Legal Documentation

Privacy Policy

Last updated: October 25, 2023

1. Introduction

KyotoMobile ("we", "our", or "us") is committed to protecting your privacy and handling your personal information with transparency and care. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or purchase our Japan eSIM data plans.

By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our services.

2. Information We Collect

We collect information you provide directly to us, information collected automatically when you use our services, and information from third-party sources.

Personal Information

  • Name and email address (required for account creation and order confirmation)
  • Billing address (required for payment processing and fraud prevention)
  • Phone number (optional, used for order support communications)

Note: Payment card information is processed directly by our PCI-DSS compliant payment processor. We do not store your full card number on our servers.

Technical Information

  • IP address, browser type, and operating system
  • Device identifiers and eSIM-compatible device model
  • Pages visited, time spent on site, and referral source
  • Cookies and similar tracking technologies (see Section 4)

Order & Usage Information

  • eSIM plan purchased, activation status, and data consumption
  • Order history, transaction IDs, and purchase timestamps
  • Customer support interactions and correspondence
  • Survey responses and feedback you voluntarily provide

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Processing and fulfilling your eSIM orders, including delivering QR codes and activation instructions
  • Sending order confirmations, receipts, and transactional notifications via email
  • Providing customer support and responding to your inquiries
  • Detecting and preventing fraud, unauthorized transactions, and abuse
  • Improving our website, products, and services based on usage patterns
  • Complying with legal obligations and enforcing our Terms of Service

We will only send you marketing communications if you have explicitly opted in. You may unsubscribe at any time using the link in any marketing email.

4. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience, analyze website traffic, and understand where our visitors come from. Cookies are small text files stored on your device.

We use strictly necessary cookies (required for the site to function), analytical cookies (to understand usage), and functional cookies (to remember your preferences). We do not use cookies to serve third-party advertising.

You can control cookie settings through your browser preferences. Disabling certain cookies may affect the functionality of our website, such as keeping items in your cart.

5. Sharing of Information

We do not sell your personal information to third parties.

We may share your information only in the following limited circumstances:

  • Service providers: payment processors, cloud hosting providers, and email delivery services who are contractually bound to protect your data
  • Network partners: carrier partners (such as KDDI) who require minimal technical data to provision and activate your eSIM
  • Analytics services: anonymized, aggregated usage data shared with analytics providers to improve our services
  • Legal compliance: when required by law, court order, or governmental authority, or to protect our legal rights
  • Business transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity

6. Data Security

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for data in transit, encrypted storage for sensitive data at rest, and access controls limiting who within our organization can view your data.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately.

7. International Data Transfers

KyotoMobile operates globally, and your information may be processed in countries other than your country of residence. We ensure that any international transfers of your personal data are subject to appropriate safeguards in accordance with applicable data protection laws, including standard contractual clauses where required.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically, we retain order and transaction records for a minimum of seven years for accounting and legal compliance purposes.

When your data is no longer needed, we securely delete or anonymize it. You may request deletion of your account and associated data at any time, subject to our legal retention obligations.

9. Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal information:

  • Access: request a copy of the personal data we hold about you
  • Rectification: request correction of inaccurate or incomplete information
  • Erasure: request deletion of your personal data, subject to legal retention requirements
  • Portability: request a machine-readable export of your data
  • Objection: object to the processing of your data for marketing purposes at any time

To exercise any of these rights, please contact us at the details listed in Section 13. We will respond to your request within 30 days.

10. Third-Party Services & Links

Our website may contain links to third-party websites or integrate with third-party services such as payment gateways and analytics platforms. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you interact with through our platform.

11. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately and we will take steps to delete that information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by updating the "Last updated" date at the top of this policy. We encourage you to review this page periodically. Your continued use of our services after any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our privacy team: