Privacy policy

In short

• The site uses no cookies for audience measurement or advertising, and no social media pixels.
• We count visits without cookies and without storing your IP address.
• We only have your email address if you join the waiting list, buy the guide or write to us.
• Stripe handles your payment. We never see your full card number.
• We do not sell or share your personal information.

Who is responsible

kyliejapan.com is run by Arthur Duveau, sole proprietor (entrepreneur individuel) trading as Artixia, 18 rue Paul Bloch, 95240 Cormeilles-en-Parisis, France. In this policy, “we” and “us” mean this business. We decide how your data is used: under the EU General Data Protection Regulation (GDPR), we are the “controller”. For any question about your data, write to contact@kyliejapan.com.

If you join the waiting list

• What we keep: your email address, the date you signed up, the page you signed up from, and your consent (the box you ticked and the exact text you agreed to).
• Why: to email you when the guide opens. Nothing else.
• Legal basis: your consent (GDPR, article 6(1)(a)). You can withdraw it at any time, with the unsubscribe link in our email or by writing to us.
• How long: until we have emailed you that the guide is open, or until you unsubscribe, if that comes first. Then we delete your address. In any case, we never keep it more than 3 years after you signed up.

If you buy the guide

• What we keep: your email address; the amount, date and reference of your order; the proof of your agreement before payment (the exact text you accepted, the version of the Terms of Sale, the date, the country of your connection as detected by our host, and the technical description your browser sends, called the “user agent”); the number of times you downloaded the guide; and whether your order was refunded.
• What we never see: your full card number. You enter your payment details on Stripe’s page, not on our site. In our Stripe account, we can see what Stripe shows any seller, such as the name on the card, the card brand, its last four digits and its country.
• Why: to sell you the guide and give you access to it, send your order confirmation, send your access link again if you ask, answer your questions, prevent your link from being shared widely, keep our accounts, and prove your agreement if there is a dispute or a chargeback.
• Legal basis: our contract with you (GDPR, article 6(1)(b)); our legal obligations, such as accounting (article 6(1)(c)); and our legitimate interest in preventing abuse and defending our rights (article 6(1)(f)).
• How long: 10 years from your purchase, because French law requires us to keep accounting records for 10 years (French Commercial Code, article L123-22). If you start an order but don’t pay, we keep the record of your agreement, which doesn’t include your email address, for 13 months.

We need your email address to deliver the guide and send your confirmation: without it, we can’t sell you the guide.

When you visit the site

• What we keep: for each page view, the page, the date and time, where the visit comes from (for example TikTok, Instagram, a search engine or a tagged link), your country as detected by our host, and the type of device (phone, tablet or computer).
• How we count visitors without following them: the site turns the date, your IP address and your browser’s details into a code, using a secret key, and keeps only part of that code. The code changes every day, so we can’t link your visits from one day to the next, and it can’t be turned back into your IP address. Your IP address itself is never stored, and no cookie or script is used for this.
• Why: to know how many people visit, which pages they read and where they come from.
• Legal basis: our legitimate interest in measuring the audience of our own site (GDPR, article 6(1)(f)).
• How long: 13 months.

When you click a partner link

• What we keep: the name of the link, the date and time, and the country of your connection as detected by our host. Never your IP address, and no cookie.
• Why: to know which links are useful, and to check the commissions we earn.
• Legal basis: our legitimate interest in measuring our partnerships (GDPR, article 6(1)(f)).
• How long: 13 months.

These links start with kyliejapan.com/go/. Links to booking sites pass through the Travelpayouts affiliate network on their way to the booking site. Once you leave our site, the other website’s own terms and privacy policy apply, and it may set its own cookies, for example to credit the commission. This is true of every website we link to, such as TikTok or Instagram, and also of the PlanJapan store (esimjp.com): it belongs to the same business as this site, but it is a separate website, with its own privacy policy and cookies.

When you email us

• What we keep: your email address, your messages and our replies.
• Why: to answer you.
• Legal basis: our contract with you if you bought the guide (GDPR, article 6(1)(b)); otherwise, our legitimate interest in answering the people who write to us (article 6(1)(f)).
• How long: 3 years after our last exchange.

Security and technical data

Like any website host, Cloudflare processes technical data, such as your IP address and your browser’s details, to deliver the pages and protect the site against attacks. When you send a form (waiting list, checkout, request for your access link), your IP address is also used briefly to limit the number of attempts. It is not stored in our database.

The site’s fonts are served by the site itself: no third-party font service receives your IP address.

Cookies

The site sets no cookies for audience measurement or advertising, and uses no social media pixels. That’s why there is no cookie banner. If our host, Cloudflare, needs to check that a visitor is not a robot, it may set a strictly necessary security cookie.

Other websites have their own rules:

• on Stripe’s payment page (checkout.stripe.com), Stripe sets its own cookies, for example to prevent fraud (Stripe’s cookie policy);
• after you click a partner link, Travelpayouts and the partner site may set their own cookies.

Who receives your data

We don’t sell or rent your data. Within our business, only the people who run the site can see it. These service providers process it for us:

• Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA: hosting, database, file storage, the emails we send, and protection of the site (privacy policy);
• Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland: payments (privacy policy).

Stripe also uses some payment data for its own purposes, such as fraud prevention and its legal obligations. For that, Stripe is responsible under its own privacy policy.

We may also share data with public authorities when the law requires it, and with Stripe or your bank if you dispute a payment.

Where your data is stored

Our database is stored in the European Union. Cloudflare is an American company and Stripe belongs to an American group, so some data may also be processed in the United States: for example, a visit from the US is handled by a Cloudflare data center there, and Stripe may process payment data in the US. Cloudflare, Inc. and Stripe, LLC (Stripe’s US company) take part in the EU-U.S. Data Privacy Framework, which the European Commission recognized in 2023 as ensuring an adequate level of protection.

Your rights

Wherever you live, you can ask us to:

• show you the data we have about you, and give you a copy;
• correct it, or delete it;
• limit its use, or stop using it when we rely on our legitimate interest;
• send it to you in a format you can reuse.

You can withdraw your consent at any time, for example by unsubscribing from the waiting list. Under French law, you can also tell us what should happen to your data after your death. We make no automated decisions about you, and we don’t build profiles.

To use these rights, write to contact@kyliejapan.com. We reply within one month. We may ask you to write from the email address concerned, to check that the request is really yours. Some data can’t be deleted before the end of its legal retention period, such as accounting records.

If you think we haven’t respected your rights, you can file a complaint with the French data protection authority: the CNIL (Commission nationale de l’informatique et des libertés), 3 Place de Fontenoy, 75007 Paris, France, cnil.fr. If you live in another country of the European Union, you can also contact your own data protection authority.

If you live in the United States

We do not sell or share your personal information, as California law (the CCPA) and similar state laws define those words. We don’t use it for targeted advertising, and we don’t give it to other companies for their own marketing.

You can ask us what personal information we have about you, and ask us to correct or delete it, by writing to contact@kyliejapan.com. We won’t treat you differently for using these rights.

The site doesn’t track you across other websites. It works the same way whether or not your browser sends a “Do Not Track” or Global Privacy Control signal.

Children

This site is not meant for children. We don’t knowingly collect personal data from anyone under 16. If you think a child has given us their email address, write to us and we will delete it.

Changes to this policy

If we change how we use your data, we will update this page and the date at the bottom. If a change affects you directly, for example while you are on the waiting list, we will tell you by email before it applies.