What we do with what you tell us.

Who we are

Tokyo Vibes is a private day-tour operator in Shibuya, trading as a sole proprietor. Tokyo Vibes is the data controller for anything you send us through this site.

You can reach us any time at hello@tokyovibes.com or +81 90 7537 2446, or write to us at:

What we collect

From the enquiry form: what you type into it. Your name and email are required so we can reply; the day you're asking about, when you're travelling, how many of you and anything else you write are yours to leave blank.

From the booking form, when you reserve a day: your name, email and mobile number (your guide texts you on the day), where we're meeting you, anything you choose to tell us about the day — and the day itself: the date, the hours, how many of you.

Your card details go to Stripe, our payment processor, inside their own secure form — they never touch our servers. What we see is the amount, the payment's reference, and nothing you'd find on the front of your card.

There is no account, no login and no password.

Why, and on what basis

To answer you, and for nothing else. Under UK and EU data protection law that is taking steps at your request before entering into a contract, together with our legitimate interest in replying to people who write to us.

We don't sell it, share it for marketing, add you to a list, or send you anything you didn't ask for.

When you book a day

A booking passes through three named hands, each doing one job. Stripe takes the payment. Our own operations system holds the booking record — the same private system your guide works from, which is how what you tell us reaches them. And Resend, our email provider, delivers your confirmation. Nobody else sees a booking, and nothing about one is sold or shared for marketing.

Your day page — the private link in your confirmation email — shows the day's facts, and your guide's name and number once they're confirmed. It deliberately never shows your own email or phone number, so a forwarded link tells nobody how to reach you.

Booking records are kept as long as Japanese tax and accounting law requires business records to be kept; the enquiry rule — deleted after two years — stays as it was for enquiries.

The meeting-point search

One field on the booking form — where we meet — offers suggestions as you type. They come from Google Places: what you type in that field, and only that field, goes to Google to fetch them, with the technical basics any web request carries. Ignore the suggestions and type freely and nothing changes — the field works as plain text. What Google does with searches is governed by Google's own privacy policy; nothing else on this site talks to Google Maps.

Analytics, and your choice

We advertise, so we need to know which adverts are worth paying for and which pages people actually read. That is what Google Analytics does here. The only other measurement is a page-view count from Vercel, who host the site — it uses no cookies, stores nothing on your device, and cannot identify you.

In the EU and the UK it does not run until you allow it. Before you choose — and if you decline — it stays in a restricted mode that sets no cookies and cannot identify you. Elsewhere it runs by default and you can switch it off from any page.

Cookie settings sits in the footer of every page, and turning it off stops collection immediately.

What this site still doesn't do

No advertising pixels from anyone else, no social media widgets, no session recording, no heatmaps, no chat widget. The typefaces are served from our own domain rather than from Google.

We don't sell your data, share it for marketing, add you to a list, or connect what Analytics sees to anything you wrote to us. There is no account, no login and no password — and card payments happen inside Stripe's own form, so card numbers never touch this site's servers.

Your Day / Night choice

If you switch the site between Day and Night, that preference is saved in your own browser so the site looks the same next time. It is not a cookie, it is never sent to us, and clearing your browser data removes it. It tells us nothing about you.

Who else handles it

Five companies, each only as far as they have to:

• Vercel hosts the site. Like any web host their servers log requests, which includes IP addresses, for security and to keep the site running. Their Web Analytics counts page views for us without cookies — visitors are counted through a hash that resets daily, so it cannot follow anyone over time.
• Stripe processes card payments when you book, inside their own secure form. They are the ones who see your card; we never do.
• Supabase hosts our operations system — where booking records live — on servers in Tokyo.
• Resend delivers the emails an enquiry or a booking becomes. They pass them on and we keep them in our own inbox.
• Google provides Analytics (only if you have allowed it — it sees pages, not people, and never your name or anything you wrote to us) and the meeting-point suggestions when you use that one field, as described above.

Vercel, Stripe, Resend and Google operate outside Japan and outside the EEA, so writing to us, booking, or allowing analytics involves an international transfer of your data. Booking records themselves are held on servers in Tokyo. We use these companies because they are the smallest number of hands that still does the job.

How long we keep it

Enquiries: two years from the last time we were in touch, then deleted. Bookings: as long as Japanese tax and accounting law requires business records to be kept. If you ask us to delete something sooner, we will — except the parts the law makes us keep.

Your rights

You can ask us to show you what we hold, correct it, delete it, restrict what we do with it, send it to you in a portable form, or object to us holding it at all. Email hello@tokyovibes.com and we'll do it — there's no form and no process to survive.

If we get it wrong, you can complain to the data protection authority where you live. In the UK that is the ICO; in the EU it is your national authority.

Changes

If what we do changes, this page changes with it, and the date at the top moves. We won't quietly broaden it.