Privacy Policy of NOA CAFE Ginza

1. Introduction and company information

This Privacy Policy explains how NOA CAFE Ginza (“we,” “us,” or “our”) collects, uses, discloses, stores, and protects personal information in connection with our coffeehouse business and related services, including our website, online inquiries, reservations, customer communications, and in-store operations.

Operator / Data Controller: NOA CAFE Ginza
Address: 5-8-5 Ginza, Chuo-ku, Tokyo 104-0061, Japan
Email: [email protected]
Phone: +81 3-3574-8324
Website: nyfax.pro

This Privacy Policy is prepared in accordance with the Act on the Protection of Personal Information of Japan (“APPI”) and other applicable Japanese laws and guidelines.

2. Data collection and processing

We may collect personal information directly from you, automatically through our website, or from third parties where permitted by law. Depending on how you interact with NOA CAFE Ginza, the categories of personal information we may process include:

• Identification and contact details, such as name, email address, phone number, and other contact information;
• Reservation and inquiry details, including requested dates, times, number of guests, and communication content;
• Payment-related information, to the extent necessary for transaction processing, refunds, or accounting;
• Transaction and purchase history, including order details, receipts, and billing records;
• Website usage data, such as IP address, browser type, device information, access logs, cookies, and similar technologies;
• Customer service communications, feedback, complaints, and survey responses;
• Any other information you voluntarily provide to us.

We will collect only the information necessary for the stated purposes and will process it lawfully and appropriately.

3. Purpose of data processing

We use personal information for the following purposes:

• To provide our coffeehouse services, including reservations, order handling, customer support, and related operations;
• To respond to inquiries, requests, and feedback;
• To process payments, refunds, invoicing, and bookkeeping;
• To administer loyalty, promotional, or marketing communications where permitted;
• To improve our services, website functionality, and customer experience;
• To maintain security, prevent fraud, and ensure proper business operations;
• To comply with legal obligations under Japanese law and respond to lawful requests;
• To manage disputes, claims, and recordkeeping.

We will not use personal information for purposes beyond those reasonably related to the above purposes without obtaining appropriate consent or otherwise having a lawful basis.

4. Legal basis for processing

Under Japanese privacy law, we process personal information on the basis of the following grounds, as applicable:

• Performance of a contract or steps prior to entering into a contract, such as handling reservations or service requests;
• Compliance with legal obligations, including accounting, tax, consumer protection, and other applicable laws;
• Legitimate business interests in operating, protecting, and improving NOA CAFE Ginza, provided such interests are not overridden by the rights and interests of the individual;
• Your consent, where required by law or where we voluntarily rely on consent, such as for certain marketing communications or cookie use;
• Protection of life, body, or property where necessary and difficult to obtain consent in advance.

Where the APPI requires consent or notice for a particular type of processing or disclosure, we will obtain consent or provide the required notice in accordance with applicable law.

5. Data sharing and third parties

We may share personal information with third parties only as necessary and in accordance with applicable law. Such third parties may include:

• Payment processors and financial service providers;
• Website hosting, IT support, analytics, and security service providers;
• Reservation, delivery, or ordering platform providers;
• Professional advisors such as accountants, lawyers, and auditors;
• Public authorities, courts, or law enforcement when required by law.

We take reasonable measures to ensure that third parties handle personal information appropriately and only for authorized purposes. Where we disclose personal information to a third party in a manner that constitutes a third-party provision under the APPI, we will do so only as permitted by law and with any required notice or consent.

6. Data transfer to third countries

In some cases, personal information may be stored or processed on systems located outside Japan, including through cloud service providers or other vendors. If personal information is transferred to a country or region outside Japan, NOA CAFE Ginza will take appropriate measures in accordance with APPI requirements, which may include:

• Confirming the data protection framework of the receiving country;
• Obtaining your consent where required;
• Implementing contractual or organizational safeguards with the recipient;
• Ensuring that the transfer is otherwise permitted by law.

We will handle cross-border transfers in a lawful and secure manner.

7. Storage duration

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Inquiry records: retained for a reasonable period to respond to follow-up communications and manage customer service;
• Reservation and transaction records: retained for accounting, tax, and operational purposes as required by law or business necessity;
• Marketing-related records: retained until consent is withdrawn or the communication stops;
• Security logs and website access records: retained for a limited period necessary for security, troubleshooting, and fraud prevention.

When personal information is no longer required, we will delete, anonymize, or otherwise securely dispose of it in accordance with internal procedures and applicable law.

8. User rights

Subject to the APPI and other applicable laws, you may have the following rights regarding your personal information:

• Access to the personal information we hold about you;
• Rectification or correction of inaccurate or incomplete information;
• Erasure or deletion of information where applicable;
• Restriction of processing in certain circumstances;
• Data portability, to the extent recognized under applicable law and feasible in practice;
• Objection to certain processing activities, including direct marketing where applicable.

To exercise these rights, please contact us using the details provided below. We may ask for information necessary to verify your identity and to confirm the scope of your request. We will respond in accordance with applicable law.

9. Withdrawal of consent

Where our processing is based on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before the withdrawal.

If you withdraw consent, we may no longer be able to provide certain services, such as promotional communications or specific website features, where consent is necessary. We will inform you if this affects the availability of a service.

10. Right to complain

If you believe that our handling of personal information is not compliant with applicable law, you may contact us first so that we can investigate and address your concern.

You also have the right to lodge a complaint with the relevant supervisory authority in Japan, including the Personal Information Protection Commission (PPC), or other competent authority, as applicable.

11. Data security

NOA CAFE Ginza implements reasonable technical, physical, and organizational safeguards to protect personal information against unauthorized access, loss, destruction, alteration, disclosure, or misuse. These measures may include:

• Access controls and role-based permissions;
• Secure storage and encryption where appropriate;
• Employee confidentiality obligations and training;
• Monitoring for security incidents and misuse;
• Regular review of operational and security procedures.

Although we strive to protect personal information, no method of transmission or storage is completely secure. We cannot guarantee absolute security, but we will take appropriate steps to reduce risks and respond promptly to incidents in accordance with applicable law.

12. Contact information

For questions, requests, complaints, or concerns regarding this Privacy Policy or our handling of personal information, please contact:

NOA CAFE Ginza
5-8-5 Ginza, Chuo-ku, Tokyo 104-0061, Japan
Email: [email protected]
Phone: +81 3-3574-8324

13. Changes to privacy policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or operational needs. When we make material changes, we will post the updated Privacy Policy on our website and indicate the effective date where appropriate.

Your continued use of our services after the updated Privacy Policy becomes effective indicates your acknowledgment of the revised terms, to the extent permitted by law.

Effective date: 2026-08-06