Legal

Privacy Policy

Last updated: 9 September 2026

1. Introduction

TOWAKA – Japan DMC (operated by Yamatogokoro Inc.) ("we", "our", or "us") respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, and protect personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), where applicable.

2. Data Controller

The data controller responsible for the processing of your personal data is:

Yamatogokoro Inc.

A corporation registered in Japan

Operating the brand TOWAKA – Japan DMC

Country: Japan

Contact email: info@towaka.travel

If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us using the email address above.

3. How We Collect Personal Data

We collect personal data directly from you when you contact us by email or submit an enquiry through our website contact form.

We may also collect limited technical and website-usage information automatically when you use our website, where permitted and subject to your analytics privacy choice, as described in Section 9.

4. Personal Data We Collect

Depending on the content of your communication, we may collect:

  • Name
  • Email address
  • Company or organisation name
  • Company website or profile link
  • Type of organisation and type of request
  • Content of your inquiry or correspondence (including optional details such as travel dates, party size, client profile, key interests, budget range, and logistical considerations)
  • Technical information included in email communications (such as email headers)

We do not intentionally collect special categories of personal data.

5. Purpose of Processing

We process personal data for the following purposes:

  • Responding to inquiries and communications
  • Business communication with travel professionals and partners
  • Record-keeping related to our business activities
  • Ensuring the security and proper operation of our communications

We do not use personal data for unsolicited marketing or advertising purposes.

6. Legal Basis for Processing

Under the GDPR, where applicable, our legal bases for processing personal data may include:

  • Steps prior to entering into a contract: where processing is necessary to respond to a request that may lead to a contractual relationship.
  • Legitimate interests: for responding to professional and B2B enquiries, maintaining business records, and operating our business and communications securely.
  • Consent: where we specifically ask for your consent, including for optional Google Analytics.
  • Legal obligations: where processing is required to comply with applicable laws

Where we rely on legitimate interests, we consider whether those interests are overridden by your rights and freedoms.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws.

When personal data is no longer needed, it is securely deleted or anonymized in accordance with our internal data management practices.

8. Data Sharing and Third Parties

We do not sell, rent, or trade personal data to third parties.

Personal data may be processed by trusted service providers (such as website hosting, email service providers, form processing services, or technical analytics providers) solely to the extent necessary for our business operations and subject to appropriate confidentiality and security measures.

Our website contact form is processed through Web3Forms, a third-party form submission service. Web3Forms states that form submissions are processed and forwarded to the designated recipient without being stored as form submissions. Its technical server logs may contain limited personal information for operational purposes and are periodically deleted.

We use Google Tag Manager to manage analytics tags. If you choose to allow Google Analytics through our privacy settings, Google Analytics 4 and Google service providers may process limited technical and website-usage information for website analysis. We do not send contact form messages, names, email addresses, phone numbers, client details, or other free-text enquiry content to Google Analytics.

We do not sell personal data. We do not currently use advertising pixels, remarketing, or advertising profiling technologies.

We implement appropriate technical and organisational measures to ensure that any such processing is secure and compliant with applicable data protection standards.

9. Website Analytics

We use Umami Analytics, a privacy-focused analytics tool, to collect aggregated and anonymized website usage statistics (such as page views and access counts) for the purpose of understanding website performance and improving user experience.

Umami Analytics does not use cookies, does not collect personal data, and does not track individual users across sessions or websites.

If you choose to allow Google Analytics through our privacy settings, we use Google Analytics 4 to understand pages viewed, traffic sources, approximate geographical information, device and browser information, website interactions, and successful enquiry events. We use this information to understand website usage, improve the site, and assess content and marketing effectiveness.

We do not send contact form messages, names, email addresses, phone numbers, client details, or free-text enquiries to Google Analytics. We do not currently use advertising profiling, remarketing, advertising pixels, or cross-site advertising tracking tools.

We do not use these analytics tools to directly identify you. We do not currently use analytics data for advertising profiling, remarketing, or cross-site advertising tracking.

10. International Data Transfers

Your personal data may be processed and stored in Japan, which is outside the European Economic Area (EEA).

Where we use third-party technology providers, including form-processing and analytics providers, relevant information may also be processed in other locations where those providers operate.

Japan has been recognized by the European Commission as providing an adequate level of data protection.

Where required, we implement appropriate safeguards to ensure that international transfers of personal data are protected in accordance with GDPR requirements.

11. Your Rights under the GDPR

If you are located in the EEA, you have the following rights under the GDPR:

  • The right to access your personal data
  • The right to rectify inaccurate or incomplete data
  • The right to request erasure of your personal data
  • The right to restrict or object to processing
  • The right to data portability
  • The right to withdraw consent at any time

To exercise your rights, please contact us at: info@towaka.travel. We will respond in accordance with applicable data protection laws.

12. Cookies

Umami Analytics is cookie-free. We use the minimum first-party browser storage needed to remember your privacy preference.

If you choose Allow Google Analytics, Google Analytics may use analytics cookies and related technologies to measure website usage. If you choose Continue without Google Analytics, Google Analytics is not used for subsequent measurement on this website.

You can choose Allow Google Analytics or Continue without Google Analytics when you first visit the website, and you can change that choice later through Privacy settings in the site footer. We do not currently use advertising cookies, remarketing, or advertising profiling technologies.

13. Security Measures

We implement appropriate technical and organisational security measures to protect personal data against unauthorized access, disclosure, alteration, or loss.

These measures are aligned with our internal information security practices and applicable regulatory standards.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, regulatory, or operational changes.

The latest version will always be available on this website, with the revision date indicated at the top.

15. Contact

For any questions regarding this Privacy Policy or the processing of personal data, please contact:

info@towaka.travel