Article 1: About JP CONCIERGE and passage LLC

1. JP CONCIERGE is a Japanese hospitality service operated by passage LLC (hereinafter referred to as "the Company"). The Company is registered in Japan under the corporate number 3010403028626, with the registered office located at 6F Aoyama Marutake Building, 3-1-36 Minami Aoyama, Minato City, Tokyo. The representative and person in charge of personal information management is Eri SETO.
2. The Company acknowledges the utmost importance of compliance with laws, guidelines, and other norms related to the protection of personal information. To protect the rights and interests of customers and business partners (hereinafter referred to as "customer(s)") using the Company's services, the organization prudently collects, uses, and manages such information within its operations.
3. In light of this commitment, the Company establishes the JP CONCIERGE Privacy Policy. This Privacy Policy outlines the principles governing the collection, use, and management of personal information in connection with the operation of the website https://jpconcierge.com ("the Site") and other business activities conducted by the Company.

Article 2: Information the Company May Collect

The Company has implemented appropriate security measures to prevent the accidental loss, unauthorized access, alteration, disclosure, or unlawful use of customers’ personal information. Access to customers’ personal information is limited to employees with a business need to know. The Company may collect and process the following data about customers:

1. Details of Transactions: Information about transactions customers carry out through the Site and the fulfillment of orders;
2. Information from Forms: Data that customers provide by filling in forms on the Site, including but not limited to information provided when requesting or subscribing to any service, becoming a registered customer, or participating in promotions sponsored by the Company;
3. Survey Information: Data from surveys conducted by the Company for research purposes, provided customers choose to respond;
4. Communications: Information included in communications sent by customers to the Company regarding the Site;
5. Details of Site Visits: Information about customers' visits to the Site, including, but not limited to, traffic data, location data, and resources accessed.

Article 3: IP address and Cookies

1. The Company may collect information about computers accessing the Site, including, where available, IP address, operating system, and browser type. This information is gathered for system administration purposes and to generate aggregate statistics for advertisers, subject to customers' cookie preferences where applicable. Such statistics represent browsing actions and patterns but do not identify any individual.
2. The Company may obtain information about general internet usage by using a cookie stored on customers’ devices. This helps the Company enhance the Site and provide a better and more personalized service. The information obtained allows the Company to:
   1. Estimate audience size and usage patterns;
   2. Store information about customers' preferences, enabling customization of the Site based on individual interests;
   3. Accelerate search functionality;
   4. Recognize when customers return to the Site.
3. Customers have the option to configure their browser settings to accept or reject cookies. Additionally, even after cookies have been accepted once, they can be disabled at any time by clicking “Opt Out of Cookies” on the Privacy Policy page. However, if customers choose to reject the use of cookies, certain parts of the Site may be inaccessible. Cookies are retained for periods appropriate to their purpose, with durations determined based on applicable legal and operational requirements.

Article 4: How the Company Processes and Stores Personal Information

1. The data collected from customers is processed by staff working for the Company or its service providers. These staff members may be involved in various activities, including fulfilling orders, processing payment details, and providing support services.
2. All information provided by customers is stored on secure servers. Any payment transactions are encrypted using Transport Layer Security (TLS) 1.3. If the Company has issued customers (or if customers have chosen) a password for accessing specific features or parts of the Site, customers are responsible for maintaining the confidentiality of the password and must not share it with anyone else.
3. During the checkout process, all data related to orders and customers' personal information is transmitted to servers in encrypted form. The system is designed to ensure customers are always in secure mode (https) while using the Site, providing an additional layer of protection.
4. Payment transactions are processed on behalf of the Company by third-party payment providers. This means that customers' financial information for transaction settlement is directly provided to chosen payment providers and is never disclosed to the Company. The payment providers operate secure servers to process and authorize payments in encrypted form.

Article 5: Use of Personal Information

1. To fulfill obligations arising from contracts between customers and the Company, and specifically to fulfill customer orders, the Company may share information about customers with subcontractors, including delivery service providers. Depending on the requirements of individual orders, these third parties may be located or operate outside Japan.
2. In addition, the Company utilizes information about customers as follows:
   1. To provide customers with information, products, or services requested from the Company, or that the Company believes may be of interest to customers. This may include contacting customers by post, email, SMS, or other means of electronic communication, as indicated by customers' preferences;
   2. To ensure that content from the Site is presented in the most effective manner for customers;
   3. To allow customers to participate in any interactive features of services, when customers choose to do so;
   4. To notify customers about changes to services.
3. The Company implements appropriate measures to protect personal information in accordance with laws and regulations related to the protection of personal information. Personal information, in a personally identifiable form, will not be disclosed or provided to a third party without individual consent, except as permitted by such laws and regulations. The Company uses Google Analytics, which may process personal data on behalf of the Company. Google may transfer personal data outside the European Economic Area (EEA), including to the United States. Where such transfers occur, Google states that it relies on Standard Contractual Clauses (SCCs) approved by the European Commission or other appropriate legal mechanisms to ensure an adequate level of protection for personal data. Details regarding these services are provided in Google's privacy policy and data protection terms.
4. For individuals located in the European Economic Area (EEA), the Company processes personal data based on the following legal grounds under the General Data Protection Regulation (GDPR): performance of a contract, consent, compliance with legal obligations, or legitimate interests, depending on the nature of the data and purpose.

Article 6: Provision of Information to Third Parties

The Site may include links to websites or services operated by third parties. The Company is not responsible for the privacy practices, content, or operations of such third-party websites. Customers are advised to review the privacy policies applicable to any external websites accessed through the Site.

Article 7: Rights Regarding Personal Information

1. The Company will respond to individual requests regarding personal information in accordance with applicable laws and regulations, including the Act on the Protection of Personal Information and any other relevant laws and regulations that may apply.
2. Individuals may have the following rights under applicable data protection laws:
   1. The right to access personal information;
   2. The right to correct, add to, or delete inaccurate or incomplete personal information;
   3. The right to suspend or delete the use of personal information;
   4. The right to request the suspension of provision of personal information to third parties;
   5. The right to withdraw consent at any time, where processing is based on consent;
   6. The right to restrict the processing of personal information;
   7. The right to data portability;
   8. The right to object to the processing of personal information;
   9. The right not to be subject to automated decision-making, including profiling, that produces legal effects.
3. When making a request related to any of the above rights, customers should complete the specified request form following the procedures separately outlined by the Company and send it by mail. In the case of a written request for access, the Company will charge a prescribed handling fee and document delivery postage (if applicable). For additional information, opinions, complaints, and objections related to the Privacy Policy, customers can communicate with the Company via CONTACT JP CONCIERGE after signing in.

Article 8: Compliance with Laws and Regulations Pertaining to the Protection of Personal Information

The Company reserves the right to revise the Privacy Policy in response to changes in laws and regulations related to the protection of personal information or as necessary to enhance the protection of personal information. In such instances, the Company will post the updated Privacy Policy.

1st Oct 2020 established

1st Apr 2022 updated

3rd Oct 2022 updated

22nd Jan 2024 updated

27th May 2025 updated