1. Introduction
Welcome to Kyoto Free Walking Tour. We are committed to protecting your personal information and respecting your privacy rights. This policy explains how we collect, use, and safeguard your data when you visit our website or book a tour with us.
2. What Personal Data We Collect
When you interact with our website, we collect:
- Booking Information: Your first and last name, email address, and specific tour booking details.
- Automated Information: We use caching and cookies to collect data about your device, browser type, IP address, and how you navigate our site.
3. How We Use Your Data and The Legal Basis for Processing
We process your data for the following specific purposes:
- To Fulfill Your Booking (Contractual Necessity): We use your full name and contact information to secure your spot, send meeting details, and manage schedule changes.
- Public Tour Schedules (Explicit Consent): To show tour popularity, we display the first name only of booked guests on our public-facing event schedule. We will only publish your first name if you provide explicit, affirmative consent at the time of booking.
- Website Analytics (Legitimate Interest / Consent): We use statistical data to analyze website traffic, optimize page caching, and improve our services.
4. Cookies, Caching, and Google Analytics
Our website uses cookies and caching technologies to ensure the site functions efficiently and securely.
- Essential Technologies: Local caching and strictly necessary cookies are used to keep the website secure and functioning properly. These cannot be disabled.
- Google Analytics: We use Google Analytics, a third-party service, to gather statistical data about website usage. This involves transmitting certain browsing data to Google. You have the right to easily opt out of these statistical cookies at any time via our website's cookie preference banner.
5. Your Rights and Choices
You have the right to control your personal data. At any time, you may:
- Withdraw Consent: If you previously agreed to have your first name displayed on our public schedule, you can withdraw this consent at any time.
- Opt-Out of Analytics: Change your preferences via our cookie banner or use a browser extension to opt-out of Google Analytics.
- Access: Email us for your booking data (name, email, reservations). We respond within 30 days.
- Deletion: Reply "DELETE" to any of our emails to have your data removed within 7 days.
- Data Breaches: In the unlikely event of a significant data breach, we notify the relevant authorities (PPC) and affected users within 3-5 days.
6. Data Security and Third Parties
We implement reasonable security measures to protect your data and we do not sell your personal information. Your data is only shared with trusted service providers—such as Google (for analytics) and our booking software platforms—strictly for the operational purposes outlined in this policy.
