Privacy Policy

September 5, 2025

This Privacy Policy (“Policy”) explains how the website “Japaniche” (“the Site”) handles personal data and related information (“Personal Information”). It is drafted with major data protection laws in mind (e.g., GDPR/UK GDPR, California CCPA/CPRA, Japan’s APPI). See Regional Addenda for jurisdiction-specific details.

“
The Site uses Google Analytics, Google Tag Manager, and Cookiebot (see 6. Tools We Use).

1. Scope

This Policy applies to information collected through your browsing and use of the Site, submissions through forms, and our use of cookies and similar technologies. It does not apply to third-party websites we link to.

2. Information We Collect

2.1 Information You Provide

  • Form submissions (e.g., inquiry content), email address, name (optional), and any other information you choose to provide.

2.2 Information Collected Automatically

  • Device and browser information (device type, OS, browser, language settings, etc.)
  • Log data (access time, pages viewed, time on page, referrer URL, approximate location, processed IP information, etc.)
  • Cookies and similar identifiers, and your cookie consent status

3. Purposes of Use

  • Provide, operate, maintain, and improve the Site
  • Measure and analyze usage; optimize content and user experience
  • Ensure security and prevent fraud/abuse
  • Respond to inquiries and communicate as needed
  • Comply with laws and handle disputes or claims

4. Legal Bases (EU/EEA & UK)

  • Legitimate interests: Site operation, security, essential measurement (where consent is not required)
  • Consent: Non-essential cookies/technologies (e.g., analytics/marketing where required)
  • Contract/performance: Responding to your requests or inquiries
  • Legal obligation: Compliance with applicable laws and requests from authorities

5. Cookies and Similar Technologies

We use cookies, pixels, and similar technologies. Categories include:

  • Strictly necessary: Core functionality (no consent required)
  • Preferences: Save settings such as language (consent may be required in some regions)
  • Statistics/Analytics: Measure and analyze usage (consent required in certain regions)
  • Marketing: Advertising-related (not used currently)

Consent Management: We use Cookiebot to display a regionalized consent banner and maintain consent logs. You can change your preferences anytime via [Open Cookie Settings] (implement a link or button that calls javascript:Cookiebot.renew()). The cookie list is auto-updated by Cookiebot’s Cookie Declaration.

6. Tools We Use

6.1 Google Analytics (GA4)

  • Purpose: Measure and analyze Site usage
  • Data examples: Event data, device information, approximate location, etc.
  • Notes: GA4 does not store full IP addresses in reports; user identifiers are randomly generated. User-level data retention follows admin settings (e.g., 2–14 months).
  • Opt-out: Reject the “Statistics/Analytics” category in Cookie Settings (and, if desired, use Google’s browser add-on where available).

6.2 Google Tag Manager (GTM)

  • Purpose: Manage tags centrally. GTM itself is not designed to collect personal information, but it controls the firing of configured tags.
  • Consent: Tag firing respects Cookiebot consent status; tags in non-consented categories will not fire.

6.3 Cookiebot

  • Purpose: Obtain and manage cookie consent; store consent logs; auto-generate the Cookie Declaration.

These providers may process data outside your country/region (see 10. International Transfers).

7. Disclosures to Third Parties

We do not sell, rent, or otherwise disclose Personal Information to third parties except:

  • When required by law or pursuant to requests from authorities
  • To service providers essential to Site operations (analytics, hosting, security, etc.), under appropriate confidentiality and security obligations
  • To protect life, property, or safety when obtaining consent is difficult

8. Joint Use / Co-Management

We do not jointly use Personal Information with other parties at this time. If that changes, we will update this Policy to describe the scope, items, and responsible party.

9. Retention

  • We retain Personal Information only as long as necessary for the purposes stated or as required by law.
  • Analytics user-level data follows GA4 retention settings (e.g., 2–14 months).
  • Cookiebot consent logs are retained for an appropriate period in line with legal and audit requirements.

10. International Transfers

Service providers we use may process data in countries/regions outside the EU/EEA (e.g., the United States). Where required, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs).

11. Security

We apply technical and organizational measures—access controls, encryption, log monitoring, least-privilege access—to help protect Personal Information against unauthorized access, disclosure, loss, or damage.

12. Children’s Privacy

The Site is not directed to children. We do not knowingly collect Personal Information from children under 13 (or the age of consent in your jurisdiction) without verifiable parental consent.

13. Your Rights

Subject to applicable law, you may have rights to access, correct, delete, restrict or object to processing, obtain data portability, and withdraw consent.
How to exercise: Contact privacy@japaniche.com. We may request additional information to verify your identity.

14. Automated Decision-Making

We do not engage in fully automated decision-making that produces legal or similarly significant effects.

15. Changes to This Policy

We may update this Policy to reflect operational or legal changes. For material changes, we will provide notice on the Site. Please review the Effective Date above.

Regional Addenda

A. EU/EEA & UK (GDPR/UK GDPR)

  • Controller: The Site operator
  • Contact: info@japaniche.org
  • Supervisory authority: You have the right to lodge a complaint with your local supervisory authority.
  • International transfers: We implement appropriate safeguards (e.g., SCCs).
  • Consent management: You can give or withdraw consent via the Cookiebot banner and Cookie Settings.

B. California, USA (CCPA/CPRA)

  • Categories collected: Identifiers, internet activity information, usage history, inferences, etc.
  • Purposes: As described in Section 3.
  • “Sell” or “Share”: We do not sell Personal Information. We do not “share” Personal Information for cross-context behavioral advertising at this time. If that changes, we will provide a clear “Do Not Sell or Share” opt-out.
  • Rights: Right to know/access, delete, correct, opt-out of sale/share, and non-discrimination.
  • Authorized agents: We require proper authorization and identity verification.

C. Japan (APPI)

  • Joint use: Not conducted at present (see Section 8).
  • Third-party provision: As described in Section 7.
  • Access to retained personal data: Requests may be made as described in Section 13.
  • Overseas transfers: Upon request, we will provide information about foreign regimes and recipient safeguards consistent with Section 10.