Sumayado
Privacy Policy
This is an English translation of the Japanese original. If there is any discrepancy, the Japanese version prevails.
reth Inc. (“we” or “us”) handles personal information obtained through “Sumayado” (the “Service”) as described below, in accordance with the Act on the Protection of Personal Information of Japan (the “APPI”) and other laws. Terms used here have the meanings defined in the Terms of Use of the Service.
1. Business Operator
reth Inc.
Address: 12304 Hokujo, Hakuba-mura, Kitaazumi-gun, Nagano 399-9301, Japan
Representative: Yu Taguchi, Representative Director
2. Information We Collect
Guests
- Information you enter when booking: name, email address, phone number, date, time, number of people and course of the booking, and requests (such as allergies)
- Payment information: results of payments (amount, date, status, etc.). Card details such as card numbers are collected and managed by our payment service, Stripe; we do not collect or store them
- The language you used
Accommodations and Partners
- Admin Screen account information: email address, name, and the Accommodation or Partner you belong to
- History of actions taken on the Admin Screen (date, time and details)
- Status of the contract with and connection to Stripe (whether a card is registered, contract status, Stripe account ID, etc.). Card numbers and bank account details are managed by Stripe and are not stored by us
Everyone who uses the Service
- Access records: IP address, browser type, pages viewed, date and time (recorded as server logs)
- Cookies: used only to keep you logged in to the Admin Screen. Pages for Guests do not use cookies for advertising or analytics
3. Purposes of Use
- To accept Guests’ bookings and pass them on to the Partner booked
- To send emails about confirming, changing, cancelling or refunding bookings, and about replies from Partners
- To let Accommodations and Partners log in to the Admin Screen and to verify identity
- To bill fees, manage contracts, and send important notices (such as changes to fees or terms)
- To respond to inquiries
- To prevent misuse and fraudulent payments, investigate failures, and operate the Service safely
- To improve the Service (using data aggregated so that individuals cannot be identified)
If you enter information about allergies or your health in the requests field, we use it only to pass it on to the Partner you booked.
4. Provision to Third Parties
We do not provide personal information to third parties without your consent, except in the following cases:
- When a Guest makes a booking: we provide the booking details (name, email address, phone number, date, time, number of people, requests, etc.) to the Partner booked. We do so after you consent on the booking screen
- When required by law
- When necessary to protect a person’s life, body or property and it is difficult to obtain your consent
- Other cases permitted under the APPI
We do not provide Guests’ booking information to the Accommodation where they are staying (unless the Accommodation itself accepts the booking as a Partner).
5. Entrusting the Handling of Information
To the extent necessary for the purposes of use, we entrust all or part of the handling of personal information to the following companies. We require them by contract to manage it appropriately.
- Stripe, Inc. (payment processing) — United States
- Render Services, Inc. (operation of servers and databases) — United States (data stored on servers in Singapore)
- Cloudflare, Inc. (storage and delivery of images and files) — United States
- Resend, Inc. (sending emails) — United States
6. Provision to Third Parties in Foreign Countries
The companies listed above are based in the United States, and some data is stored and processed on servers in the United States or Singapore. Information on the personal information protection systems of each country is available on the website of Japan’s Personal Information Protection Commission. We confirm that these companies take measures meeting the standards required by the APPI, and take necessary steps to ensure they continue to do so.
7. Security Measures
- Only logged-in staff can use the Admin Screen, and the information each Accommodation or Partner can see is separated
- Communications are encrypted (HTTPS)
- We limit the staff who handle personal information and provide them with the necessary training
- We keep a history of actions so that unauthorized access can be detected
8. Retention Period
We keep booking and contract information for as long as needed for the purposes of use and for periods required by law (such as accounting records), and delete it when it is no longer needed.
9. Requests for Disclosure, Correction, Suspension of Use, etc.
If you ask us to disclose, correct, add to, delete, stop using, or stop providing to third parties the personal information we hold about you, or to disclose records of provision to third parties, we will respond without delay in accordance with the law after verifying your identity. Please contact us using the details below.
10. Contact
reth Inc.
Email: sumayado.reth@gmail.com
Hours: Weekdays 10:00–17:00 (Japan time)
For questions about the booking itself (food, services, etc.), please contact the restaurant or company you booked.
11. Changes
We may change this Privacy Policy in line with changes to laws or to the Service. We will announce important changes on the Service.
Effective date: December 1, 2026