Privacy Policy

2020.01.26

Last updated: (September 25, 2025)

JPRail (“us,” “we,” or “our”) operates https://jprail.com (the “Site”).
This page explains our policies regarding the collection, use, and disclosure of personal information we receive from users of the Site.

JPRail (“we,” “our,” or “us”) operates https://jprail.com (the “Site”).
We are committed to protecting your privacy and handling your personal information in a transparent and secure manner.

This Privacy Policy explains how we collect, use, share, and safeguard your information when you use our Site. It also describes your privacy rights and how you can exercise them in accordance with applicable laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and the Act on the Protection of Personal Information (APPI) in Japan.

By accessing or using our Site, you agree to this Privacy Policy.

1. Information We Collect

We may collect the following categories of personal data:

  • Identifiers: Name, email address, postal address, phone number
  • Account Information: Login credentials (if applicable)
  • Payment Information: When you make a purchase or booking
  • Device and Technical Data: IP address, browser type, operating system, cookies, and similar technologies
  • Usage Data: Pages you visit, time spent on the Site, referring website
  • Location Data: When you access our Site from a mobile device or when location services are enabled

We may collect this data directly from you (e.g., when you submit a form) or automatically through cookies and analytics tools.

2. How We Use Your Data

We process your personal data for the following purposes:

  1. To provide and maintain our services
  2. To process bookings, purchases, and payments
  3. To communicate with you, including sending newsletters or promotional materials (with your consent where required)
  4. To improve and personalize your experience on the Site
  5. For analytics and research to enhance our services
  6. To comply with legal obligations and resolve disputes
  7. For security and fraud prevention

Legal Basis (GDPR):
If you are located in the EEA, we process your data on the following legal grounds:

  • Your consent
  • Performance of a contract
  • Compliance with legal obligations
  • Our legitimate interests, such as improving services and preventing fraud

3. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your browsing experience and analyze traffic.

Types of cookies we use:

  • Essential cookies: Required for core site functionality
  • Analytics cookies: Help us understand how visitors use our Site (e.g., Google Analytics)
  • Advertising cookies: Used to deliver personalized ads (e.g., Google AdSense)

You can manage or disable cookies through your browser settings or our Cookie Settings tool.
For users in the EU/EEA, we will obtain your consent before placing non-essential cookies.

4. Third-Party Sharing and Disclosure

We may share your data with the following third parties for the purposes described above:

  • Payment processors (e.g., PayPal, Stripe)
  • Analytics providers (e.g., Google Analytics)
  • Advertising partners (e.g., Google AdSense, HotelsCombined, Klook, Expedia)
  • Service providers who help us operate our Site

We do not sell personal information for monetary gain.
For California residents, certain data sharing for targeted advertising may be considered “selling” or “sharing” under the CCPA. You can opt out using our Do Not Sell or Share My Personal Information link.

5. International Data Transfers

Your personal data may be transferred to and processed in countries outside your place of residence, including Japan and the United States.
When transferring data from the EEA, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) to ensure data protection.

6. Your Privacy Rights

Depending on your location, you may have the following rights:

Under GDPR (EU/EEA):

  • Right to access your data
  • Right to rectification (correction)
  • Right to erasure (“right to be forgotten”)
  • Right to restrict processing
  • Right to data portability
  • Right to object to certain processing activities
  • Right to withdraw consent at any time

To exercise these rights, please contact us through the contact form on our website.

Under CCPA (California):

  • Right to know what personal data we collect and how it is used
  • Right to request deletion of your data
  • Right to opt-out of the sale or sharing of your personal data
  • Right to non-discrimination for exercising your privacy rights

For opt-out requests, please visit our Do Not Sell or Share My Personal Information page.

7. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law.
When data is no longer needed, we will securely delete or anonymize it.

8. Children’s Privacy

Our Site is not intended for children under 13 (or under 16 in the EU).
We do not knowingly collect personal data from children.
If you believe a child has provided us with personal data, please contact us immediately, and we will take steps to delete it.

9. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
However, no method of transmission over the Internet or electronic storage is 100% secure.
We cannot guarantee absolute security.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.
When we make material changes, we will notify you by:

  • Posting the updated policy on this page
  • Updating the “Last Updated” date at the top of this page
  • Providing additional notice if required by law (e.g., email notification)

11. Contact Information

If you have questions or concerns about this Privacy Policy or our data practices, please contact us through the contact form on our website.

12. Region-Specific Disclosures

For users in the EEA, UK, and Switzerland:

  • The data controller responsible for your personal data is JPRail.
  • You have the right to lodge a complaint with your local data protection authority.

For users in California:

  • Please review our CCPA Notice for additional information on your privacy rights.

13. Do Not Sell or Share My Personal Information

California residents can opt out of the “sale” or “sharing” of their personal data as defined under the CCPA.
To exercise this right, please visit: Do Not Sell or Share My Personal Information.

14. Effective Date

This Privacy Policy is effective as of September 25, 2025 .

Home
Copied title and URL