Privacy Policy
What personal data Tickets Japan collects when you visit the site, request a booking or contact us, why we use it, who we share it with, how long we keep it and your rights.
In short: Carbon Impact Technologies Inc., a Canadian company, runs tickets-japan.com under the name Tickets Japan. We collect the details we need to reserve tickets for you and to answer your messages. Stripe handles your card, so we never see or store your full card number. We pass the name on the booking to the venue's ticketing channel to make the reservation. We measure how the site is used with PostHog, which stores that data in the European Union. We do not sell your data and we do not run advertising trackers.
1. Who is responsible for your data
Carbon Impact Technologies Inc. ("Tickets Japan", "we", "us"), a corporation incorporated in Ontario, Canada, is responsible for the personal data collected through tickets-japan.com. In the language of European law, we are the controller. Our privacy contact is support@tickets-japan.com.
2. What we collect
When you visit the site:
- basic server logs, including your IP address, browser type, the pages you request and the time of each request
- analytics data collected by PostHog: the pages you view, the links and buttons you click, the site that referred you, your browser, device type and screen size, an approximate location worked out from your IP address, and a random identifier stored in your browser so that return visits can be recognised
- session replays: PostHog records how a page is used during your visit, such as scrolling, clicks and mouse movement, so that we can find where the site is confusing or broken. Anything you type into a form is masked before it leaves your browser.
When you send a booking request:
- your full name and email address, and a phone number if you choose to give one
- how many visitors in each age band need a ticket. The tickets are held in the name of the person who sends the request; if someone books for you and gives your name instead, we receive it from them. Anyone who books for other people must have their permission and should share this policy with them.
- the venue, the days you can visit and the part of the day you can enter
- payment details, which go directly to Stripe. We receive confirmation of payment, the card brand and the last four digits, but never the full card number or security code.
When you contact us: your messages to hello@, sales@ or support@tickets-japan.com, and our replies. The contact form on this site opens your own email app and stores nothing here.
3. Why we use it and on what basis
Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) applies to how we handle personal information. It generally requires your knowledge and consent unless a legal exception applies. The table lists our legal basis for each purpose where the EU or UK GDPR applies to our processing. Those bases sit alongside PIPEDA's requirements, not in place of them.
| Purpose | Data | Legal basis |
|---|---|---|
| Reserving your tickets and sending confirmations | Contact details, ticket counts, requested days and entry times | Performance of a contract |
| Taking payment and issuing refunds | Payment confirmation, transaction records | Performance of a contract |
| Answering your questions | Support correspondence | Performance of a contract, or legitimate interests |
| Keeping the site running and secure | Server logs | Legitimate interests |
| Understanding how the site is used and fixing what does not work | Analytics data and session replays | Legitimate interests, and consent where your local law requires it |
| Meeting tax and accounting duties | Booking and payment records | Legal obligation where EU or UK law requires it, otherwise legitimate interests in meeting Canadian accounting and tax duties |
| Sending marketing email | Email address | Consent, which you can withdraw at any time |
We do not make automated decisions about you that have legal or similarly significant effects.
If you opt in to marketing email, every message identifies us and includes an unsubscribe link. You can also unsubscribe by emailing support@tickets-japan.com. We stop within 10 business days and keep a record of your request so that we do not email you again.
4. Who we share it with
- The venue's official ticketing channel, which needs the name on the booking and, where the venue asks for them, the visitors' age bands, to issue dated tickets. For the Ghibli Museum, Mitaka, this is Lawson Ticket.
- Stripe, which processes your card payment under its own privacy policy.
- PostHog, which stores and processes analytics data and session replays for us on servers in the European Union, under its own privacy policy.
- Our email provider, to send confirmations and replies.
- Our hosting provider, which stores the site and its data.
- Authorities or courts, where the law requires it.
We do not sell personal data and we do not share it with advertisers.
5. International transfers
We are based in Canada. Analytics data is stored in the European Union. Payment data is processed by Stripe, whose group companies operate in the United States and elsewhere. Booking details go to Japan, where the venues and their ticketing channels are based.
If you are in the EU or the UK: the EU and the UK recognise Canada as providing adequate protection for data covered by PIPEDA, and Japan for private-sector organisations covered by the APPI. We rely on those decisions only where the recipient and the transfer are covered. For transfers to Stripe in the United States, Stripe's terms provide for the EU-US Data Privacy Framework and its UK extension. Where a contract is needed instead, we use the EU standard contractual clauses and, for UK data, the UK addendum or international data transfer agreement. You can ask support@tickets-japan.com for details of these safeguards.
We require every provider that processes data for us to protect it under a contract. Data processed abroad may also be reachable by courts or public authorities under that country's laws.
6. How long we keep it
- Booking records, including the name on the booking and payment confirmations: 10 years after your visit date, to meet accounting and tax duties and to handle disputes.
- Support correspondence: 3 years after the last message in the thread.
- Server logs: 90 days.
- Analytics data and session replays: 3 years.
- Marketing consent: until you withdraw it.
7. Your rights
Your rights depend on the laws that apply to our handling of your data. PIPEDA applies to us. The EU GDPR, the UK GDPR, the California Consumer Privacy Act (CCPA) and Japan's Act on the Protection of Personal Information (APPI) may also apply where their conditions are met. Depending on the applicable law, you may have the right to:
- access the personal data we hold about you
- correct it if it is wrong
- have it deleted, where we no longer need it
- restrict or object to some uses of it, including analytics
- receive a copy in a portable format
- withdraw consent to marketing email at any time
- withdraw consent to any other use that rests on your consent, within the limits the law sets
- not be treated differently for exercising these rights
To exercise a right, email support@tickets-japan.com. If you have booked or written to us before, use the same address if you can. For a request about site visits alone, we will explain what we need to find the right browser records. We may ask for information needed to confirm your identity. We answer your request within 30 calendar days, or within any shorter period your local law sets.
Two limits apply. We cannot change the name on a ticket the venue has already issued, and we must keep some booking records for tax purposes even after a deletion request.
8. Children
We reserve tickets for children when a parent or guardian asks us to, and for that we collect the child's age band from the adult making the request; the booking is in the adult's name. We do not knowingly collect personal data directly from children. If you believe a child has sent us data directly, email us and we will delete it.
9. Cookies and browser storage
We set a language cookie if you switch language, store your theme choice in your browser, and use PostHog cookies and browser storage for analytics. Our Cookie Notice lists exactly what is stored, how long it lasts and how to block it.
10. Security
The site is served over HTTPS. Access to booking data is limited to staff who need it. Card details are handled by Stripe, so card numbers never reach our systems.
11. Changes to this policy
We may update this policy. The date at the top of this page shows the current version. Before we change how we use data we already hold, we publish a notice on this site and, where we have your email address and the change concerns your data, we email you.
12. Contact and complaints
Privacy questions and requests: support@tickets-japan.com. Anything else: hello@tickets-japan.com.
If you are unhappy with our answer, you can complain to a data protection authority: in Canada, the Office of the Privacy Commissioner of Canada; in the EU, the authority in your member state; in the UK, the Information Commissioner's Office; in Japan, the Personal Information Protection Commission; in California, the California Privacy Protection Agency.