1. OMAKASE
  2. Privacy Policy

Privacy Policy

GMO OMAKASE Corporation (hereinafter referred to as the "We") shall establish a privacy policy (hereinafter referred to as the "This policy") as follows with regard to the handling of User information including personal information (defined in Article 1) collected from users of the services provided by We (hereinafter referred to as the "Services").

Article 1 (User information to be collected and Law of collection)

In This policy, the term "User information" shall mean information generated or stored in relation to individuals or personal terminals on personal smartphones, PC, etc., such as information pertaining to the identity of individuals, the history of activities pertaining to communications services, and other information collected by We from users based on This policy.

User information collected by We in Services will be as follows depending on Law of the collection.

(1)Information provided by users

In order for users to use Services, the following information is provided.

  • Name
  • E-mail address and password
  • Telephone number (telephone country)
  • Date of birth, gender, language used, place of work, and residential area
  • Credit card information
  • In addition, the information entered by the user on the entry form stipulated by We (receipt name, allergy information, favorite foods, poor foods, consumption, liquor, etc.) (Personal information requiring consideration (Personal information protection Law (hereinafter referred to as "Law") shall be defined in Article 2, Paragraph 3. Including)

(2)When a user permits the use of a Services to collaborate with other services, and when an information user provided from the said other services permits the use of Services to collaborate with external services such as social network services, the following information shall be collected from the said external services based on the content of the consent obtained at the time of the permission.

  • ID to be used by the user of the external service or other information to identify the user
  • Other information that the user has approved to disclose to the partner due to the privacy of the external service

(3)Information collected by We when users use Services

We may collect data on the accessibility of Services and Law of users. This includes the following information:

  • Terminal information
  • Log information and event history information
  • Cookie and anonymous ID
  • Location information

(4) Information handled on consignment from restaurants, etc. (referring to users who intend to provide their own services through the Services with the prior written consent of We, including electronic methods, such as restaurants, hotels, and others. The same shall apply hereinafter.)

We may, in connection with the use of the Services, handle information on customers of restaurants, etc. (hereinafter simply referred to as "Customer") provided by the respective restaurants, etc. upon entrustment from them. Such entrustment may include, but is not limited to, the management of Customer information and solicitation for the use of the Services. The information handled includes the following:

  • Telephone number (telephone country)
  • Date of birth, gender, language used, place of work, and residential area
  • Other information that Customer may enter voluntarily on the form specified by We (receipt name, allergy information, favorite foods, poor foods, consumption, liquor, etc.) (including personal information requiring special consideration).

2 We shall not acquire any Personal Information Requiring Consideration without obtaining the prior consent of the Person except for cases listed in each item of Paragraph 2 of Article 20 of Law.

Article 2 (Purpose of Use)

We shall use User information for the purposes set forth below.

  • (1)For the purpose of providing, maintaining, protecting, and improving Services such as accepting registrations concerning Services, identifying customers, and calculating usage fees
  • (2)For billing users for Services fees
  • (3)To provide information on Services, to respond to inquiries, and to inform and notify
  • (4)For the purpose of responding to conduct that violates We rules, policies, etc. concerning Services (hereinafter referred to as the "Bylaws, etc.")
  • (5)To be provided to other services other than Services (including those provided by partner companies)
  • (6)To enable users to modify and browse their registered information
  • (7)For notifying changes in Bylaws, etc. regarding Services
  • (8)For the purpose of use incidental to the above purpose
  • (9)For producing personally unidentifiable forms of statistical data associated with We services
  • (10)For the purpose of distributing or displaying We or third-party advertising
  • (11)For other marketing purposes
  • (12)For use by a third party to whom We set forth in Article 4 provides User information for the Purpose of Use set forth in the same Article
  • (13)With respect to the information set forth in Item 4 of Clause 1 of Article 1 hereof, in order to perform the entrusted business

Article 3 (Safety Management Measures)

We will endeavor to keep User information accurate and up-to-date, and will take the necessary and appropriate security measures to protect against unauthorized accessing, tampering, leakage, loss, and damage. The Information Control Manager shall be appointed exclusively in charge of information management, and the Information Control Manager shall appropriately engage in activities related to personal information management.

Article 4 (Provision to a Third Party)

1 We shall disclose User information excluding passwords and credit card data to restaurants, etc. reserved by the user or to restaurants, etc. registered as favorites. User information will be used for the following purposes at the restaurant.

  • (1)Consider acceptance or rejection of an application for reservation, etc. from the user, and refuse or accept such application.
  • (2)Providing information on reservation agreements, etc. through Services to users who wish to apply for reservations, etc.
  • (3)Providing services such as restaurants to users based on reservation agreements concluded between the user and the posting store
  • (4)To carry out procedures such as cancellation or modification on Services and to collect cancellation charges
  • (5)Advertising or promoting eating and drinking places, etc. or services of third parties
  • (6)In addition, restaurants, etc. shall conduct business in accordance with the rules or Services stipulated by We.

2 Restaurants, etc. for which User information has been obtained pursuant to the preceding paragraph shall, within the scope of the objectives set forth in the preceding paragraph, provide such User information to their parent company, subsidiaries, and affiliated companies (each having the meaning set forth in Article 8, paragraphs 3 and 5 of the Ordinance on Terminology, Forms, and Preparation Law of Financial Statements, etc.) or to a third party such as restaurants, hotels, etc. that they select.

3 Except for the cases set forth in the preceding two paragraphs, User information shall not be provided to any third party without the prior consent of the user. Provided, however, that this shall not apply to the following cases:

  • (1)Where the handling of personal information is entrusted, in whole or in part, to the extent that We is required to achieve the Purpose of Utilization
  • (2)Cases where Personal Information is provided as a result of succession of business due to merger or other reasons
  • (3)Cases where it is necessary to cooperate with a state organ or a local government or an entrusted person in executing the clerical works specified by an Law Order, and where obtaining the consent of the user is likely to hinder the execution of the affairs
  • (4)Cases in which it is necessary for the protection of the life, body, or property of an individual, or in which it is particularly necessary for the improvement of public health or the sound upbringing of children and in which it is difficult to obtain the consent of the person
  • (5)Cases in which it is notified in advance that the Purpose of Use includes provision to a third party, the content and Law of the data to be provided, and that the provision of personal information to a third party is discontinued at the request of the user
  • (6)In accordance with Law Ordinance, including the Personal Data Protection Law

4 In the case of the preceding paragraph, particularly in the case of providing personal information to a third party in a foreign country, information on the name of the foreign country, the system for the protection of personal information in the foreign country, and the measures for the protection of personal information taken by the third party to whom the personal information is provided shall also be provided to the user.

5 In addition to the preceding clauses, We may provide information of viewers and users of the Services (hereinafter collectively referred to as "Users, etc.") to third parties under the conditions specified below.

  • (1)Activity history information, etc.
Tool name Tool provider Outline of the acquired information Purpose of Use
Google Analytics Google Inc. Data related to pages viewed by the user (page URL, etc.) Understanding of usage status and consideration of service improvement
Brevo Sendinblue, Inc. The user's mail open status (if available depending on the user's environment) Regular distribution of useful information from services to users

※1 Behavior History Information and Access Log
When We website is accessed by Users, etc., URL history information (accessed content, browsing status (including browsing status not related to sending activities)), attribute information (age, gender, etc., information that cannot be individually identified, browsing terminal information, etc.), and access log (name of Internet service provider, domain name, IP address, type and version of browser used, type of OS, date of access, etc.) are obtained. We will use the obtained access logs to improve the functionality and convenience of We website and to provide services to Users, etc., and even in such cases, will not identify individuals.

※2 Additional Information on Cookie
We may use Cookie on We website, etc. A Cookie is a text data in We format that is sent to a user's browser accessing a website managed by We and is composed of unique text. It may be used to acquire activity history information and attribute information of Users, etc. who accessed the website. Combining these data can result in personally identifiable information, but ID are issued randomly to browsers and do not tie them to personally identifiable data. We shall use the information on Cookie and the information obtained by using Cookie for improving the functions and convenience of We operating website, etc., and for providing services to Users, etc., and even in such cases, individuals will not be identified. Note that Cookie has a session Cookie that is automatically cleared when you finish browsing the website, a persistent Cookie that is kept for a specified duration, and is divided into first-party Cookie and third-party Cookie by the attributes of the specified source domain. You can disable Cookie or delete the history by changing the setting of the browser to be used. However, in such cases, the convenience may be degraded, for example, the user may need to enter a ID and password every time he or she browses to the website, or the use of the service may be restricted. For more information on disabling Cookie and deleting the history, refer to the respective browsers or to Cookie (or cookies) of the settings menus.

(2)Provision to Third Parties Located in Foreign Countries

Services provides User information obtained from customers to third parties located in the following countries. We shall be responsible for managing User information provided, and inquiries are received at We inquiry center.

1. SaaS mail marketing automation tools

  • (1)The name of the foreign country where it is located.
    French Republic
  • (2)Information concerning the system for the protection of personal information in the foreign state
    Information on PDF file of the country listed on the following website of the privacy committee.
    https://www.ppc.go.jp/enforcement/infoprovision/laws/GDPR/
  • (3)Information concerning the measures for the protection of personal information to be taken by the third party to which the personal information is to be provided
    Measures have been taken to meet all eight principles of OECD Privacy Guidelines.

2. E-mail Marketing Software

  • (1)The name of the foreign country where it is located.
    United States of America
  • (2)Information concerning the system for the protection of personal information in the foreign state
    https://www.ppc.go.jp/files/pdf/USA_report.pdf
  • (3)Information concerning the measures for the protection of personal information to be taken by the third party to which the personal information is to be provided
    Measures have been taken to meet all eight principles of OECD Privacy Guidelines.

3. Platform for payment processing and data services

  • (1)The name of the foreign country where it is located.
    United States of America
  • (2)Information concerning the system for the protection of personal information in the foreign state
    https://www.ppc.go.jp/files/pdf/USA_report.pdf
  • (3)Information concerning the measures for the protection of personal information to be taken by the third party to which the personal information is to be provided
    Measures have been taken to meet all eight principles of OECD Privacy Guidelines.

4. Customer support/administration SaaS providers

  • (1)The name of the foreign country where it is located.
    United States of America
  • (2)Information concerning the system for the protection of personal information in the foreign state
    https://www.ppc.go.jp/files/pdf/USA_report.pdf
  • (3)Information concerning the measures for the protection of personal information to be taken by the third party to which the personal information is to be provided
    Measures have been taken to meet all eight principles of OECD Privacy Guidelines.

5. Mobile pushing notification and messaging service provider

  • (1)The name of the foreign country where it is located.
    United States of America
  • (2)Information concerning the system for the protection of personal information in the foreign state
    https://www.ppc.go.jp/files/pdf/USA_report.pdf
  • (3)Information concerning the measures for the protection of personal information to be taken by the third party to which the personal information is to be provided
    Measures have been taken to meet all eight principles of OECD Privacy Guidelines.

Article 5 (Shared Use)

1 Where personal information is used jointly with a specific person, We shall notify the user himself/herself in advance or put the user in a readily accessible condition before sharing the personal information of the said person, as well as the content and scope of personal information to be used jointly, the purpose of use of the user, and the name of the person responsible for the management of the said personal information.

2 We shall be used jointly with GMO Internet Group Co., Ltd. and GMO Internet Group companies (referring to affiliated companies and subsidiaries as described in https://www.gmo.jp/company-profile/groupinfo/, and the same shall apply hereinafter) as follows.

  • (1)Scope of co-users
    GMO Internet Group Inc. and GMO Internet Group companies
  • (2)Purpose of Use
    The scope of the "Purpose of Use of Personal Information" set forth by GMO Internet Group Co., Ltd. and GMO Internet Group companies shall be the Purpose of Use shared by all Shared Usage Companies.
  • (3)Items of personal information to be shared
    Names, addresses, E-Mail addresses, telephone numbers, contractual data, and other items of scope required for the above purposes of use.
  • (4)Management representative
    GMO Internet Group Co., Ltd.
    (Representative Director and Group Representative Director Masayoshi Kumagai)

Article 6 (Request for Disclosure of Personal Information, etc.)

1 In the event We is requested by the user to disclose the Purpose of Utilization or the Personal Information and the Record of Providing Third Parties in accordance with the provisions of the Personal Information Protection Law, it shall notify or disclose such Personal Information to such user after confirming that such disclosure is requested by the user himself/herself (in the event that such Personal Information does not exist, the Company shall notify. Provided, however, that this provision shall not apply in the event that We is not obliged to do so pursuant to the provisions below or Law ordinance, such as the Personal Information Protection Law.
Please note that a fee (1000 yen per case) will be charged for notification or disclosure.

  • (1)Cases where there is a risk of harm to the life, body, property, or other interests of the user or a third party
  • (2)Cases in which there is a risk of causing a serious hindrance to We's Services provide services

2 In the event We is requested by the user (1) to correct the content based on the provisions of the Personal Information Protection Law because the Personal Information is not true, or (2) to discontinue the use of the Personal Information based on the reason that the Personal Information has been handled beyond the scope of the Purpose of Use previously publicized or has been collected by deception or other wrongful means, the Personal Information Protection Law shall confirm the request of the user and conduct the necessary investigation. Based on the results, We shall correct the content of the Personal Information or suspend the use of the Personal Information and notify the relevant user of such fact.
In addition, in the event a decision is made not to correct or suspend the use based on reasonable grounds, a notice to that effect shall be given to the relevant user.
We will not disclose the reasons for these decisions to users.

3 In the event We determines that We needs to respond to a request for deletion of the user's personal information, it shall delete the personal information after confirming that the request is made by the relevant user and notify the user to that effect.

4 With regard to the provisions of the preceding two paragraphs, in the event such measures have a large amount of expenses or it is difficult to take such measures, and in the event there is any alternative means necessary to protect the interests of users, such alternative means shall be taken. In the event We is not obliged to comply with the Personal Data Protection Law and other Law ordinances, the preceding two paragraphs shall not apply.

5 If the user wishes to do so with respect to the preceding four paragraphs, the request shall be made We in accordance with the prescribed procedures. Please contact We for procedures.

Article 7 (Contact point for inquiries)

If you have any comments or inquiries about This policy, please contact us at the address below.
Contact: GMO OMAKASE Corporation
E-mail address: [email protected]

Article 8 (Regarding anonymized processing information)

Anonymized processing information refers to personal information obtained by processing specific personal information in such a way that it cannot be identified by taking the measures stipulated in Law Ordinance, and in such a way that such personal information cannot be restored.

1 When creating anonymized processing data from User information

  • (1)We shall perform appropriate processing in accordance with the standards set forth in Law Ordinance.
  • (2)We will implement safety control measures to prevent the leakage of deleted information and information related to processing Law in accordance with the standards set forth in Law Ordinance.
  • (3)We shall publish the items of information contained in the created anonymized processing information as follows.
    • Terminal information
    • Log information and event history information
    • Cookie and anonymous ID
    • Location information
  • (4)We identifies the identity of the personal information that was the source of the creation, and therefore does not collate with other information.

2 When providing anonymized processing information to a third party

  • (1)We shall publicly announce in advance the items of personal information contained in the anonymized processing information to be provided and Law of persons to be provided.
  • (2)Indicate the anonymized processing information provided to the third party to whom the information is provided.

Article 9 (Regarding information on pseudonymous processing)

The pseudonymous processing information refers to personal information obtained by processing personal information in such a way that it is impossible to identify a specific individual unless such information is checked against other information by taking the measures stipulated in Law Ordinance.

1 When creating pseudonym processing data from User information

  • (1)We shall be prepared after proper processing in accordance with the standards set forth in Law Ordinance.
  • (2)We will implement safety control measures to prevent the leakage of information deleted during the creation process and information on Law of processing methods (hereinafter collectively referred to as "Deletion information, etc.") in accordance with the standards stipulated by Law Ordinance.

2 When the pseudonymous processing data and Deletion information, etc. are obtained

  • (1)We will implement safety control measures to prevent Deletion information, etc. leakage in accordance with the standards stipulated by Law Ordinance.
  • (2)In particular, in the event We acquires pseudonymous processing information, which is personal information, it shall promptly publicize the Purpose of Utilization unless it is publicly announced in advance in Article 2.

3 Handling of pseudonymous processing information as a database

  • (1)We will take the required and appropriate security measures to protect against unauthorized accessing, tampering, leakage, loss, and damage.
  • (2)We will not check the personal information used for the creation against other information in order to identify the person.
  • (3)We shall not use the contact or other information contained in such pseudonymous processing information to telephone, send by mail or correspondence mail, send a telegram, transmit by facsimile or electromagnetic Law, or visit a residence.

Article 10 (Regarding Personal Information)

Personal information refers to information concerning a living individual that does not fall under any of personal information, pseudonymous processing information, or anonymized processing information.

1 In the event personal information is obtained from a third party from whom the personal information is provided as personal data

Personal information provided by a third party may be compared with User information, and the Personal Information may be the personal data that identifies the person. Therefore, the user agrees to this. If you do not agree, you may not use Services.

Items of applicable Personal Information: as described in Item 3 of Article 1.
Purpose of use after acquisition: Purpose of use announced in Article 2.

Article 11 (Change of Privacy Policy)

The content of This policy may be changed without prior notice to the user. The revised Privacy Policy shall take effect from the time it is posted on this website. No new consent will be obtained solely by changing the privacy policy.