Address: 1-17-8 Mashiki, Ginowan, Okinawa 902-2224, Japan (this is the business office; it is different from the meeting point on the day of your activity)
Proprietor's name: we will give it without delay when you ask (please contact us at the desk in section 10 below).
Shop: BOSS MARINE (18-18 Uchidomari, Ginowan, Okinawa 904-2203, Japan)
2. Personal information we collect
Name, name reading (Japanese-language bookings only), phone number, e-mail address, and address
Booking details (date, time, course, number of guests), optional requests, booking number
The consent form you complete when you take part (participant names, health answers, consent, signature)
Site usage (Google Analytics; your name, phone number, e-mail address and address are not measured)
3. Purposes of use
Receiving, confirming, changing and cancelling your booking, and sending you information about it
Check-in and safety management on the day
Contacting and billing you when a cancellation fee applies, for example after a no-show
Your address is used only for purpose 3. An address is required to book. Only BOSS MARINE staff who need it to contact or bill you about a cancellation fee view or use it. We never use it for advertising, sales or any other purpose.
4. How long we keep your address
Experience completed as planned: we aim to delete your address 3 days after the scheduled end of the experience.
Cancellation with no fee: we aim to delete it 3 days after the cancellation.
Exceptions: if there is a no-show, an unpaid cancellation fee, a billing inquiry or dispute, or if we have not yet been able to confirm whether you attended or the billing status, we keep your address until the matter is closed and then delete it.
Deletion is done by hand after we review the candidates (normally every Monday, Wednesday and Friday), so it may be a few days later than the dates above.
Deleting your address does not delete the booking record (date, course, number of guests, whether it was cancelled, etc.).
We record when deletions are carried out and how many (the record contains no addresses or names).
5. Retention of other information
Name, phone number, e-mail address and booking records (including the log of confirmation e-mails sent): managed in the booking system under our existing operation. Unlike your address, they are not deleted about 3 days after the scheduled activity date. (Your address and the consent form data are handled as described above and in the next item.)
Consent form contents (including health answers, consent and signatures): automatically deleted from the system 7 days after all participants have signed.
Backups: the booking database is backed up daily and about 7 days of backups are kept. Deleted information may remain in backups until they are replaced (about 7 days). The service providers' systems may also keep records (logs, etc.) for the periods they set.
6. Security measures
Communication is encrypted with HTTPS.
Booking data can be viewed only by logged-in BOSS MARINE staff under per-shop permissions. Staff of other shops and visitors who are not logged in cannot view it.
Your address is not included in booking confirmation e-mails, notification e-mails to the shop, or analytics.
Viewing and use of the address is limited to the work in purpose 3 above.
Address deletions are carried out with a record of the date and number of deletions.
7. Service providers we entrust data to
To run the booking system, send e-mail and operate the website, we entrust the handling of your information to:
Flowless (provision and operation of the booking system; operated by Chillue For Loochoo; privacy policy)
Supabase (booking database)
Resend (sending confirmation and other e-mails; your name, e-mail address and booking details are processed)
ConoHa (website hosting)
Google Analytics (measuring site usage; name, phone number, e-mail address and address are not measured)
8. Storage outside Japan
The booking database is stored in a data center in India (Mumbai) (Supabase, region ap-south-1).
Resend (e-mail sending): account data such as sending logs is stored in the United States regardless of the sending region selected (according to Resend's public documentation).
Google Analytics: processed and stored in Google's data centers and replicated across several locations. Google's public information does not name specific countries or regions.
ConoHa (website hosting; provided by GMO Internet Group): used to deliver the pages of this site. Booking information is stored in the database described above. The location of the server has not been confirmed, so it is not stated here.
9. Disclosure to third parties
We do not provide personal information to third parties without your consent, except where required by law. Entrusting data to the providers in section 7 is not a disclosure to a third party.
10. Requests and contact
To ask us to disclose, correct, stop using or delete your personal information, or for any question, please contact us as follows. We will verify your identity before responding.