Privacy notice

Who is the data controller

What we collect

• Booking data — name, email, phone (optional), preferred entry slot, ticket type and quantity.
• Payment metadata — provider transaction id, last four digits of card, billing country. We never store full card numbers; the payment provider handles that.
• Technical data — IP address, user agent, language, timestamps of pages visited. Used to keep the site running, block abuse, and produce aggregate traffic counts.
• Support exchanges — when you email us, we keep the thread to resolve the request.

What we do not collect

• We do not sell, rent or share personal data with brokers.
• We do not use Meta pixel, TikTok pixel, LinkedIn Insight tag, or third-party social embeds with cross-site tracking.
• Google Ads conversion measurement is loaded only if you accept all cookies in the cookie banner.
• We do not require an account to browse the site.

Why we use it

• To process and confirm your booking (legal basis: performance of contract).
• To send the entry voucher and slot reminders (contract).
• To prevent fraud and abuse (legitimate interest).
• To comply with tax and accounting obligations in Brazil (legal obligation).

Retention

Booking records are kept for 5 years for fiscal compliance. Support emails are kept for 24 months and then deleted. Technical logs are rotated after 90 days.

Your rights

You can ask us, at any time and for free, to:

• Confirm what data we hold about you.
• Receive a copy in machine-readable form.
• Correct inaccurate data.
• Delete data that is no longer needed for a legal basis.
• Withdraw consent for any processing based on consent.

Write to privacy@tokyotour.online with the subject "Data request".

Cookies

We use essential cookies for security and checkout, plus optional Google Ads conversion measurement only with your consent — see our cookie page for the full list.

International transfers

Our infrastructure provider (Cloudflare) operates a global network; some technical data may be processed outside Brazil under standard contractual clauses.

Changes to this notice

If we materially change how we handle data, we will update the date above and (where possible) notify affected users by email before the change takes effect.