LEGAL
Privacy Policy
Effective Date: April 19, 2026
At JEMS, we respect the privacy of our clients, who often require the highest levels of discretion. This policy explains how we handle your data across our digital platforms and in-person consultations.
1. Data We Collect
Inquiry & Questionnaire Data
We collect names, email addresses, travel dates, and group compositions through our contact and inquiry forms. Through our detailed Logistics Audit Questionnaire, we may collect specific preferences including dietary restrictions, mobility needs, smartphone platform, and tech proficiency — all to tailor your logistics plan.
Guide Download Data
When you download our 2026 QR & IC Survival Guide, we collect your name and email address to deliver the guide and provide relevant follow-up information about our services.
Technical Data
We use Plausible Analytics, a privacy-first analytics tool that does not use cookies and does not collect personally identifiable information (PII). Page-level events are recorded anonymously with no cross-site tracking.
Account Data
If you create a JEMS account, we store your email address, display name, and profile image provided by your authentication provider (Google, GitHub, or Microsoft). We do not store passwords.
What We Do Not Collect
We do not collect passport details, payment card information, physical addresses, or phone numbers through our website. JEMS does not process payments — clients pay vendors directly.
2. How We Use Your Information
We use your data strictly to:
- Generate Precision Itinerary Documents and Station Walkthrough Guides tailored to your trip
- Facilitate Arrival Mastery Workshops, Ticket Lab sessions, and Shadow Guiding
- Communicate vital logistics updates during your Concierge Retainer period
- Deliver the 2026 QR & IC Survival Guide and related educational content
- Improve our website and services through anonymous, aggregated analytics
3. Cookies & Tracking
We do not use advertising, marketing, or cross-site tracking cookies. Our website uses only essential functional cookies:
- jems-share-token — links your browser session to your saved wish list and travel plans so you can return to them later
- Session cookie — maintains your authentication state if you sign in to a JEMS account
- Locale preference — remembers your language choice (English or Japanese)
Our analytics provider, Plausible, is fully cookie-free and does not track individual users across sessions or sites.
4. Third-Party Services
We use the following third-party services that may process limited data on our behalf:
- Plausible Analytics — anonymous, cookie-free website analytics (no PII collected)
- Resend — transactional email delivery (processes recipient email addresses)
- Vercel — website hosting and deployment
- NextAuth.js — authentication via Google, GitHub, or Microsoft OAuth (no passwords stored)
We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not use Google Analytics, Facebook Pixels, or any advertising tracking tools.
5. International Compliance
GDPR (UK/EU)
If you are located in the UK or European Union, we process your data on the basis of contractual necessity (to fulfill our consultancy engagement) and legitimate interest (to respond to inquiries). You have the right to access, correct, delete, or port your data. Contact us to exercise these rights.
CCPA (California, USA)
We do not sell your personal information. California residents have the right to know what data we collect, request deletion, and opt out of any future sale of personal information. We honor Do Not Track signals.
APPI (Japan)
As we operate within Japan, we adhere to the Act on the Protection of Personal Information regarding the storage, handling, and cross-border transfer of personal data.
6. Data Retention
Questionnaire and inquiry data is retained only as long as necessary to provide your consultancy services. Data is deleted upon request or after a reasonable period of inactivity following your trip. Guide download records are retained for the duration of our email communications. You may request deletion of your data at any time by contacting us.
7. Data Security
We protect your data using industry-standard measures including encrypted connections (HTTPS/TLS), secure database hosting, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
8. Children's Privacy
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.
10. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us via our inquiry form or email.