Privacy Policy
Last updated: 27 August 2026
We are a one-person operation and we collect as little as we can.
1. Who is responsible
Takeru Kosuga, sole proprietor, Japan, is the data controller. Contact: hello@moshimoshidesk.com
2. What we collect
From your request form: your name, your email address, the questions you want asked, the place you're asking about, and any background details you choose to give us (for example a food allergy, or that you're travelling with children).
From payment: Stripe processes your card. We never see or store your card number. We receive only confirmation of payment and the last four digits.
Website: our website does not use analytics, advertising, or tracking cookies.
3. Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Contacting the facility and asking your questions | Performance of our contract with you |
| Emailing you the answers | Performance of our contract with you |
| Taking payment and issuing refunds | Performance of our contract with you |
| Keeping records for tax and accounting | Legal obligation under Japanese law |
| Answering your emails | Legitimate interest in supporting our customers |
We do not use your data for marketing. We do not sell it. We do not share it with advertisers.
4. What we tell the facility
We tell the facility only what is necessary to get your question answered.
Usually that means the substance of the question and nothing about you. We do not give the facility your name, email address, or contact details unless you specifically ask us to, or unless the question cannot be answered without it (for example, a question about a booking you have already made under your own name).
Sensitive details — an allergy, a medical need, travelling with a disability — are shared only when they are the point of your question, and only to the extent needed to get a useful answer.
5. Who else sees your data
- Stripe — payment processing (Stripe's privacy policy)
- Tally — the form you fill in (Tally's privacy policy)
- Google — we use Gmail and Google Sheets to correspond with you and track requests
That is the complete list. We do not use any other third party.
6. Where your data goes
We are based in Japan, so your data is processed in Japan. Our service providers may process data in the EU and the United States.
Japan has an adequacy decision from the European Commission, meaning the EU recognises Japanese data protection as providing an equivalent level of protection. Transfers from the EU/UK to us are lawful on that basis.
7. How long we keep it
- Request details and correspondence: 12 months after we deliver your answers, then deleted.
- Payment and tax records: 7 years, as required by Japanese tax law.
8. Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or send it to you in a portable format. You can also object to our processing.
Just email hello@moshimoshidesk.com. We will respond within 30 days. We will not ask you to justify your request, and we will not charge you for it.
If you are in the EU or UK, you have the right to complain to your national data protection authority. If you are in Japan, you may contact the Personal Information Protection Commission (個人情報保護委員会).
9. Security
We use reputable providers who encrypt data in transit and at rest. Accounts are protected by strong passwords and two-factor authentication.
We are honest about our limits: we are a small operation, not a bank. We reduce risk mainly by collecting very little and deleting it promptly.
10. Children
This service is for adults. We do not knowingly collect data from anyone under 18.
11. Changes
We will post any changes here and update the date at the top.