Privacy Policy
What personal data Tickets Japan collects when you request a booking or contact us, why we use it, who we share it with, how long we keep it and your rights.
Draft. This document is a placeholder and has not been reviewed by a lawyer yet. Details in square brackets are still to be confirmed.
In short: [Company legal name] runs tickets-japan.com. We collect the details we need to reserve tickets for you and to answer your messages. [Payment processor] handles your card, so we never see or store your full card number. We pass visitor names to the venue's ticketing channel to make the reservation. We do not sell your data and we do not run advertising trackers.
1. Who is responsible for your data
[Company legal name] ("Tickets Japan", "we", "us"), registered at [Registered address] in [Country/jurisdiction], is the controller of personal data collected through tickets-japan.com. Our data protection contact is [Data protection contact].
2. What we collect
When you send a booking request:
- your name, email address, phone number and country
- the full name and age band of each visitor in your group
- the venue, dates and entry times you ask for, in order of preference
- payment details, which go directly to [Payment processor]. We receive confirmation of payment, the card type and the last four digits, but never the full card number or security code.
When you contact us: your messages to hello@, sales@ or support@tickets-japan.com, and our replies.
When you visit the site: basic server logs, including your IP address, browser type, the pages you request and the time of each request.
Checkout is not yet open, so today we collect only server logs and whatever you choose to email us.
3. Why we use it and on what basis
| Purpose | Data | Legal basis |
|---|---|---|
| Reserving your tickets and sending confirmations | Contact details, visitor details, requested dates and entry times | Performance of a contract |
| Taking payment and issuing refunds | Payment confirmation, transaction records | Performance of a contract |
| Answering your questions | Support correspondence | Performance of a contract, or legitimate interests |
| Keeping the site running and secure | Server logs | Legitimate interests |
| Meeting tax and accounting duties | Booking and payment records | Legal obligation |
| Sending marketing email | Email address | Consent, which you can withdraw at any time |
We do not make automated decisions about you that have legal or similarly significant effects.
4. Who we share it with
- The venue's official ticketing channel, which needs visitor names and, where the venue asks for them, age bands, to issue dated tickets. For the Ghibli Museum, Mitaka, this is Lawson Ticket.
- [Payment processor], which processes your card payment under its own privacy policy.
- Our email provider, to send confirmations and replies.
- Our hosting provider, which stores the site and its data.
- Authorities or courts, where the law requires it.
We do not sell personal data and we do not share it with advertisers.
5. International transfers
Your data is processed in [Country/jurisdiction] and in Japan, where the venues and their ticketing channels are based. Japan holds adequacy decisions from the European Commission and the United Kingdom. For any transfer to a country without such a decision, we rely on standard contractual clauses or an equivalent safeguard.
6. How long we keep it
- Booking records, including visitor names and payment confirmations: [Retention period], to meet accounting and tax duties and to handle disputes.
- Support correspondence: [Retention period] after the last message in the thread.
- Server logs: [Retention period].
- Marketing consent: until you withdraw it.
7. Your rights
Depending on where you live, you have rights under the EU GDPR, the UK GDPR, the California Consumer Privacy Act (CCPA) or Japan's Act on the Protection of Personal Information (APPI). These generally include the right to:
- access the personal data we hold about you
- correct it if it is wrong
- have it deleted, where we no longer need it
- restrict or object to some uses of it
- receive a copy in a portable format
- withdraw consent to marketing email at any time
- not be treated differently for exercising these rights
To exercise a right, email [Data protection contact] or support@tickets-japan.com from the address you used with us. We may ask you to confirm your identity. We reply within one month, or within any shorter period your local law sets.
Two limits apply. We cannot remove a visitor's name from a ticket the venue has already issued, and we must keep some booking records for tax purposes even after a deletion request.
8. Children
We reserve tickets for children when a parent or guardian asks us to, and for that we collect the child's name and age band from the adult making the request. We do not knowingly collect personal data directly from children. If you believe a child has sent us data directly, email us and we will delete it.
9. Cookies
We use only essential cookies and browser storage, with no advertising or analytics cookies. Our Cookie Notice lists exactly what is stored.
10. Security
The site is served over HTTPS. Access to booking data is limited to staff who need it. Card details are handled by [Payment processor], so card numbers never reach our systems.
11. Changes to this policy
We may update this policy. The date at the top of this page shows the current version. If a change affects data you have already given us, we will email you before it takes effect.
12. Contact and complaints
Privacy questions and requests: [Data protection contact]. Anything else: support@tickets-japan.com.
If you are unhappy with our answer, you can complain to a data protection authority: in the EU, the authority in your member state; in the UK, the Information Commissioner's Office; in Japan, the Personal Information Protection Commission; in [Country/jurisdiction], the authority responsible there.