Privacy policy

NOMADO合同会社 ("we") handles personal information in line with Japan's Act on the Protection of Personal Information (APPI). This policy covers this website and our property management service.

1. Who we are

NOMADO合同会社, 16-4-102 Kita 4-jo Nishi 2-chome, Kutchan-cho, Abuta-gun, Hokkaido 044-0054, Japan. Representative: James Hirata.

2. What we collect

• Details you send in the estimate form: name, email, phone, property area and type, and your message.
• Owner details needed to run the agreement: bank account, tax residence and ID.
• Guest details required by Japanese lodging law: name, address, contact details, occupation where minpaku law requires it, and for foreign guests without a Japanese address, nationality, passport number and passport copy. We handle guest details on behalf of the owner who holds the licence or notification.
• Technical data: country and browser type sent with the form, the first page you visited, the referring site and any campaign tags in the link. Button clicks are counted without identifying you. This site uses no advertising cookies. Visit statistics, if enabled, use Cloudflare Web Analytics, which does not use cookies.

3. Why we use it

• To prepare your estimate and reply to you.
• To perform the management agreement, pay you and keep records.
• To keep the guest register required by law and respond to the authorities when legally required.
• To improve this website.

We do not sell personal information or use it for purposes you have not been told about.

4. Sharing

We share personal information only with your consent, where the law requires it, or with service providers who handle it on our behalf under contract, such as website hosting, email, booking platforms, cleaning teams (guest names and dates only) and accountants.

5. Storage outside Japan

This website and its form are run by Cloudflare, Inc. (United States), which may store form data on servers in several countries. If we use an automation service to notify us of new requests, such as Zapier or Slack (United States), the request passes through it. Email and document storage may use Google LLC, also in the United States. The United States does not have a single national privacy law equivalent to the APPI. These providers keep security and privacy measures in place, and we only use them to store and process data for us. Where we rely on a provider's contractual safeguards, we will tell you about them on request. Your IP address is processed by Cloudflare for security checks.

6. Security

• Organisational: a named person is responsible for personal information, and incidents are reported to them.
• Personnel: staff are trained and bound by confidentiality.
• Physical: paper records are kept locked and devices are encrypted.
• Technical: access is limited to staff who need it, accounts use two-step login, and passport copies are stored separately and deleted when the legal retention period ends.
• Foreign systems: we check the privacy rules of countries where providers store data, using information published by the Personal Information Protection Commission.

If a leak occurs that the law requires us to report, we notify you and the Personal Information Protection Commission.

7. How long we keep it

Estimate requests that do not lead to an agreement are deleted after two years, including copies in our notification tools. Guest registers are kept for three years, as lodging law requires. Accounting records are kept for the period required by tax law.

8. Your rights

You can ask us to notify you of the purpose of use, or to disclose, correct, stop using, delete or stop providing to third parties your personal information, free of charge. Use the contact form, call 090-3399-7122, reply to any email from us, or write to the address above. The same contacts handle complaints. We will confirm your identity and respond without delay.

9. Changes

If we change this policy we will update the date at the top of this page.