Privacy Policy

Last updated: As per document

Privacy Policy

eSIM Sales Platform

Last Updated: [Date]

1. Introduction

Tokyo 307 Inc. ("we," "us," or "our") operates the eSIM sales platform (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Platform to purchase eSIM products.

By using the Platform, you consent to the data practices described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Platform.

2. Data Controller

Tokyo 307 Inc. is the data controller responsible for your personal information collected through the Platform.

Contact Information

Company: Tokyo 307 Inc.

Email: esim@tokyo307inc.com

Address: 2-2-15 Hamamatsucho, Minato-ku, Tokyo, Japan

3. Information We Collect

3.1 Personal Information

We collect the following personal information when you make a purchase

Email Address: Required for eSIM delivery and order confirmation

3.2 Payment Information

Payment processing is handled by Stripe, Inc. We do not store or have access to your complete credit card information. Stripe's privacy practices are governed by their own privacy policy.

3.3 Automatically Collected Information

When you access the Platform, we may automatically collect

Device information (browser type, operating system)

IP address

Usage data (pages visited, time spent)

Cookies and similar tracking technologies

4. How We Use Your Information

We use your personal information for the following purposes

Service Delivery: To process your order and deliver your eSIM via email

Customer Support: To respond to your inquiries and provide assistance

Transaction Records: To maintain records of your purchases

Platform Improvement: To analyze usage and improve our services

Marketing (with consent): To send promotional communications if you have opted in

5. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds

Contract Performance: Processing necessary to fulfill your eSIM purchase

Legitimate Interests: Processing for fraud prevention, security, and service improvement

Consent: Processing for marketing communications (where applicable)

Legal Obligation: Processing required by applicable laws

6. Data Sharing

We may share your personal information with

6.1 Sales Partners

If you purchased through a sales partner (e.g., hotel, accommodation provider), they may receive your email address only if you have consented to receive marketing communications from them.

6.2 Service Providers

Stripe, Inc.: Payment processing

Email Service Providers: eSIM delivery and communications

eSIM Providers: Telecommunications partners for eSIM activation

6.3 Legal Requirements

We may disclose your information when required by law, court order, or governmental authority.

7. Cookies and Analytics

7.1 Cookies We Use

Essential Cookies: Required for Platform functionality

Analytics Cookies: To understand how visitors use the Platform

7.2 Google Analytics

We use Google Analytics to analyze Platform usage. Google Analytics uses cookies to collect anonymous usage data. You can opt out by installing the Google Analytics Opt-out Browser Add-on.

7.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Typically

Transaction records: 7 years (for legal and accounting purposes)

Marketing preferences: Until you withdraw consent or unsubscribe

9. Your Rights

Depending on your location, you may have the following rights regarding your personal information

9.1 For All Users

Access: Request a copy of your personal data

Correction: Request correction of inaccurate data

Deletion: Request deletion of your personal data

Opt-out: Unsubscribe from marketing communications

9.2 Additional Rights for EEA Residents (GDPR)

Data Portability: Receive your data in a structured, commonly used format

Restriction: Request restriction of processing

Object: Object to processing based on legitimate interests

Withdraw Consent: Withdraw consent at any time (where processing is based on consent)

Lodge a Complaint: File a complaint with a supervisory authority

To exercise these rights, please contact us at esim@tokyo307inc.com.

10. International Data Transfers

Your personal information may be transferred to and processed in Japan, where our servers are located. For EEA residents, we ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including

SSL/TLS encryption for data transmission

Secure authentication systems

Regular security assessments

Access controls and employee training

12. Children's Privacy

The Platform is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of the Platform after any changes constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us

Tokyo 307 Inc.

Email: esim@tokyo307inc.com

Address: 2-2-15 Hamamatsucho, Minato-ku, Tokyo, Japan