Privacy Policy

We are committed to protecting your information. This Privacy Policy details how we use and protect the information we collect about you. It also describes your rights and provides contact information if you have any questions about how we handle your information.

1．Scope of Application of Privacy Policy

(1) Applicable Customers

This Privacy Policy applies to all persons ("you" or "your") who interact with us in connection with our products and services through any of the channels (e.g., app, website, email, phone call, walkin , booking through a travel agent, etc.). Additional privacy policies may apply in specific interactions. This Privacy Policy applies to you when you enter into a contract with us, modify your account information, make a reservation (whether through an app, website, in-person or other channel), request on-demand services, contact customer support, stay at one of our accommodations. This Privacy Policy applies to individual customers who inquire about, purchase, or use our products and services, including when they stay at one of our Partner accommodations or otherwise converse or interact with us in any way.

(2) Applicable means of communication

Regardless of the manner in which you interact with us (e.g., through our app, website, email, phone call, stopping by one of our partner accommodations, etc.), this section describes how we handle your information. Depending on how you interact with us, additional information and policies may apply (for customers who use certain features of our app, we may explain how those features use your information).

2．How we obtain personal information

We obtain personal information about you from third parties, such as travel agents (such as Booking.com and Expedia) who book accommodations for you or on your behalf, accommodations in partnership with us, and service providers who work with us in connection with our products or services. We may collect and use your information entered in our reservation form in accordance with our Privacy Policy, even if you have not completed the transaction and are still in the process of entering your information. We obtain your personal information through our interactions with you, such as by telephone (please note that we record or intercept your calls for legal compliance and quality assurance purposes), email, our website, our app, postal mail, social media, or in person with our partner accommodations or our agents. If you provide us with information about an individual other than yourself (such as the name of another person staying at the accommodation you have reserved), please ensure that that person has read this Privacy Policy and that there is no problem on your part with you providing the information. If you are a minor, please be sure to obtain the prior consent of your parent or guardian before providing us with any personal information. Personal information provided by minors will be treated in the same manner as that of adults in accordance with this Privacy Policy.

3．Types of information to be obtained

We handle the personal information of our guests and (where applicable) others with whom you have made reservations for accommodation in the following two categories: Normal personal information (information we use to provide our services and manage our customers) Personal information requiring special consideration (e.g., if you have informed us of a medical condition that specifies a Muslim or Jewish diet or requires special accommodations) (1) Ordinary personal information includes the following Contact Information: We obtain your name, username, address, email address, phone number, your profile picture if you choose to let us upload or connect your social media accounts to your Tabist account, country of residence, age, gender and Date of Birth. Location Information: We may use your IP address to determine your approximate location to suggest more relevant content (such as accommodations near your location). You may choose to allow location services so that our app can access your location and suggest nearby accommodations. This allows us to know the exact location of your device while the app is running, whether in front or in the background. Transaction Information: We collect transaction details regarding your use of our services, including the type of service applied for, the date and time the service was applied for, the amount billed, and the number of days of reservations and stays. We may associate you with such other person to provide the referral number given to you to such other person and, if used by such person, to enable you to receive benefits for making the referral. Account history: We keep a record of your reservations and details of your interactions with us, including claims and disputes. Usage and preference information: We collect information about how you use our websites, apps, and other Company services, including IP addresses, search terms, parameters, and device information. Log Information: We collect server logs, including device IP addresses, access date and time, app characteristics and pages viewed, app forced termination and other system behavior, browser type, and information about third party sites and services used prior to using our services. Device Information: We collect information about your mobile device (including hardware model, underlying software and versions, software and file names and versions, primary language, unique device identifier, advertising identifier, serial number, device motion information, mobile network information, etc.) to understand how our apps are performing on different devices and to help identify causes of forced termination and improve performance. Call and SMS data: The accommodation manager can be easily contacted. In this connection, we receive call data including the date and time of the calls and SMS messages, the phone numbers of the parties involved and the content of the SMS messages. CCTV: When customers visit our facilities, we obtain their personal information and use CCTV to monitor said facilities. WiFi: If you use the WiFi provided at our accommodations, we obtain login information (which may include your email) and usage information that informs us of your WiFi usage. (2) Personal information requiring special consideration

In some cases, at your option, we may obtain special types of information about you or others that require special safeguards, such as Information regarding religious or philosophical beliefs that may be revealed at the request of the meal (e.g., Judaism, Islam, etc.). Requests for special assistance or barrier-free facilities, or requests for medical assistance during your stay may reveal information about your health condition. Information about your marital or dating status and the name of the other party may reveal information about your sexual orientation.

4．Purpose and legal basis of our personal information handling

We use your personal information for the following purposes

(1) Normal personal information

(i) If necessary for the performance of the contract: When we enter into a contract with you, we process your personal information in order to fulfill that contract (to provide our products and services for you and others with whom you have booked accommodations). For example, we may Provide and manage our products and services in connection with your reservation (including providing the products and services you have ordered, including providing point-of-sale services, if applicable), transmit information regarding the services (including status reports regarding your accommodation arrangements), settle payments, send receipts, and provide customer support, managing our customer relationships with you, our business, and our third-party service providers, including investigating claims and ensuring that providers have provided you with the appropriate services and billed you for the correct amounts. Verify that you are interacting securely with us (i.e., to confirm that you are who you say you are) (ii) For the legitimate interests of the Company or third parties:

We handle your personal information to improve and develop our service quality, to inform you about our services, and to prevent fraud. For example, to improve the service and create new features for the application, website and proposals (including resolving software bugs and operational issues), to conduct data analysis, testing and research, and to monitor and analyze usage and operational performance. (to the extent permitted by law) send you marketing materials (including information about products, services, promotions, updates, and events) that match your interests and customize your experience with us (including identifying your preferences and providing and recommending features, content, social connections, referrals, and promotions). You may unsubscribe from advertising at any time and change your settings to block notifications on your device by clicking the unsubscribe link in any email you receive. You may also contact us. to prevent fraud and abuse of our services to enforce or apply our website terms of use, policy provisions, and other agreements, and to protect the rights, property, and safety of our company, our customers, and others to exercise our rights and defend us against legal claims to participate in or being the subject of a sale, merger or acquisition of all or part of our business We carefully balance these legitimate interests with your interests and fundamental human rights and freedoms to ensure that the processing of personal data we carry out for the purpose of achieving these interests is proportionate. Please contact us for further information regarding our investigation of this balance. (iii) When required or permitted by law.

(2) Personal information requiring special consideration

We handle personal information that requires special consideration for the following reasons If the customer explicitly discloses. Where the handling is necessary on legal grounds and in the vital public interest: for example, if you become ill or have an accident in your accommodation, or if it is necessary to record an incident that occurred for health and safety reasons. Where we have obtained your consent: In cases where we handle special types of data, we will request your consent separately (your review of this Privacy Policy alone does not imply that you have given your consent). When it is necessary to handle a legal claim to establish a legal claim, enforce a claim, or defend a legal right

5．Advertising and Customer Preferences

(1) Advertising and marketing

We use your personal information to send you promotional advertisements by mail, telephone, social media platforms, email, SMS, app notifications and silent notifications to track app installations. We may also use your personal information to conduct online paid marketing activities due to the nature of retargeting. We also use technology to help us understand your personal preferences and interests so that we can make suggestions and marketing communications about things we think may be of interest to you. Using technology in this way is sometimes referred to as profiling. If you no longer wish to receive emails from us, you may opt-out at any time by clicking the unsubscribe link included in every email, and you can change your settings to stop receiving notifications from our apps on your device.

Our advertisements may be placed on various websites on the Internet by third-party service providers, including Google, Yahoo! These third-party distributors use cookies to deliver advertisements based on past access information to our website. The visit and action history information obtained by the third party will be handled in accordance with the third party's privacy policy. Users can disable the use of cookies by accessing the opt-out pages of Google, Yahoo! (Or you can access the opt-out page of NetworkAdvertisingInitiative to disable the use of cookies by third-party distributors).

• Opt-out page for Yahoo! Ads https://btoptout.yahoo.co.jp/optout/preferences.html

• Google Ads opt-out page https://www.google.com/ads/preferences?hl=ja

• Facebook ad opt-out page https://www.facebook.com/policies/cookies/

• Opt-out page for LINE ads https://linecorp.com/ja/privacy/additional_notes/

• NetworkAdvertisingInitiative opt-out page https://www.networkadvertising.org/choices

(2) A "cookie" is a small text file that obtains information about your activity on the Service to make your use of the Service as pleasant as possible. For example, when a user accesses a web page within the Service, a cookie is placed on the user's browser (if the user accepts cookies). Or, it is read if the user has previously accessed the service. These cookies can be used to retrieve information such as user ID, device ID, purchase history, usage data, device metadata such as OS version and SDK version, app version, and error codes.

(3) Analytical and advertising services provided by other vendors

We receive services from third parties to analyze your online interactions (including those on our and other websites), provide customized advertising, and provide visitor measurement and analysis services to show the effectiveness of such advertising, and we may match information provided by such third parties with information about you. We also use the Google Place API to make suggestions based on your location and search string. We may allow other vendors to advertise on our behalf on the Internet and to provide audience measurement and analytics services to track and report on the effectiveness of such advertising. We may also use cookies, web beacons, software development kits (SDKs), and other technologies to identify your device when you use our sites and services, as well as when you visit other online sites and services. Please refer to our Cookie Statement for more information on such technologies and service offerings. We also use Google Analytics, an access analysis tool provided by Google. Google may collect and analyze your browsing history based on cookies set by us or Google and use the results to understand your usage and our services. For more information about Google's use of data in Google Analytics, please visit their site. 'Google's use of information collected from sites and apps that use Google services' https://policies.google.com/technologies/partner-sites

6．Sharing Customer Information We share your information with our subsidiaries, parent companies and affiliates (including SoftBank Group Corp.) Ltd.), Oravel Stays Singapore Pte. Limited (a corporation incorporated under the laws of Singapore), its parent companies and subsidiaries, and others who assist us in providing services to you (such as accommodation providers). We may also share your information in accordance with the law. We will share your information with the following for the purposes set forth in this Privacy Policy. Accommodation management (e.g., sharing the name of the guest, scheduled check-in time, etc.) to achieve the provision of the service requested by you. Third party suppliers who supply goods or services on our behalf, provide services or related advertising, work with us on other apps or websites that integrate with our APIs or services, or provide APIs or services that we utilize as an integral part Referrer when using the referral system The public when you post content in a public forum, such as blog comments, social media posts, or other characteristics of our services that are clearly viewable by the public. For example, if you choose to use social sharing characteristics or similar tools to share your impressions of our or our partner accommodations on other apps, sites, or media, and conversely view what others have shared. These features allow you to share information with friends or the public depending on your social sharing service preferences. For more information about the handling of data you provide or share on such social sharing services, please refer to the privacy policy of the provider. Third parties (law enforcement, government authorities, etc.) to whom we are obligated or authorized by law to disclose information Third parties appointed by police or court Third parties involved in a merger, sale of company assets, consolidation or reorganization, financing or acquisition of all or part of our business. In such cases, the personal data we have about our customers or website visitors may be the subject of transferred assets. If we share your personal data, we will take appropriate safeguards required by law to protect your personal data. If an individual cannot be identified through reasonable means, we may share information by unifying, pseudonymizing, or anonymizing it.

7．Out-of-country transfers

We have adopted a global information system. As a result, we may transfer your personal information outside of your country of residence (including Singapore, the United States, Vietnam, India, Indonesia, Cambodia and Philippines) for the purposes set forth in this policy. All countries outside the European Economic Area (EEA) do not have data protection legislation like that of the EEA, which may be considered by the European Commission (EC) to not provide an adequate level of data protection. We take steps to ensure that if your personal information is taken out of the country, appropriate safeguards are in place to ensure that it is in compliance with data protection laws and regulations. In many cases, these security measures are contractual security measures. Detailed information about such security measures (and copies of such measures, where appropriate) is available at f-legal@tabist.co.jp.

8．Retention Period

We will retain your personal information in accordance with our record retention policy,however, there may be cases in which we must retain your personal information for a longer period of time than specified (e.g., if you request compensation for a reservation). To determine the required retention period for your personal information, we calculate the retention period according to the following criteria: The length of the customer relationship with the customer and the types of products or services used by the customer. Sufficient time to keep records to prove that you have fulfilled your obligations to the customer and under the law. The longest period for which a claim may be enforced. Retention periods stipulated by law or recommended by authorities, industry associations or associations. While a related lawsuit exists.

9．Customer Rights

Personal data protection laws in the European Economic Area and other countries give you certain rights regarding the handling of information that we hold about you in our systems and on paper. These rights include the right to disclose, correct, delete, restrict or terminate the use of personal information, disclose security measures, and withdraw consent for transfer and use by others. Exceptions to these rights may be made in certain cases. Right to request disclosure: The right to request the Company to disclose the customer's personal information held by the Company by providing electromagnetic records or by delivering written documents. The request may be made in writing or by electromagnetic record. Right to request correction: the right to request correction of inaccurate information about you. Right to request deletion ("right to be forgotten"): the right to request deletion of specific information about you. Right to request limitation of use: The right to request that your personal information be used only for limited purposes. Right to request cessation of use: The right to request cessation of use of your personal information (including the right to request cessation of advertising and profiling related to direct marketing). Right to request transfer of data: the right to request that personal information provided by you to us be transferred to you or to a third party in a computer-readable form Right to withdraw consent: We generally do not rely on your consent to process your personal information. We only seek your consent in very limited circumstances, and when we do, we make it clear when we are seeking your consent and for what purpose. You have the right to withdraw the consent you have given us for the processing of your personal information at any time. If you withdraw your consent, this will not affect the use of your personal information that was lawfully made before you withdrew your consent. Such rights may not apply in all cases. If we do not comply with your request, we will explain the reasons. When responding to your request, we may, if necessary, ask you to cooperate in verifying your identity and may request additional information to understand the exact nature of your request. For more information about your rights or the exercise of your rights, please contact us at f-legal@tabist.co.jp.

10．Contact for data protection inquiries

If you have any questions, comments, complaints, or suggestions regarding this policy or our handling of your personal information, please contact us at:

Address: Tokyo Port City Takeshiba WeWork9F, 1-7-1 Kaigan, Minato-ku, Tokyo Name: Tabist Corporation Representative: Ryota TANOZAKI Person in charge of handling personal information: Privacy Officer E-mail address: f-legal@tabist.co.jp

You also have the right to file a complaint with your local privacy regulator at Customer's Place of Residence Customer's work location Where the alleged infringement occurred The data protection authorities in each country can be found here: https://www.cnil.fr/en/data-protection-around-the-world