Privacy Policy
Last updated: March 2025 | Compliant with GDPR
1. Who We Are
Gojo Paradiso is a business providing accommodation, restaurant and creative workshop services in Japan. Address: Kyoto, Japan | Email: info@gojoparadiso.net | Website: www.gojoparadiso.net
2. What Data We Collect
- Information you provide: name, email, phone number, booking details.
- Automatic data: IP address, browser type, pages visited, visit time.
- Cookies: as detailed in section 5 below.
3. How We Use Your Data
- Processing bookings and payments
- Sending booking confirmations and relevant updates
- Improving user experience
- Complying with legal requirements
Legal basis: Contract performance (GDPR Art. 6(1)(b)), Consent (Art. 6(1)(a)), Legitimate interest (Art. 6(1)(f)).
4. Third-Party Sharing
We do NOT sell personal data. Data is shared only with:
- Stripe – for secure payment processing
- Resend / SMTP – for sending emails
- Zoho Analytics – for usage analysis (with consent only)
- Base44 – application platform (data storage)
All parties are bound by GDPR-compliant data processing agreements.
5. Cookies
| Type | Purpose | Consent Required |
|---|---|---|
| Essential | Login, cart, language preferences | No (required) |
| Analytics | Zoho PageSense – usage analysis | Yes |
| Marketing | Campaign tracking | Yes |
Cookie preferences can be changed at any time via the banner at the bottom of the site.
6. Data Retention
Booking data is retained for 7 years for accounting purposes. Marketing data is deleted after 2 years of inactivity. You may request deletion at any time (see section 7).
7. Your Rights (GDPR)
- Right of access – receive a copy of your data
- Right to rectification – correct inaccurate data
- Right to erasure – 'the right to be forgotten'
- Right to restriction – limit processing
- Right to portability – receive data in structured format
- Right to object – object to processing
- Withdrawal of consent – withdraw given consent
To exercise these rights: info@gojoparadiso.net. Response within 30 days.
8. Data Transfers Outside EEA
Some services (e.g. Base44, Stripe) may process data outside the European Economic Area. Such transfers are made pursuant to the European Commission's Standard Contractual Clauses (SCCs).
9. Data Security
We use HTTPS, TLS encryption, and strict access controls. Payments are processed directly through Stripe and do not pass through our servers.
10. Contact & Complaints
Data Protection Officer: privacy@gojoparadiso.net
You have the right to lodge a complaint with your local supervisory authority.
