Privacy notice
Last updated 2026-06-08. This page explains what we collect, why, and how to ask us to delete it.
Who is the data controller
TOKYO AGENCIA DE VIAGENS E TURISMO LTDA
CNPJ 31.008.719/0001-00
Av. Senador Canedo, 1468 — Quadra 29-A, Lote 10-A
Jardim das Oliveiras · CEP 75256-207
Senador Canedo — GO · BR
Contact: privacy@tokyotour.online
What we collect
- Booking data — name, email, phone (optional), preferred entry slot, ticket type and quantity.
- Payment metadata — provider transaction id, last four digits of card, billing country. We never store full card numbers; the payment provider handles that.
- Technical data — IP address, user agent, language, timestamps of pages visited. Used to keep the site running, block abuse, and produce aggregate traffic counts.
- Support exchanges — when you email us, we keep the thread to resolve the request.
What we do not collect
- We do not run advertising trackers (no Google Ads pixel, no Meta pixel, no third-party retargeting on this domain).
- We do not sell, rent or share personal data with brokers.
- We do not require an account to browse the site.
Why we use it
- To process and confirm your booking (legal basis: performance of contract).
- To send the entry voucher and slot reminders (contract).
- To prevent fraud and abuse (legitimate interest).
- To comply with tax and accounting obligations in Brazil (legal obligation).
Retention
Booking records are kept for 5 years for fiscal compliance. Support emails are kept for 24 months and then deleted. Technical logs are rotated after 90 days.
Your rights
You can ask us, at any time and for free, to:
- Confirm what data we hold about you.
- Receive a copy in machine-readable form.
- Correct inaccurate data.
- Delete data that is no longer needed for a legal basis.
- Withdraw consent for any processing based on consent.
Write to privacy@tokyotour.online with the subject "Data request".
Cookies
We use a minimal set of cookies — see our cookie page for the full list.
International transfers
Our infrastructure provider (Cloudflare) operates a global network; some technical data may be processed outside Brazil under standard contractual clauses.
Changes to this notice
If we materially change how we handle data, we will update the date above and (where possible) notify affected users by email before the change takes effect.