FUYU CONCIERGE
FUYU CONCIERGE
FUYU CONCIERGE
This policy explains what personal information FUYU Concierge collects, why we use it, and the choices you have. “We”, “us” and “our” mean Cos Sports 合同会社 (FUYU SKI School), the operator of FUYU Concierge. “You” includes anyone who contacts us, uses our website, makes an enquiry or booking, or takes part in services we arrange.
Last updated:
FUYU Concierge is operated by Cos Sports 合同会社 (FUYU SKI School), which is responsible for the processing described here. Representative: Yuan Tsu Yi. Address: 北海道俱知安町八幡 707-5, Japan. Telephone: 050-6869-1239.
We handle information under Japan’s Act on the Protection of Personal Information (APPI) and other applicable laws. Using service providers does not remove our legal responsibilities. For privacy questions, requests or complaints, contact fuyuskischool@gmail.com.
Contact and traveller details: names, email, telephone numbers including country codes, LINE/WhatsApp or other contact details supplied by you or an authorised companion through forms, email or customer service; and companion names, birth dates or ages where needed. Companion details may be added after the initial accommodation enquiry.
Travel and booking details: travel and stay dates, party size, children’s ages, accommodation and room preferences, budget, flights, transport, restaurant and activity requests, quotes, selections, booking status, change or cancellation requests, correspondence and feedback. Equipment rentals and lessons may also require height, weight, equipment type and ability.
More sensitive information: dietary requirements or allergies are optional on the restaurant form. Share only what is needed. For health, medical or other specially protected information, we explain the purpose and obtain any consent required by law. Necessary disclosure to restaurants, instructors or other suppliers also requires the appropriate scope and consent. Do not put medical records or unnecessary identity documents in general notes.
Agreement and transaction records: accommodation proposals, the terms and data-disclosure notice accepted, their versions, acceptance time and associated account; and relevant quote, payment or refund status and reconciliation information. Online card payments are not enabled. General forms do not request full card numbers, security codes, passwords or login codes.
Technical and security records: sign-in and verification events, essential website requests, error codes, processing times and security records. Hosting, verification and cloud providers may also process IP addresses, browser and connection information. See sections 7 and 10.
The website currently has no passport-scan collection, automated document reading, facial recognition, guest-photo records or automatic call recording/transcription. If a hotel legally requires identification, the hotel or FUYU will explain what is needed and how to provide it. Long-term storage of passports or photographs on this website is not the default.
We use information to respond, match accommodation and services to your needs, check availability and pricing, prepare quotes, arrange bookings and travel, maintain traveller records, contact you, and handle changes, cancellations, refunds, feedback or disputes. Other purposes include account and website security, abuse prevention, necessary transaction checks and legal obligations.
Accommodation recommendations consider your dates, party size, budget and preferences. A recommendation does not confirm live availability, a final price or a booking. You may ask our team to review or adjust it. Request receipts, quotes, staff replies and itinerary updates are service communications, not a marketing subscription.
Where processing relies on consent, we obtain it as required by applicable law; you may contact us to withdraw it. If EU, UK or other privacy laws apply, we also meet their applicable requirements. This policy is not blanket permission for every use of your information.
We share necessary information with the accommodation, lesson, transport, rental, restaurant or activity suppliers involved in your requested arrangements. Examples include names, party size, stay dates and required age details for a hotel, or height, weight and ability for equipment rental. Any additional notice or consent required is addressed before disclosure.
Accommodation payment/cancellation terms and necessary traveller-data disclosure have separate acknowledgements. That agreement does not cover marketing, all health information or sharing unrelated to the arrangement.
Current technology services include: the Sites hosting platform and Cloudflare website infrastructure and Turnstile bot verification; Supabase account verification, guest/trip database and backend services; and Google Gmail for verification codes, request receipts, quote/staff notifications and email correspondence.
When you choose LINE, WhatsApp, Instagram or another contact platform, that platform also processes your messages. A payment provider has not been enabled; we will update the relevant notices before introducing payment or other data-processing services.
We do not sell personal information or disclose it for cross-site behavioural advertising. Information may be given to competent authorities or other necessary recipients when required by law or permitted for security incidents or legal requests.
Travel services are primarily arranged in Japan. The main database for our current Supabase project is in Singapore. Hosting, bot verification, email and communication providers may process information in other countries. The main database region does not mean all backups, technical records or provider processing are confined to that country. Staff access from other locations may also involve international processing.
International processing requires review of recipients, purposes and safeguards under applicable law. Where prior consent is required, we provide the required information and obtain that consent; this policy alone does not replace it. You may ask about locations and safeguards. Staff access locations, provider contracts, subprocessors and cross-border safeguards still need to be verified.
Retention depends on the purpose, completion of services, legal obligations and the need to handle disputes. We do not adopt indefinite retention as a default.
Enquiry, traveller and itinerary records support replies, quotes, arrangements and necessary follow-up; an enquiry that does not become a booking is not automatically added to a marketing list. Booking, transaction, agreement and dispute records are handled under applicable accounting, tax, contractual and other retention duties. Health or allergy information is limited to the arrangement and should be deleted or de-identified when no other lawful reason requires retention.
Security records and backups are managed for security purposes and under platform retention mechanisms. Deleting a primary record does not mean every backup or email copy immediately disappears; those copies also need deletion and access controls. Archiving a customer case is not deletion of personal information.
Specific retention periods, routine cleanup and backup-deletion procedures remain to be finalised. Requests can be made under section 9. We check data locations and legal restrictions before acting and explaining the outcome; deletion requests are currently handled by our team.
The website uses HTTPS, email-code sign-in, and access restrictions based on organisation, staff role and trip permission. Backend controls include data-access rules, necessary operation records, abuse prevention and error tracking.
Our application error logs focus on reference numbers, operation types and error categories, avoiding full form contents, passwords, verification codes, access credentials and keys. Infrastructure providers may keep their own operational and security logs. Necessary staff actions and consent history are recorded to help check requests and disputes.
Protect your email account and devices, and do not share login codes. No technical or organisational measure can guarantee absolute security. Contact us promptly if you suspect misuse of your account or information.
The website currently has no marketing-newsletter subscription or marketing-email open/click tracking. Contacting us, submitting a form or booking does not automatically mean you agree to marketing.
If newsletters or promotions are introduced, we will explain them separately, obtain the choice or consent required by law, and provide an easy way to unsubscribe. Declining marketing does not affect handling your requests. Necessary verification, quote and itinerary messages may still be sent.
To request access, a copy, correction, deletion, cessation of use or third-party disclosure, or withdrawal of consent-based processing, email fuyuskischool@gmail.com. Explain your request and include a trip reference if available. Do not attach passwords, login codes or complete identity-document copies.
We may use proportionate checks to confirm your identity or authority before handling the request under applicable law and explaining the result. We will explain restrictions arising from legal retention, other people’s rights or other legal grounds, and the measures available.
Where other privacy laws apply, you may also request restriction, objection or portability as provided by those laws. Withdrawing consent does not affect earlier lawful processing. Cancelling travel and requesting deletion are separate processes.
FUYU uses authentication cookies needed to keep you signed in and a fuyu-locale cookie for your language choice. The language cookie is set for one year; authentication-cookie duration depends on the session and authentication settings. You can clear or restrict cookies in your browser, which may sign you out or affect functions. The private website’s hosting platform may also use cookies for access control.
The accommodation enquiry endpoint keeps short-lived email hashes and request counts to limit repeated requests or abuse; these identifiers are not completely anonymous. Cloudflare Turnstile processes IP addresses, browser and connection signals to prevent bots and improve verification. Hosting and cloud services may also retain necessary request and security logs, so we do not promise that IP addresses are never stored.
We currently have no advertising or cross-site tracking, visitor cookie linking page-by-page reading time to your identity, or marketing-email tracking. Hotel favourites, proposal selections and questions are retained as service information you actively submit. New non-essential analytics or tracking will require updated disclosure and applicable consent procedures.
Traveller information should come from the individual or an authorised lead contact. A parent or guardian should provide or authorise a minor’s information. Explain this policy and the purpose before supplying someone else’s details.
Children’s ages, measurements and ability should be provided only as needed for accommodation, lessons, rental or activities. Participation and accompaniment depend on each service’s age and safety rules; the website does not assume that all services are adult-only.
If information is lost, disclosed or accessed without authorisation, we will investigate, contain the impact and take necessary measures. Where reporting is legally required, we will notify Japan’s Personal Information Protection Commission (PPC) or the competent authority and affected individuals as required by APPI and other applicable laws.
Hotel websites, transport resources and external services such as LINE, WhatsApp and Instagram handle information under their own policies. Read those policies before using the services. This policy does not replace them or remove FUYU’s legal responsibilities for information we collect or disclose ourselves.
You may leave optional fields blank, ask why information is needed or discuss an appropriate alternative contact method. Without information essential to identity checks, communication or an arrangement, we may be unable to complete that part of the service and will explain why.
This policy does not limit or exclude rights or remedies available under applicable law or remove responsibilities we legally owe you.
This page shows its update date. We will explain new purposes, providers or material processing changes and give notice on the website or through an appropriate contact channel. Publishing an updated policy does not itself establish consent where fresh consent is legally required.
For a privacy question or complaint, contact Cos Sports 合同会社 (FUYU Concierge) at fuyuskischool@gmail.com, telephone 050-6869-1239, or 北海道俱知安町八幡 707-5, Japan. We will review your concern and respond with the outcome.
If concerns remain, you may contact Japan’s Personal Information Protection Commission or another privacy authority with jurisdiction under applicable law.
Official reference: Japan Personal Information Protection Commission · APPI guidelines
