Privacy Policy

Last updated: October 17, 2026 · Effective: October 21, 2026

This policy explains how JSTARs Inc. (SHOKU NOREN, “we”, “us”) handles the personal data of people who use our reservation service and our free membership. It is written to reflect our actual practice; it is not legal advice.

1. What we collect

Contact details — your name and email address. We ask for your phone number only when you submit a reservation request, so that we can reach you on the day of the meal.
Reservation details — the restaurant(s) or experience you request, dates, party size, meal, and any free-text notes you provide.
Dietary and access notes — allergies or other requirements, only if you choose to tell us. See Section 1.7 on sensitive information.
Dining card (optional) — if you make a Japanese dining card, the allergies and dietary needs you choose for yourself and for any companions you add, and any names you enter. We use it only to show your card and to tell restaurants when we book for you. See Section 1.7.
Payment card — collected and stored by our payment processor, Stripe. We never see or store your full card number; we hold only a token that lets us charge the card as described in our Terms.
Basic technical data — standard server logs and aggregate analytics.
How you arrived (attribution data) — the site that referred you, campaign tags in the link you followed (utm parameters), the page you landed on and, if you came from an ad, the ad click identifier (for example, Google Ads’ gclid). We keep this in a small cookie for up to 30 days and record it with your request or account, so that we can measure which of our marketing works. We use it only in aggregate for that purpose.
Sensitive information (optional) — foods you can’t eat, including allergies and religious or other dietary restrictions, can reveal information about your health or beliefs. Giving it is always optional. With your consent, we use it only to arrange your meals, and we share it with a restaurant only when it is needed for a booking. You may leave it blank and tell the restaurant directly on the day. If you add companions to a dining card, you confirm that they have agreed to share this information with us and with restaurants. You can remove any companion at any time, and deleting your account deletes the card.

Account (free membership) data

To create a free account we require only your email address and your country of residence (used to confirm that the service is for travellers living outside Japan, and for tax classification). We do not collect your nationality. We keep the houses you save and your alert settings. You may also add, if you wish, an optional profile: your travel dates, the regions you plan to visit, the cuisines you like, your budget per person, whether you prefer lunch or dinner, your experience of dining in Japan, who you are travelling with, and foods you can’t eat. We use the profile, the houses you save and the restaurants you request as described in Section 2.8, and you can edit or delete any of it on your account page at any time. Sign-in is by emailed link or code; we store a hashed token and a session cookie on your device (up to 90 days). When you join, we also record whether you agreed to our monthly email of restaurant picks and news, when you agreed, the wording you were shown and the country you selected.

2. Why we use it, and our legal basis

To arrange and confirm your reservation, and to contact you about it (performance of our contract with you).
To charge the booking fee on confirmation, any cancellation charge, and any individually quoted arrangement you have agreed, per our Terms and Cancellation Policy (performance of contract).
To keep records required for accounting, tax and dispute handling (our legitimate interests and legal obligations).
Release alerts. Release alerts for the houses you save are service emails that are part of the free membership you asked for (performance of contract); you can turn them off for any house, or entirely, from your account page. Submitting a reservation request does not by itself add you to our monthly picks or any newsletter: you receive them only if you agree on the form.
Monthly picks and news from SHOKU NOREN and JSTARs, and selected partners, with your consent. Once a month we send restaurant picks matched to the houses, regions and cuisines you save — houses about to open their books and houses that are easier to book — together with news from SHOKU NOREN. JSTARs Inc. also runs restaurants and other hospitality businesses in Japan and abroad; these appear in a separate section of the email, labelled as restaurants of our group. From time to time we also carry paid announcements from restaurants and services in Japan that we have chosen. Only if you agree — with the box on the sign-up form, on the request form or on your account page — we use your contact details, dining preferences (including those described in Section 2.8) and travel dates to send you these emails and to choose what they contain (for example, an invitation when you are visiting a city where one of these houses is). The box is unticked by default if you select a country in the European Economic Area or the United Kingdom; elsewhere it is ticked by default, and you can untick it before you continue. We record when you agreed, the wording you were shown and the country you selected. We send these messages ourselves; advertisers never receive your data. Each message identifies us as the sender, says who paid for any paid announcement and carries an unsubscribe link. Your consent is the legal basis; you can withdraw it at any time from your account page or by email, and doing so never affects your reservation or your membership. Release alerts are a separate setting and carry no paid announcements.
To measure which of our marketing brings guests and members, using attribution data (our legitimate interest in understanding our own marketing).
To arrange your meals using the sensitive information you choose to give us (your consent, which you may withdraw at any time by deleting it from your account or by email).
Your dining preferences. From the houses you save, the restaurants you request and your optional profile (including your budget per person), we form a view of the kind of dining you enjoy — the regions, cuisines and price range that suit you. We use it to tailor your release alerts and recommendations and to improve our service (our legitimate interest in offering relevant recommendations; you may object at any time, see Section 5). Only if you have agreed to our monthly email (Section 2.5), we also use it to choose which picks and announcements from SHOKU NOREN, the JSTARs group and selected partners to send you. We do not use it to make decisions that have legal or similarly significant effects on you, and it never affects your reservations or the fees you pay. Sensitive information (Section 1.7) is not used for this purpose.
If you send us comments about a restaurant or our service, we may publish them on our site without your name or anything that identifies you; tell us if you would rather we did not.

3. Who we share it with

The restaurant, once your booking proceeds — your name, party size, phone number, and any dietary notes needed for the booking. Nothing more than the reservation requires.
Our processors, who handle data on our behalf under contract: Stripe (payments), Resend (transactional email), Vercel (hosting), Neon (our database), and Google Workspace (our email). Some of these operate outside Japan, so your data may be transferred and processed abroad under appropriate safeguards.
Advertising measurement — if you arrive from one of our ads, the ad platform (for example, Google Ads) learns through its tag on our site whether your visit led to a request or sign-up. We do not send it your name, email or reservation details.

We do not sell your personal data, and we do not share it for third-party marketing. Partners whose announcements we carry never receive your name, contact details or any information about you as an individual: we choose who receives an announcement ourselves, and we may tell a partner only aggregate figures, such as how many members it was sent to. Where you have given the consent described in Section 2.5 and one of our restaurants is operated by a JSTARs group company, that company may receive your name, contact details and dining preferences for the purpose you consented to; JSTARs Inc. remains responsible for the data.

4. How long we keep it

If a request closes without a confirmed booking — no table was secured, you declined or withdrew it, or we declined the request — we delete or de-identify the request details, including any dietary notes, on a routine basis.
For confirmed bookings and other paid arrangements, we keep the records for as long as needed to provide the service and to meet accounting and legal obligations, then delete them.
Account data (your profile, saved houses and alert settings) is kept while your account is open. You can delete your account at any time from your account page or by email; we then close it at once, stop all emails to you, and on a routine basis delete or de-identify your profile, including any sensitive information, keeping only the records we are required to keep by law (such as records of charges).
Card tokens are held by Stripe and removed when they are no longer needed. For a confirmed booking, we keep the card token and your booking and contact details until the day after your visit, or until any amount due has been paid, whichever is later, even if you close your account. We then remove the card token.

5. Your choices and rights

You can ask us to access, correct, or delete your personal data, or to stop using it, by writing to concierge@shokunoren.com. Depending on where you live, local law (such as the EU/UK GDPR, or Japan’s Act on the Protection of Personal Information) may give you additional rights; we honour them. We will respond within a reasonable time. You may object to our use of your dining preferences (Section 2.8) by writing to us. You can stop our monthly email at any time from your account page or with the unsubscribe link in each email; from then on we no longer use your preferences to choose picks or announcements for you.

6. Security

Card data is handled entirely by Stripe (PCI-compliant) and never reaches our servers. We limit access to the rest of your data to the people who need it to arrange your booking.

7. Contact

Questions about this policy or your data: concierge@shokunoren.com, JSTARs Inc., Tokyo, Japan.

以下為參考譯文（摘要）。具法律效力的正本為上方英文版。

隱私政策（參考譯文・摘要）

說明我們如何處理訂位代辦服務與免費會員使用者的個人資料。

蒐集的資料：姓名、電子郵件、電話號碼（僅於提出委託時蒐集，作為用餐當天聯絡之用）、預約內容（餐廳・日期・人數・餐別・自由填寫）、付款卡（由 Stripe 保管，我方不保有卡號）、造訪來源（來源網站、utm 參數、廣告點擊 ID 等；以 Cookie 保存最長 30 天，並與委託或會員資料一併紀錄）。
免費會員資料：必填僅電子郵件與居住國家（用於確認本服務對象為居住於日本境外的旅客，以及稅務分類）。我們不詢問國籍。會保存您收藏的餐廳與提醒設定。選填的個人檔案（旅行時期・想去的地區・喜歡的料理・每人預算・午餐/晚餐・在日本用餐的經驗・同行者・不能吃的食物）會連同您收藏與委託的餐廳，依下列「用餐偏好」說明使用，可隨時在帳戶頁面編輯或刪除。註冊時，我們會記錄您是否同意每月一次的推薦與消息郵件，以及同意的時間、所顯示的文字與所選國家。
不能吃的食物（含過敏與宗教上的飲食限制）屬選填的敏感資訊，經您同意後僅用於安排用餐；僅在訂位所需時提供給餐廳。若您製作日文飲食卡，我們會保存您與所加入同行者的飲食限制及所填姓名，僅用於顯示卡片及訂位時告知餐廳。加入同行者時，請確認已取得對方同意。同行者資料可隨時刪除；刪除帳戶時卡片也會一併刪除。
使用目的：安排・確認・聯繫預約，收取預約服務費、取消費與個別報價服務的費用，保存會計・稅務・爭議處理所需紀錄，以及衡量行銷成效（造訪來源資料）。開放提醒屬會員服務郵件，可逐店或全部關閉。僅提出委託不會因此收到推薦郵件或電子報（僅限在表單中同意者）。SHOKU NOREN 與 JSTARs 的推薦與消息郵件（每月一次；JSTARs 集團的餐廳另以「本集團餐廳」標明的區塊介紹），僅寄給在註冊・委託表單或帳戶中同意者。同意欄對選擇歐盟・英國的使用者預設為不勾選，其他國家預設為勾選，繼續前可取消。我們會記錄同意的時間、所顯示的文字與所選國家。
用餐偏好：我們依您收藏與委託的餐廳及選填的個人檔案（含每人預算），了解適合您的地區・料理・價格帶傾向，用於調整提醒與推薦、改善服務（您可隨時提出異議）。僅限同意每月推薦與消息郵件者，也用於選擇要寄送哪些 SHOKU NOREN・JSTARs 集團・合作夥伴的訊息。不影響預約與費用，敏感資訊不用於此目的。您可隨時於帳戶頁面或郵件中的取消訂閱連結停止郵件，停止後不再用於上述選擇。自 2026 年 10 月 21 日起適用。
若您寄給我們對餐廳或我們服務的感想，我們可能會在不顯示您的姓名或任何可識別您身分之資訊的情況下，刊登於我們的網站。若您不希望刊登，請告知我們。
第三方提供：預約進行時僅向餐廳提供必要範圍（姓名・人數・電話・必要的飲食限制）。受託處理者為 Stripe・Resend・Vercel・Neon（資料庫）・Google Workspace（部分於境外處理，於適當保護下跨境傳輸）。我方不販售個資，亦不為第三方行銷而分享。刊登訊息的合作夥伴不會收到您的姓名、聯絡方式或任何關於您個人的資訊（收件對象由我方選定，僅可能告知合作夥伴寄送數量等統計）。
保存期間：未能成立的需求（未訂到・您婉拒或撤回・我方婉拒），含敏感資訊定期刪除或去識別化。已確認預約與有償服務的紀錄於服務提供與法令所需期間後刪除。會員資料於帳戶存續期間保存；您可於帳戶頁面或以郵件要求刪除，我們將立即關閉帳戶、停止寄信，並定期刪除或去識別化個人檔案（含敏感資訊），但法令要求保存的收費紀錄等除外。信用卡資訊由 Stripe 保管，不再需要時刪除；若有已確認的預約，即使退出會員，也會保留信用卡資訊與預約・聯絡資料至用餐隔天（或款項付清為止），之後刪除信用卡資訊。
如需查詢・更正・刪除個資或相關詢問，請寄至 concierge@shokunoren.com。我方尊重適用法令（EU/UK GDPR、個資保護法等）賦予的權利。