Privacy Policy - Milocal Japan

Effective Date: April 1, 2026

1. Introduction Welcome to Milocal Japan (milotravel.com), operated by Sunfield Co., Ltd. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, book our travel packages (including private charters, accommodations, and regional tours), or interact with our AI Travel Assistant.

2. Information We Collect We may collect personal information that you voluntarily provide to us when you make a booking, use our services, or communicate with us. The types of data we collect include:

Personal and Booking Information: Name, email address, phone number, billing details, and travel preferences when booking tours, vacation rentals, or private chartered vehicles.
Interaction Data: Information, questions, or preferences provided when interacting with our AI Travel Assistant, submitting inquiries, or contacting customer support.
Automatically Collected Data: IP addresses, browser types, device information, and browsing behavior (such as pages viewed, time spent on destination guides, and interaction with our event calendars) collected via cookies and analytics tools.

3. How We Use Your Information We use the information we collect for a variety of business purposes, including:

To facilitate and manage travel bookings, private charter arrangements, and accommodation reservations.
To process payments securely and prevent fraudulent transactions.
To operate, optimize, and improve our AI Travel Assistant to provide personalized travel recommendations.
To send administrative information, such as booking confirmations, itinerary updates, and policy changes.
To respond to customer inquiries and provide ongoing support.
To analyze website usage and improve our site functionality and user experience.

4. Data Sharing and Disclosure We do not sell your personal information. We may share your data only in the following situations:

Service Providers: With third-party vendors who perform services on our behalf, such as payment processors, hosting services, analytics providers, and AI integration platforms.
Travel Partners: With local tour operators, accommodation hosts, and transportation providers strictly as necessary to fulfill your booked travel itineraries.
Legal Obligations: When legally required to do so in order to comply with applicable laws, governmental requests, a judicial proceeding, or legal process.

5. Third-Party Analytics, Advertising, and AI Tools We partner with third-party service providers to analyze website traffic, serve advertisements, and power our site features.

Analytics: We use tools such as Google Analytics to understand how visitors engage with our site. These tools use cookies to collect standard internet log information and visitor behavior information in an anonymous form. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
Advertising: We may use third-party advertising companies to serve ads when you visit our website. These companies may use information about your visits to this and other websites in order to provide advertisements about goods and services of interest to you.
AI Services: Our AI Travel Assistant utilizes third-party artificial intelligence APIs to process your queries and provide recommendations. Please do not submit sensitive personal information (such as financial data, government ID numbers, or health information) into the AI chat interface.

6. Data Security We implement reasonable and appropriate technical and organizational security measures designed to protect the personal information we process. While we strive to secure your data, no method of electronic transmission over the Internet or data storage technology is 100% secure, and we cannot guarantee absolute security.

7. Your General Privacy Rights Depending on your jurisdiction, you may have the right to request access to the personal data we hold about you, request that your data be corrected or updated, or request the deletion of your personal information. To exercise these rights, please reach out to us using the contact details below.

8. Rights of European Economic Area (EEA) and UK Residents (GDPR Compliance) If you are a resident of the European Economic Area (EEA) or the United Kingdom, you have certain data protection rights under the General Data Protection Regulation (GDPR). We process your personal data under the following lawful bases: your consent, the performance of a contract (such as fulfilling a travel booking), and our legitimate business interests.

You have the following rights regarding your personal data:

The right to access: You can request copies of your personal data.
The right to rectification: You can request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
The right to erasure: You can request that we erase your personal data, under certain conditions.
The right to restrict processing: You can request that we restrict the processing of your personal data, under certain conditions.
The right to object to processing: You can object to our processing of your personal data, under certain conditions.
The right to data portability: You can request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

To exercise any of these rights, please contact us. We have one month to respond to you.

9. Rights of California Residents (CCPA/CPRA Compliance) If you are a resident of California, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with specific rights regarding your personal information:

Right to Know: You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months.
Right to Delete: You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions.
Right to Correct: You have the right to request the correction of inaccurate personal information we maintain about you.
Right to Opt-Out of Sale or Sharing: We do not “sell” personal information in the traditional sense. However, sharing data with advertising partners via cookies may be considered a “sale” or “sharing” under California law. You have the right to direct us not to sell or share your personal information by adjusting your cookie preferences or contacting us.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights (e.g., by denying you services or charging you different prices).

10. International Data Transfers Our website and business operations, including travel planning and vacation rental management, are based in Japan. If you are accessing our site from outside Japan, please be aware that your information will be transferred to, stored, and processed in Japan and potentially other jurisdictions where our third-party service providers operate. By using our website and services, you consent to the transfer of your information to these facilities.

11. Contact Us If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Sunfield Co., Ltd. Representative Director: Minoru Matsudaira Locations: Kanazawa, Ishikawa Prefecture / Saitama City, Saitama Prefecture

Email: [milocaljapan@gmail.com]