PRIVACY

When you book

Name (in Roman letters), email address, number of guests (adults and children), the experience, plan, date and time, coupon code, and display language

When you pay

Card numbers and other payment details are entered directly into the form of our payment provider, Stripe. We neither receive nor store them. We keep the payment ID, status and amount.

When you check or cancel a booking

The email address we send verification codes to, and a cookie that confirms it is you on the booking page

When you post a review

Your rating and text (your name is shown as initials)

When you contact us

Your name, company (optional), email address, topic and message

Bookings through other booking sites (OTAs)

The booker's name, email address, phone number and other information the OTA provides, and the booking details, which we receive through our booking system (Bókun)

When you book by phone

Your name and the booking details

Bookings taken by our previous booking system

Name, email address, and booking and payment details carried over from that system

When you use the Site

IP address, browser type, pages viewed, and identifiers such as cookies (see section 5)

If you are under 16, get the consent of a parent or guardian before booking or contacting us, and ask them to do it for you where possible.

We use the personal information we collect to:

1. accept, confirm, provide, cancel and refund bookings;
2. contact you about your booking (emails for confirmation, verification codes, advance information, day-before reminders and review requests);
3. answer your enquiries;
4. publish and translate reviews on the Site;
5. accept bookings made through other booking sites and manage availability;
6. prevent misuse and run the Site securely (for example, by limiting many actions in a short time);
7. analyze how the Site is used and improve our services;
8. show ads and measure their effectiveness; and
9. comply with the law.

We do not provide personal data to third parties without your prior consent, except:

1. where required by law;
2. where it is needed to protect the life, body or property of a person and it is difficult to get your consent;
3. where we need to cooperate with a national or local government body carrying out duties set by law, and asking for your consent would get in the way of those duties; or
4. where we entrust the handling of personal data to a service provider as needed for the purposes above (see section 4).

We entrust the handling of personal data to the following providers.

Bókun (Iceland)

Managing availability and bookings (the booker's name, email address, number of guests, date and time)

Stripe (United States)

Processing payments (payment details, amount)

Resend (United States)

Sending email (email address, name, booking details)

Slack (United States)

Internal notifications to our staff (name, partly hidden email address, booking details, the content or a summary of enquiries)

Google (United States)

AI translation of reviews and AI classification and summaries of enquiries (the text of reviews and enquiries; we do not send the name or email fields, but whatever is written in the text is sent as is), and running our database (the main database is in a data center in Tokyo, Japan)

Cloudflare (United States)

Delivering and running the Site (the content of your communication with the Site)

Of these, the providers in Iceland and the United States are third parties in foreign countries. Iceland is a member of the European Economic Area (EEA), where the EU General Data Protection Regulation (GDPR) applies. In the United States, personal information is protected by sector-specific federal laws and state laws (such as the California Consumer Privacy Act). Information on each country's system is available on the website of the Personal Information Protection Commission of Japan (in Japanese). We review these providers' terms and data processing conditions, and require them to handle personal data appropriately.

The Site uses cookies to remember your language (1 year) and to confirm it is you on the booking page (up to 30 days).

The Site runs Google Analytics, Google Ads and the Meta Pixel through Google Tag Manager. They use identifiers such as cookies and send information such as the pages you view and the booking amount from your browser to each company. We use this information to analyze how the Site is used, to measure our ads, and to show ads to people who have visited the Site. Each company handles the information under its own privacy policy.

• How Google uses information from sites that use its services
• Meta Privacy Policy

The Site also uses Adobe Fonts and Google Fonts for text, Google Maps for maps and YouTube for videos. When they load, your browser sends your IP address, the page you are viewing and similar information to those companies (Google Maps and YouTube may set cookies). On the booking form, Stripe's script runs for payment and fraud prevention, sends device and browser information to Stripe, and sets Stripe cookies. You can turn off cookies in your browser settings, and you can stop Google Analytics with the Google Analytics Opt-out Browser Add-on.

We keep personal information for as long as needed for the purposes above, and delete it when it is no longer needed, unless the law requires us to keep it.

We take the following measures to protect personal data.

1. Only people authenticated with accounts we approve can access the admin screens that handle bookings and enquiries.
2. Our main database is in a data center in Tokyo, Japan, and connections to it are limited to the Site's hosting platform and authenticated staff.
3. Communication with the Site is encrypted.
4. Internal notifications show email addresses partly hidden.
5. When entrusting data to providers abroad, we take measures with an understanding of the systems in those countries described in section 4.

If you ask us to notify you of the purposes of use of your retained personal data, or to disclose, correct, add to, delete, stop using, erase or stop providing it to third parties, or to disclose records of provision to third parties, we will confirm your identity and respond without delay in accordance with the law. Please send requests to the contact in section 10.

We may change this Policy to reflect changes in the law or our services. The changed Policy takes effect when it is posted on the Site.

Business

TRAPOL Co., Ltd.

Address

Kanden Building 3F, 3-6-16 Nakanoshima, Kita-ku, Osaka 530-0005, Japan

Representative

Kengo Moriwaki

Contact

contact form (email: info@trapol.co.jp)

The Japanese version of this Policy is the original. If a translation differs from the Japanese version, the Japanese version prevails.