Privacy Policy

Last updated: October 17, 2026 · Effective: October 21, 2026

This policy explains how JSTARs Inc. (SHOKU NOREN, “we”, “us”) handles the personal data of people who use our reservation service and our free membership. It is written to reflect our actual practice; it is not legal advice.

1. What we collect

Contact details — your name and email address. We ask for your phone number only when you submit a reservation request, so that we can reach you on the day of the meal.
Reservation details — the restaurant(s) or experience you request, dates, party size, meal, and any free-text notes you provide.
Dietary and access notes — allergies or other requirements, only if you choose to tell us. See Section 1.7 on sensitive information.
Dining card (optional) — if you make a Japanese dining card, the allergies and dietary needs you choose for yourself and for any companions you add, and any names you enter. We use it only to show your card and to tell restaurants when we book for you. See Section 1.7.
Payment card — collected and stored by our payment processor, Stripe. We never see or store your full card number; we hold only a token that lets us charge the card as described in our Terms.
Basic technical data — standard server logs and aggregate analytics.
How you arrived (attribution data) — the site that referred you, campaign tags in the link you followed (utm parameters), the page you landed on and, if you came from an ad, the ad click identifier (for example, Google Ads’ gclid). We keep this in a small cookie for up to 30 days and record it with your request or account, so that we can measure which of our marketing works. We use it only in aggregate for that purpose.
Sensitive information (optional) — foods you can’t eat, including allergies and religious or other dietary restrictions, can reveal information about your health or beliefs. Giving it is always optional. With your consent, we use it only to arrange your meals, and we share it with a restaurant only when it is needed for a booking. You may leave it blank and tell the restaurant directly on the day. If you add companions to a dining card, you confirm that they have agreed to share this information with us and with restaurants. You can remove any companion at any time, and deleting your account deletes the card.

Account (free membership) data

To create a free account we require only your email address and your country of residence (used to confirm that the service is for travellers living outside Japan, and for tax classification). We do not collect your nationality. We keep the houses you save and your alert settings. You may also add, if you wish, an optional profile: your travel dates, the regions you plan to visit, the cuisines you like, your budget per person, whether you prefer lunch or dinner, your experience of dining in Japan, who you are travelling with, and foods you can’t eat. We use the profile, the houses you save and the restaurants you request as described in Section 2.8, and you can edit or delete any of it on your account page at any time. Sign-in is by emailed link or code; we store a hashed token and a session cookie on your device (up to 90 days). When you join, we also record whether you agreed to our monthly email of restaurant picks and news, when you agreed, the wording you were shown and the country you selected.

2. Why we use it, and our legal basis

To arrange and confirm your reservation, and to contact you about it (performance of our contract with you).
To charge the booking fee on confirmation, any cancellation charge, and any individually quoted arrangement you have agreed, per our Terms and Cancellation Policy (performance of contract).
To keep records required for accounting, tax and dispute handling (our legitimate interests and legal obligations).
Release alerts. Release alerts for the houses you save are service emails that are part of the free membership you asked for (performance of contract); you can turn them off for any house, or entirely, from your account page. Submitting a reservation request does not by itself add you to our monthly picks or any newsletter: you receive them only if you agree on the form.
Monthly picks and news from SHOKU NOREN and JSTARs, and selected partners, with your consent. Once a month we send restaurant picks matched to the houses, regions and cuisines you save — houses about to open their books and houses that are easier to book — together with news from SHOKU NOREN. JSTARs Inc. also runs restaurants and other hospitality businesses in Japan and abroad; these appear in a separate section of the email, labelled as restaurants of our group. From time to time we also carry paid announcements from restaurants and services in Japan that we have chosen. Only if you agree — with the box on the sign-up form, on the request form or on your account page — we use your contact details, dining preferences (including those described in Section 2.8) and travel dates to send you these emails and to choose what they contain (for example, an invitation when you are visiting a city where one of these houses is). The box is unticked by default if you select a country in the European Economic Area or the United Kingdom; elsewhere it is ticked by default, and you can untick it before you continue. We record when you agreed, the wording you were shown and the country you selected. We send these messages ourselves; advertisers never receive your data. Each message identifies us as the sender, says who paid for any paid announcement and carries an unsubscribe link. Your consent is the legal basis; you can withdraw it at any time from your account page or by email, and doing so never affects your reservation or your membership. Release alerts are a separate setting and carry no paid announcements.
To measure which of our marketing brings guests and members, using attribution data (our legitimate interest in understanding our own marketing).
To arrange your meals using the sensitive information you choose to give us (your consent, which you may withdraw at any time by deleting it from your account or by email).
Your dining preferences. From the houses you save, the restaurants you request and your optional profile (including your budget per person), we form a view of the kind of dining you enjoy — the regions, cuisines and price range that suit you. We use it to tailor your release alerts and recommendations and to improve our service (our legitimate interest in offering relevant recommendations; you may object at any time, see Section 5). Only if you have agreed to our monthly email (Section 2.5), we also use it to choose which picks and announcements from SHOKU NOREN, the JSTARs group and selected partners to send you. We do not use it to make decisions that have legal or similarly significant effects on you, and it never affects your reservations or the fees you pay. Sensitive information (Section 1.7) is not used for this purpose.
If you send us comments about a restaurant or our service, we may publish them on our site without your name or anything that identifies you; tell us if you would rather we did not.

3. Who we share it with

The restaurant, once your booking proceeds — your name, party size, phone number, and any dietary notes needed for the booking. Nothing more than the reservation requires.
Our processors, who handle data on our behalf under contract: Stripe (payments), Resend (transactional email), Vercel (hosting), Neon (our database), and Google Workspace (our email). Some of these operate outside Japan, so your data may be transferred and processed abroad under appropriate safeguards.
Advertising measurement — if you arrive from one of our ads, the ad platform (for example, Google Ads) learns through its tag on our site whether your visit led to a request or sign-up. We do not send it your name, email or reservation details.

We do not sell your personal data, and we do not share it for third-party marketing. Partners whose announcements we carry never receive your name, contact details or any information about you as an individual: we choose who receives an announcement ourselves, and we may tell a partner only aggregate figures, such as how many members it was sent to. Where you have given the consent described in Section 2.5 and one of our restaurants is operated by a JSTARs group company, that company may receive your name, contact details and dining preferences for the purpose you consented to; JSTARs Inc. remains responsible for the data.

4. How long we keep it

If a request closes without a confirmed booking — no table was secured, you declined or withdrew it, or we declined the request — we delete or de-identify the request details, including any dietary notes, on a routine basis.
For confirmed bookings and other paid arrangements, we keep the records for as long as needed to provide the service and to meet accounting and legal obligations, then delete them.
Account data (your profile, saved houses and alert settings) is kept while your account is open. You can delete your account at any time from your account page or by email; we then close it at once, stop all emails to you, and on a routine basis delete or de-identify your profile, including any sensitive information, keeping only the records we are required to keep by law (such as records of charges).
Card tokens are held by Stripe and removed when they are no longer needed. For a confirmed booking, we keep the card token and your booking and contact details until the day after your visit, or until any amount due has been paid, whichever is later, even if you close your account. We then remove the card token.

5. Your choices and rights

You can ask us to access, correct, or delete your personal data, or to stop using it, by writing to concierge@shokunoren.com. Depending on where you live, local law (such as the EU/UK GDPR, or Japan’s Act on the Protection of Personal Information) may give you additional rights; we honour them. We will respond within a reasonable time. You may object to our use of your dining preferences (Section 2.8) by writing to us. You can stop our monthly email at any time from your account page or with the unsubscribe link in each email; from then on we no longer use your preferences to choose picks or announcements for you.

6. Security

Card data is handled entirely by Stripe (PCI-compliant) and never reaches our servers. We limit access to the rest of your data to the people who need it to arrange your booking.

7. Contact

Questions about this policy or your data: concierge@shokunoren.com, JSTARs Inc., Tokyo, Japan.

以下为参考译文（摘要）。具法律效力的正本为上方英文版。

隐私政策（参考译文・摘要）

说明我们如何处理订位代办服务与免费会员使用者的个人资料。

收集的资料：姓名、电子邮箱、电话号码（仅在提交委托时收集，用于用餐当天联系）、预约内容（餐厅・日期・人数・餐别・自由填写）、付款卡（由 Stripe 保管，我方不保有卡号）、访问来源（来源网站、utm 参数、广告点击 ID 等；以 Cookie 保存最长 30 天，并与委托或会员资料一并记录）。
免费会员资料：必填仅电子邮箱与居住国家（用于确认本服务对象为居住在日本境外的旅客，以及税务分类）。我们不询问国籍。会保存您收藏的餐厅与提醒设置。选填的个人资料（旅行时间・想去的地区・喜欢的料理・人均预算・午餐/晚餐・在日本用餐的经验・同行者・不能吃的食物）会连同您收藏与委托的餐厅，按下列“用餐偏好”说明使用，可随时在账户页面编辑或删除。注册时，我们会记录您是否同意每月一次的推荐与消息邮件，以及同意的时间、所显示的文字与所选国家。
不能吃的食物（含过敏与宗教上的饮食限制）属选填的敏感信息，经您同意后仅用于安排用餐；仅在订位需要时提供给餐厅。若您制作日文饮食卡，我们会保存您与所添加同行者的饮食限制及所填姓名，仅用于显示卡片及预订时告知餐厅。添加同行者时，请确认已取得对方同意。同行者信息可随时删除；删除账户时卡片也会一并删除。
使用目的：安排・确认・联系预约，收取预约服务费、取消费与单独报价服务的费用，保存会计・税务・争议处理所需记录，以及衡量营销效果（访问来源数据）。开放提醒属会员服务邮件，可逐店或全部关闭。仅提交委托不会因此收到推荐邮件或电子报（仅限在表单中同意者）。SHOKU NOREN 与 JSTARs 的推荐与消息邮件（每月一次；JSTARs 集团的餐厅另以“本集团餐厅”标明的板块介绍），仅发送给在注册・委托表单或账户中同意者。同意栏对选择欧盟・英国的用户默认为不勾选，其他国家默认为勾选，继续前可取消。我们会记录同意的时间、所显示的文字与所选国家。
用餐偏好：我们根据您收藏与委托的餐厅及选填的个人资料（含人均预算），了解适合您的地区・料理・价格带倾向，用于调整提醒与推荐、改进服务（您可随时提出异议）。仅限同意每月推荐与消息邮件者，也用于选择发送哪些 SHOKU NOREN・JSTARs 集团・合作伙伴的信息。不影响预约与费用，敏感信息不用于此目的。您可随时在账户页面或邮件中的退订链接停止邮件，停止后不再用于上述选择。自 2026 年 10 月 21 日起适用。
如果您向我们发送对餐厅或我们服务的感想，我们可能会在不显示您的姓名或任何可识别您身份的信息的情况下，将其刊登在我们的网站上。如您不希望刊登，请告知我们。
第三方提供：预约进行时仅向餐厅提供必要范围（姓名・人数・电话・必要的饮食限制）。受托处理者为 Stripe・Resend・Vercel・Neon（数据库）・Google Workspace（部分于境外处理，于适当保护下跨境传输）。我方不销售个人资料，亦不为第三方营销而分享。刊登信息的合作伙伴不会收到您的姓名、联系方式或任何关于您个人的信息（收件对象由我方选定，仅可能告知合作伙伴发送数量等统计）。
保存期间：未能成立的需求（未订到・您婉拒或撤回・我方婉拒），含敏感信息定期删除或去识别化。已确认预约与有偿服务的记录于服务提供与法令所需期间后删除。会员资料在账户存续期间保存；您可在账户页面或通过邮件要求删除，我们将立即关闭账户、停止发信，并定期删除或去识别化个人资料（含敏感信息），但法令要求保存的收费记录等除外。银行卡信息由 Stripe 保管，不再需要时删除；若有已确认的预约，即使注销会员，也会保留银行卡信息与预约・联系信息至用餐次日（或款项付清为止），之后删除银行卡信息。
如需查询・更正・删除个人资料或相关询问，请寄至 concierge@shokunoren.com。我方尊重适用法令（EU/UK GDPR、个人信息保护法等）赋予的权利。