Privacy policy
§1Who we are
Atami Umihoshi, a sole proprietorship, handles your personal information in line with Japan's Act on the Protection of Personal Information (APPI). Contact: stay@atamiumihoshi.com. The proprietor's name and our address are disclosed without delay on request.
§2What we collect
- Booking details: names, email, phone number, dates, number of guests, requests.
- The guest register required by law: each guest's name, address and occupation; for guests without an address in Japan, nationality, passport number and a copy of the passport.
- Payment status. Card details are entered on Stripe's systems; we never see or store full card numbers.
- Messages you send us, and membership details such as your number of stays and tier.
- Website usage: pages visited, device and browser, and cookies (see below).
- Whether you have agreed to receive marketing emails.
§3Why we use it
- To take, manage and confirm your booking and to contact you about it.
- To keep the guest register and check identity, as the Private Lodging Business Act requires.
- To take payment, issue receipts and make refunds.
- To file Atami's accommodation tax and the reports the prefecture requires.
- To arrange tours, restaurants and partner experiences you ask for.
- To run the membership programme.
- To send news and offers, only if you have opted in.
- To keep the site secure, prevent fraud and improve our service.
- To comply with the law.
§4The guest register and passports
We keep the guest register for three years from the date of the stay, as the law requires, and then delete it. Passport details and copies are encrypted, only the people who run the house can open them, and every time they are viewed it is logged. We provide the register to the authorities only when the law requires it.
§6Service providers
We use these companies to run the service, and supervise them under contract:
- Stripe: payments and refunds
- Resend: sending booking and account emails
- Cloudflare: website hosting, delivery and security
- Neon: our database
- Beds24: keeping availability and bookings in step with booking platforms
- Google: website analytics and search
§7Storage outside Japan
Several of these providers are based outside Japan, mainly in the United States, and your information may be stored or processed on servers abroad. We choose providers that keep up protections equivalent to those the APPI requires, and confirm this by contract. On request, we'll tell you which countries are involved, how their privacy laws work, and the measures we take.
§8How we keep it safe
Access to bookings and the guest register is limited by role and protected by sign-in links and session controls; every view of the register is logged. Data is encrypted in transit, passport data also at rest. We review our providers and the legal environment of the countries where data is held.
§10Marketing emails
Fireworks dates, seasonal news and offers are sent only if you tick the separate box to receive them. Every email has a link to stop them, and stopping them doesn't affect your bookings.
§11Your rights
You can ask us to tell you how we use your information, to show it to you, to correct it, to stop using or delete it, or to show records of sharing with third parties. Write to stay@atamiumihoshi.com; we'll confirm your identity and reply without delay. There is no charge.
§12Children
Bookings are made by adults. Children's details are recorded only as part of the guest register the law requires. We never publish photos of children.
§13Changes
We may update this policy; the date at the top shows the latest version.
Questions about these terms? Write to stay@atamiumihoshi.com.