Toyotora International Co., Ltd. (the “Company”) recognizes the importance and social responsibility of protecting privacy and personal information. We have established this policy to ensure that personal information is managed appropriately.
1. Basic Policy
The Company complies with applicable personal information protection laws, maintains an appropriate organizational structure, and works to safeguard personal information.
2. Appropriate Collection of Personal Information
The Company collects personal information through lawful and fair means. We do not collect sensitive personal information without prior consent unless permitted by law.
3. Appropriate Security Measures
The Company manages customer personal information carefully and takes necessary and reasonable safeguards against disclosure, loss, misuse, alteration, and unauthorized access. When personal information is collected electronically, security technologies such as SSL encryption are used to prevent interception during transmission. All personal information held by the Company is managed in accordance with applicable laws.
4. Purposes of Use
The Company collects personal information lawfully and fairly, and uses it only as necessary to provide our services, respond to inquiries, address disputes and incidents, analyze surveys, deliver interest-based advertising through providers such as Google, send information and promotions about products, services, and events by email or similar means, and conduct business and recruitment activities. If use beyond these stated purposes becomes necessary, notice will be provided on the official website or by other appropriate means.
5. Categories of Personal Information
(1) Information Provided by the Individual
This may include name, address, telephone number, email address, social media account ID, date of birth, gender, nationality, passport and visa details, marketing information, information entered into forms on Company-operated websites, information entered by Company staff at the individual’s direction, past stay and extended-stay history, services used and products purchased, preferences learned while providing services, information supplied to use our services, and essential transaction information contained in applications or materials received through business partners and travel agencies.
(2) Automatically Collected Information
This may include device information, log data, anonymous identifiers, location data, IP addresses, individual identifiers collected through technologies such as cookies, and information collected through security technologies such as surveillance cameras. The Company also uses analytics tools, including Google Analytics, to understand visits to its websites.
(3) Information Obtained from Third Parties
When the Company receives personal information indirectly from a third party, it confirms that the provider collected the information appropriately from the individual, establishes the necessary contractual arrangements, and obtains only the information required for the stated purposes.
6. Disclosure and Provision to Third Parties
(1) The Company may entrust personal information to external service providers as necessary for business operations. Such arrangements are subject to strict Company oversight and contractual terms that appropriately protect personal information.
(2) The Company will not provide personal information to third parties except in the following circumstances:
- 1. When the individual has given consent.
- 2. When disclosure is required by law.
- 3. When a breach of the Terms of Service by the individual causes substantial harm to the Company’s interests.
- 4. When necessary to protect a person’s life, health, property, or other significant interests.
- 5. When specifically necessary to improve public health or support the healthy development of children.
- 6. When cooperation is required for a national or local government agency, or its contractor, to perform duties prescribed by law, and obtaining consent could impede those duties.
- 7. When disclosed or provided to a contractor as necessary to deliver services to the individual.
- 8. When personal information or control over it is transferred as part of a merger, corporate split, business transfer, or similar transaction.
7. Cross-Border Handling of Personal Information
For system development, maintenance, customer support, and related operations, the Company may store customer personal information on servers outside Japan, including in Taiwan, or permit access by contractors and affiliated teams located outside Japan. The Company complies with applicable data protection laws and implements appropriate safeguards for personal information.
8. Joint Use and Outsourcing
Within the purposes described above, customer personal information may be jointly used with companies in the Company’s group, with the Company acting as the responsible manager. The Company may also outsource certain operations to partner companies, in which case confidentiality agreements and appropriate oversight will be implemented.
9. Anonymously Processed Information
The Company handles anonymously processed information, as defined by personal information protection laws, in accordance with applicable law.
10. Requests for Disclosure, Correction, and Other Actions
If an individual requests disclosure, correction, addition, deletion, suspension of use, erasure, or another action regarding personal information held by the Company under applicable law, the Company will verify the requester’s identity and respond in accordance with the law. Please contact the service desk listed in Section 11 to submit a request.
11. Contact and Inquiry Desk
For questions about this Privacy Policy or the requests described above, please contact:
Address: 4-9-1 Higashikoiwa, Edogawa-ku, Tokyo 133-0052, Japan
Koiwa Sugi Residence, Room 101
Company: Toyotora International Co., Ltd.
Telephone: 03-6161-1638
12. Use of Cookies and Google Analytics
The Company uses cookies. You may limit their use through your browser settings, but doing so may prevent certain features of our services or websites from functioning properly. The Company also uses Google Analytics to understand website usage. Please refer to Google’s official information for details about data collection and processing.
13. Retention Period
The Company retains personal information only for as long as necessary to fulfill the policy described in Section 1 and will erase it promptly when that need no longer exists. Even after an individual stops using the Company’s services, personal information may be retained and used for a certain period to meet legal obligations and handle necessary business communications.
14. Changes to this Privacy Policy
The Company may revise this Privacy Policy as necessary.
Effective date: June 1, 2026