Privacy Policy

1. Introduction

Mark Maeda Travel & Tour ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services for booking private tours and transfers in Japan.

By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide when booking our services:

• Name and contact details (email address, phone number)
• Billing and payment information (processed securely via Stripe)
• Account credentials (if you create an account)
• Communication preferences

2.2 Booking Information

To process your bookings, we collect:

• Travel dates and times
• Pickup and drop-off locations
• Number of passengers and luggage details
• Special requests or accessibility requirements
• Flight information (for airport transfers)

2.3 Technical Data

We automatically collect certain information when you visit our website:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our site
• Referring website addresses

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To process and fulfill your bookings, arrange transportation, and coordinate with drivers
• Communication: To send booking confirmations, updates, and respond to your inquiries
• Payment Processing: To process payments securely through our payment provider (Stripe)
• Customer Support: To provide assistance and resolve issues
• Service Improvement: To analyze usage patterns and improve our website and services
• Legal Compliance: To comply with legal obligations and enforce our terms
• Marketing: To send promotional communications (only with your consent, and you may opt out at any time)

4. Third-Party Services

We work with trusted third-party service providers to deliver our services:

4.1 Payment Processing (Stripe)

All payment transactions are processed by Stripe, a PCI-DSS compliant payment processor. We do not store your complete credit card information on our servers. Stripe's privacy policy can be found at stripe.com/privacy.

4.2 Data Hosting (Supabase)

Our database and authentication services are hosted on Supabase, a secure cloud platform. Your data is stored with industry-standard encryption and security measures.

4.3 Email Communications (Brevo)

We use Brevo (formerly Sendinblue) for sending transactional emails such as booking confirmations and updates. Your email address is shared with Brevo solely for this purpose.

4.4 Website Hosting (Vercel)

Our website is hosted on Vercel's infrastructure, which provides secure and reliable hosting services.

5. Data Storage & Security

We implement appropriate technical and organizational security measures to protect your personal information:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security audits and updates
• Restricted access to personal data (only authorized personnel)
• Regular backups to prevent data loss

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Booking Data: Retained for at least 7 years for legal and tax compliance purposes
• Account Data: Retained until you request account deletion
• Marketing Data: Retained until you unsubscribe or request deletion
• Technical Logs: Typically retained for 90 days unless required for security investigations

After the retention period, we will securely delete or anonymize your personal information.

7. Your Rights

Under applicable data protection laws, you have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Data Portability: Request transfer of your data to another service provider
• Objection: Object to processing of your personal information for marketing purposes
• Withdrawal of Consent: Withdraw consent at any time (without affecting prior processing)

To exercise any of these rights, please contact us using the information provided in Section 9.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website:

• Essential Cookies: Required for website functionality and security (e.g., authentication, session management)
• Analytics Cookies: Help us understand how visitors use our website to improve user experience
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. However, disabling certain cookies may affect website functionality.

9. International Data Transfers

As our third-party service providers (Stripe, Supabase, Brevo, Vercel) may be located outside of Japan, your personal information may be transferred to and processed in other countries. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page indicates when it was last revised. We encourage you to review this Privacy Policy periodically. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: