Privacy
Last updated 6 October 2026
This notice explains what personal data we collect when you use oboro.co, why we collect it, and the choices you have. We keep it as short as we can.
Who we are
This website is run by OBORO, 237 Nakaogawacho, Kamigyo-ku, Kyoto 602-0053, Japan. For anything about your data, write to info@oboro.co.
What we collect, and why
- Contact and collaboration enquiries. When you use a contact form, we receive your name, email address, the details you choose to share and your message. We use them only to reply and, if we work together, to plan the gathering.
- Job applications. When you apply through the Join us page, we receive your name, contact details, your answers and the link to your CV. We use them only to assess your application.
- Bookings. Reservations are handled by our booking provider (see below). We receive the details needed to host you: your name, contact details, the number of guests and any notes you add.
- Technical data. When you visit the site, your browser sends technical information such as your IP address and browser type. Our hosting provider processes it to deliver the site and protect it from abuse.
We use Cloudflare Web Analytics to count visits and see which pages are read. It does not use cookies and does not identify individual visitors. We do not use advertising trackers, and we do not sell or rent personal data.
Services we use
These providers process data on our behalf or when you use their features. Some are located outside Japan and the European Economic Area, including in the United States.
- Cloudflare — hosting, security and cookie-free visit statistics (Web Analytics) for this website.
- Formspree — receives and forwards contact and application forms.
- Bókun — online booking and payment for tea ceremony sessions. Its own privacy policy applies when you book.
- Google Maps — the map in "Finding us". Google receives your IP address when the map loads and may set cookies.
- Google Fonts — the typefaces on this site are loaded from Google's servers, which receive your IP address.
- Google Workspace — our email, including replies to your enquiries.
The Instagram icon is a plain link; nothing is loaded from Instagram until you click it.
Cookies
This site does not set its own cookies. The booking window and the embedded map are provided by third parties and may set cookies when you use them.
Legal basis
Where the EU or UK GDPR applies, we process your data to answer your request or perform a booking (contract), to run and secure the site (legitimate interest), and where required, with your consent. We also follow Japan's Act on the Protection of Personal Information.
How long we keep it
Enquiries are kept for as long as we need them to reply and follow up, and for up to three years if we work together. Job applications are deleted six months after the process ends, unless you agree that we keep them longer. Booking records are kept as long as accounting law requires.
Your rights
You can ask us to show, correct or delete the personal data we hold about you, to restrict or object to its use, or to receive a copy. Write to info@oboro.co and we will reply within 30 days. If you are in the EU or UK, you can also complain to your local data protection authority.
Changes
If we change how we handle data, we will update this page and the date above.