered directly with our payment processor; we receive only a confirmation and limited transaction metadata.
• Usage data: anonymised or pseudonymised analytics about how the site is used (pages viewed, approximate region, device type).

Why we use your data and our legal bases

• To respond to your inquiries and to provide the tour you book — necessary to take steps at your request and to perform our contract with you.
• To operate, secure, and improve the website — our legitimate interest in running a reliable service.
• To meet accounting, tax, and other legal obligations — compliance with the law.
• To measure site usage with analytics — based on your consent where the law requires it.

Service providers we share data with

We do not sell your personal data. We share it only with the providers needed to deliver our service, each acting under their own privacy terms:

• Stripe — payment processing. See stripe.com/privacy.
• Google Analytics — website usage measurement. See policies.google.com/privacy.
• Our email provider — to send and receive correspondence with you.

Cookies

We use a small number of cookies and similar technologies:

• Strictly necessary cookies that let the site function, remember your language and currency, and keep a booking session secure.
• Google Analytics cookies that help us understand, in aggregate, how the site is used.
• Stripe cookies used during payment for processing and fraud prevention.

You can block or delete cookies in your browser settings. Disabling strictly necessary cookies may stop parts of the site from working.

International transfers

Some of our providers process data outside Japan and the European Union (for example in the United States). Where this happens, the transfer is covered by appropriate safeguards offered by those providers, such as standard contractual clauses.

How long we keep your data

We keep personal data only for as long as needed for the purpose it was collected, and for as long as the law requires afterwards — for example, accounting records are kept for the statutory retention period. Inquiry messages that do not lead to a booking are deleted once they are no longer useful.

Your rights

Subject to applicable law, you may ask us to access, correct, delete, or export your personal data, and to restrict or object to certain processing. To exercise any of these rights, email contact@kimasu.jp; we will respond within the period required by law. If you are in the EU, you also have the right to lodge a complaint with your local data protection authority.

Children

Our website and bookings are not directed at children under 16, and we do not knowingly collect their data. Bookings are made by adults, who remain responsible for any minors in their party.

Changes to this policy

We may update this policy from time to time. The current version is always the one posted here, with the date shown above.