WADO KK (“we,” “our,” or “us”) respects the privacy of every visitor to our website (“you,” “your,” or “users”) and is committed to protecting personal information in compliance with Japan’s Act on the Protection of Personal Information (APPI) and all other applicable privacy laws, including (where relevant) the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
This Privacy Policy explains what data we collect, how we use it, with whom we may share it, how we secure it, and the rights you may exercise. It applies to all online and offline interactions relating to our travel-related products, concierge services, and associated digital platforms operated by WADO KK (collectively, the “Services”).
1. Categories of Personal Information We Collect
-
Registration & Identity Data – name, title, postal address, email, telephone, date of birth, nationality, passport number, dietary or accessibility requirements.
-
Booking & Transaction Data – travel dates, group composition, accommodation preferences, payment method, billing address, purchase history.
-
Usage Data & Online Identifiers – IP address, browser type, device information, cookies, analytics tags, on-site behaviour, referral URLs.
-
Preference & Survey Data – interests, hobbies, purpose of travel, feedback, and questionnaire responses.
-
Communications Data – emails, chat logs, and any content you provide through contact forms or social media.
-
Inferred Data – segments or profiles we create by analysing the above information.
Special category data (e.g. health information for accessibility) is collected only with your explicit consent and handled with heightened care.
2. How We Collect Information
Directly from you when you complete forms, make enquiries, secure bookings, or otherwise correspond with us.
Automatically through cookies, pixels, server logs, and similar technologies when you browse our website.
From third parties such as travel agents, accommodation partners, payment processors, analytics providers, or social-media platforms (when you link or interact with them).
3. Purposes and Legal Bases for Processing
Purpose
Provide & manage the Services
Customer support & communications
Marketing & personalisation
Security, fraud prevention, compliance
Analytics & service improvement
Typical Legal Basis*
Contractual necessity
Legitimate interest / Contract
Consent or Legitimate interest
Legitimate interest / Legal obligation
Legitimate interest
Examples
Confirming reservations, issuing tickets, arranging bespoke itineraries.
Responding to enquiries, resolving complaints.
Newsletters, tailored offers, remarketing ads.
Identity verification, anti-fraud checks, sanctions screening.
Measuring traffic, optimising site performance, developing new products.
-
* Where GDPR applies. For APPI, our primary grounds are “the purpose notified or publicly announced” and, where required, your consent.
4. Mandatory vs. Voluntary Provision
Some details (e.g. passport information for international travel) are mandatory to enter into or perform a contract with us. If such data is not provided, we may be unable to deliver the requested Services. All other information is voluntary but may enhance your experience.
5. Sharing & Disclosure
We do not sell or rent personal data. We may share it only with/for:
-
Service Partners & Suppliers – hotels, ryokans, transport operators, guides, interpreters, insurers, payment gateways, IT providers, and cloud hosts, strictly on a need-to-know basis.
-
Advertising & Analytics Vendors – Google LLC, Meta Platforms Inc., etc., for measurement and targeted campaigns.
-
Corporate Transactions – in connection with a merger, acquisition, or asset sale, subject to appropriate safeguards.
-
Authorities & Legal Obligations – when required by law, court order, or to defend legal rights.
-
Vital Interests & Consent – where necessary to protect life, health, or with your explicit consent.
All third parties must process data in line with this Policy and relevant laws.
6. International Data Transfers
Your information may be processed in countries outside Japan (e.g. the United States, EEA). We implement safeguards such as Standard Contractual Clauses, intra-group agreements, and vendor due-diligence to ensure an equivalent level of protection.
7. Data Retention
We store personal information only for as long as necessary to fulfil the purposes outlined above, to comply with statutory duties (e.g. tax or accounting rules), or to resolve disputes. When retention is no longer required, data are securely deleted or anonymised.
8. Security Measures
We employ administrative, technical, and physical controls—encryption at rest and in transit, role-based access, intrusion detection systems, and regular audits—to prevent unauthorised access, loss, or misuse. No internet transmission is ever completely secure; however, we strive for industry-standard protection.
9. Cookies & Similar Technologies
We use first- and third-party cookies to:
keep you signed in,
remember preferences,
analyse traffic patterns, and
deliver relevant adverts.
You may disable cookies through your browser, but certain features may not function correctly. For EU/UK residents, non-essential cookies are set only with consent.
10. Third-Party Links
Our website may include links or plugins that take you to external sites. We are not responsible for their content or privacy practices. Please review their policies separately.
11. Your Rights
Depending on your jurisdiction, you may have the right to:
Access, correct, or delete personal data;
Withdraw consent;
Object to or restrict processing;
Receive data portability;
Opt-out of certain marketing;
Lodge a complaint with a supervisory authority.
To exercise any right, contact us via the details below. We may request proof of identity before fulfilling your request.
12. Children’s Privacy
Our Services are not directed to children under 20 years of age. We do not knowingly collect personal data from minors without verified parental consent.
13. Changes to This Policy
We may revise this Policy from time to time. Material changes will be announced on our website or via email. Continued use of our Services after revision signifies acceptance of the updated terms.
14. Contact Us