Skijapow
Trip

Privacy Policy

Effective · Version 0.1 (draft)

This explains what personal data we collect, why we use it, who we share it with, and the rights you have over it.

Prototype notice. SkiJapow is currently a product prototype using mock data with no real payments. This document is a working draft provided for review — it has not yet been reviewed by qualified legal counsel and is not a binding agreement. Company details and contact addresses below are placeholders.

1. Who is responsible for your data

SkiJapow (SkiJapow (operating entity to be confirmed)) is the controller of the personal data described here. Because the operating entity is still being finalised, the registered controller details and Data Protection contact will be confirmed before launch. In the meantime, reach us at privacy@skijapow.example.

We aim to comply with the EU/UK GDPR and Japan’s Act on the Protection of Personal Information (APPI), since we serve international travellers and operate in Japan.

2. What we collect

Itinerary dataThe dates, activities, party size and preferences you enter as you build a trip. Draft itineraries are stored in your browser until you book.
Booking & traveller detailsYour name, email, phone, the travellers in your party, and the details each activity needs to be delivered.
Payment dataHandled by our payment processor. We receive confirmation and limited details (e.g. card brand, last four digits) but not your full card number.
Account dataIf you create an account: your email and saved itineraries/bookings.
CommunicationsEmails and messages you exchange with us or with suppliers through us.
Technical dataBasic device, browser and usage information collected to run and secure the site (see the Cookie Policy).

3. Why we use it and our legal bases

  • To provide the service — build your itinerary, take payment, request and confirm your activities with suppliers. (Performance of a contract.)
  • To communicate — booking confirmations, updates and support. (Contract / legitimate interests.)
  • To run and secure the site — prevent fraud and abuse, keep the service working. (Legitimate interests / legal obligation.)
  • To meet legal and accounting obligations — keep booking and payment records. (Legal obligation.)
  • Marketing — only where you have opted in, and you can opt out at any time. (Consent.)

4. Who we share it with

We share personal data only as needed to run the service, and we do not sell it. Recipients include:

  • Suppliers — the local operator of each activity receives the details they need to deliver it (traveller names, party size, dates, relevant preferences).
  • Payment processor — to authorise, capture and refund payments securely.
  • Email/communications provider — to send booking, supplier-request and confirmation emails.
  • Hosting and database providers — to store data and run the application.
  • Professional advisers and authorities — where required by law.

These providers act as our processors under contracts that limit them to using your data on our instructions.

5. International transfers

Delivering a trip in Japan for international travellers means data may be processed in Japan, the EU/UK and other countries. Where data leaves your region, we rely on appropriate safeguards (such as adequacy decisions or standard contractual clauses) as required by applicable law.

6. How long we keep it

We keep booking and payment records for as long as needed to provide the service and to meet legal, tax and accounting obligations, then delete or anonymise them. Draft itineraries kept in your browser stay until you clear them or your browser storage is cleared. Account data is kept until you delete your account.

7. Your rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you and get a copy.
  • Correct inaccurate data or complete incomplete data.
  • Delete your data, or restrict or object to certain processing.
  • Receive your data in a portable format.
  • Withdraw consent at any time, where we rely on consent.
  • Complain to your data-protection authority (in the EU/UK) or Japan’s Personal Information Protection Commission.

To exercise any of these, email privacy@skijapow.example. We may need to verify your identity first.

8. Cookies and local storage

We use a small amount of cookies and browser storage to run the site and remember your in-progress itinerary. Details and your controls are in the Cookie Policy.

9. Children

SkiJapow is intended for adults booking trips. We do not knowingly collect data from children except the traveller details a booking adult provides for minors in their party. If you believe a child has given us data directly, contact us and we will delete it.

10. Changes to this policy

We will update this policy as the product and our data practices develop, and note the new effective date at the top. Material changes will be highlighted where appropriate.