Who we are
Go Japan Journey (sole proprietorship of Eriko Arai), 6th Floor, N&E Building, 1-12-4 Ginza, Chuo City, Tokyo 104-0061, Japan
Privacy contact: [email protected] (or [email protected]).
We operate in Japan and serve customers globally.
What we collect
• Account/profile (name, email, phone) • Order/booking data • Payment status (processed by WooPayments/Stripe; we don’t store full card numbers) • Technical data (IP, device, browser) • Approximate location via MaxMind GeoLite2 for currency/UX • Security telemetry (Wordfence) • Backups (UpdraftPlus → Amazon S3, ~45‑day retention).
Under APPI (Japan), disclosure of personal data to third parties generally requires prior consent, subject to statutory exceptions. Japanese Law Translation
Why we use data (legal bases)
• Perform a contract (bookings, customer service) • Legitimate interests (fraud prevention, service improvement) • Legal obligations (tax/accounting) • Consent for non‑essential cookies/ads in the EEA/UK and where required (e.g., Quebec). GDPR
Cookies & Consent (Google Consent Mode v2)
We use Google Analytics 4 and Google Tag Manager. In the EEA/UK, tags operate under Consent Mode v2 and remain limited until you consent via our banner. Signals include ad_user_data, ad_personalization, ad_storage, and analytics_storage. You can change preferences anytime via “Cookie settings” in our footer. Google for Developers+2Google for Developers+2
International transfers
Your data may be processed in Japan, the EU/EEA, the US, and other locations (e.g., Google, Stripe, AWS). For transfers from Japan, we obtain consent or use safeguards consistent with APPI; for EU/EEA visitors, transfers follow GDPR (e.g., SCCs); for Brazil residents, we respect LGPD rights/bases. Japanese Law Translation+2GDPR+2
Retention
Orders: retained as required by commerce/tax law. Support requests: [X] months. GA4 analytics: [X] months. Encrypted backups on S3: ~45 days by lifecycle policy.
Your rights
• Japan (APPI): disclosure, correction, suspension of use. Japanese Law Translation
• EU/UK (GDPR): access, erasure, restriction, objection, portability; complaint to a supervisory authority. GDPR
• Brazil (LGPD): confirmation/access, correction, deletion, revoke consent, portability, and more. DLA Piper Data Protection
• Canada – Quebec Law 25: consent/notice and breach‑notification requirements to CAI under certain risk thresholds. OneTrust
Third‑party providers (link their policies)
WooPayments/Stripe, Automattic/WooCommerce, Google (GA4/GTM), MaxMind, AWS, Wordfence.
(Add provider policy URLs when you paste.)
Contact & requests
Email [email protected] (or [email protected]). We respond within applicable legal timeframes.
Attribution (required)
“This site uses GeoLite2 data created by MaxMind, available from https://www.maxmind.com.” MaxMind