Privacy Policy

MoriKoYa Hotel · morikoyahotel.com · book.morikoyahotel.com Last updated: 4 September 2026

雅倉風株式会社 (“MoriKoYa”, “we”, “us”) operates MoriKoYa Hotel at 3-20-13 Nishi-Asakusa, Taito-ku, Tokyo 111-0035, Japan, under a licence issued pursuant to the Hotel Business Act of Japan (旅館業法). This policy explains what personal information we collect from guests and visitors to our websites, why we collect it, who we share it with, and the choices you have.

We handle personal information in accordance with the Act on the Protection of Personal Information of Japan (個人情報保護法, “APPI”) and, where they apply to you, the EU and UK General Data Protection Regulations and other applicable privacy laws.

1. Information we collect

When you make a reservation or stay with us

Name, home address, nationality, occupation, telephone number and email address (name, address, occupation and nationality are required by the Hotel Business Act)
For guests who do not have an address in Japan: passport number and a copy of the passport photo page — this is required of all hotels by the Hotel Business Act and its enforcement regulations
Dates of stay, number and names of guests in your party, suite booked, special requests, arrival time
Payment information (card details are handled by our booking engine and payment processor; we do not store full card numbers)
Records of your stay, including door-lock access codes issued to you, and any correspondence with our staff
Information you provide in reviews, questionnaires or enquiries

When you visit our websites

Device and browser type, IP address, approximate location, pages viewed, referring site, and the time and duration of your visit
Cookies and similar identifiers (see section 6)
Advertising campaign identifiers (for example, which advertisement brought you to the site)

From third parties

Reservation details from booking platforms you used to book with us (Booking.com, Airbnb, Expedia, Vrbo, Agoda, Google and similar)
Payment status from our payment processor
Publicly available social media profile information, if you interact with us there

We do not deliberately collect special-category information (for example health, religion or ethnicity). If you tell us about a dietary need, mobility requirement or similar for the purpose of your stay, we use it only for that purpose.

2. Why we use it

To take, confirm, change and cancel reservations and to provide accommodation and related services
To issue door-lock codes and check-in instructions and to verify identity on arrival
To meet our legal obligations as a licensed hotel, including keeping a guest register and producing it to the police or public health authorities on lawful request
To process payments, deposits, refunds and any charges for damage
To respond to your enquiries and provide guest support before, during and after your stay
To send you information about your booking, and — where you have agreed or where permitted by law — offers and news about MoriKoYa
To understand how our websites are used and to improve them
To measure and manage our advertising, including showing advertisements to people who have visited our site
To protect the safety of guests, staff and the property, and to prevent fraud
To establish, exercise or defend legal claims

Where the GDPR applies, our legal bases are performance of a contract with you, compliance with legal obligations, our legitimate interests (running and promoting a small hotel, securing the property, improving our services), and your consent where we ask for it.

We share personal information only as needed:

Service providers who act on our instructions: our property-management system and channel manager (Hostaway), our direct booking site at book.morikoyahotel.com (operated by MoriKoYa Hotel on the Hostaway platform) and its payment processor, email and cloud hosting providers, and analytics and advertising platforms named in section 6
Booking platforms through which you made your reservation, to the extent needed to manage the booking
Public authorities where required by law — in particular the guest register may be produced to police or public health officials under the Hotel Business Act
Professional advisers such as lawyers, accountants and insurers, where necessary
A successor if MoriKoYa or the hotel business is sold or reorganised

We do not sell personal information.

4. International transfers

MoriKoYa is located in Japan. Some of our service providers (for example Google, Meta, and our booking and email providers) process data in the United States and other countries. Where we transfer personal information outside Japan, or outside the EEA/UK for guests protected by the GDPR, we take the steps required by applicable law — such as relying on adequacy decisions (Japan holds an EU adequacy decision) or standard contractual clauses — so that your information remains protected.

5. How long we keep it

Guest register (name, address, nationality, passport details for non-resident guests, dates of stay): retained for at least 3 years after your stay, as required by the Hotel Business Act enforcement regulations
Reservation, payment and correspondence records: for the period needed to manage the booking and any claims, and for accounting and tax purposes (generally up to 7 years)
Website analytics and advertising data: per the retention settings of the relevant platform (see section 6); our Google Analytics property is set to 14 months
Marketing preferences: until you unsubscribe or ask us to stop

When information is no longer needed we delete or anonymise it.

6. Cookies, analytics and advertising

Our websites use cookies and similar technologies. Some are necessary for the site and booking engine to function (for example, remembering your search dates or keeping you logged in during booking). Others are used only with your consent where the law requires it.

Google Analytics 4 (Google LLC). We use GA4 to understand how visitors use morikoyahotel.com and book.morikoyahotel.com. It sets cookies such as _ga and _ga_*, records pages viewed and interactions, and is configured to measure across both domains so that a booking journey is reported as one visit. Google Analytics 4 does not log or store IP addresses. You can opt out with Google’s browser add-on at https://tools.google.com/dlpage/gaoptout.

Meta Pixel (Meta Platforms, Inc.). We use the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram, to understand which advertisements lead to visits and bookings, and to show advertisements to people who have visited our site. It sets cookies such as _fbp and may match your visit to your Meta account if you are logged in. Meta’s own privacy policy and your ad preferences are at https://www.facebook.com/privacy/policy and https://www.facebook.com/adpreferences.

Google Tag Manager (Google LLC). We use Tag Manager to load the tools above. It does not itself collect personal information.

Booking site cookies. book.morikoyahotel.com is MoriKoYa Hotel’s own booking site, hosted on the Hostaway platform. It uses cookies necessary to complete your reservation and to keep your search dates and selection while you book. The GA4 and Meta Pixel tags described above also run on this site so that a booking journey is measured end to end.

Your choices. Where a cookie notice is shown, you can accept or decline non-essential cookies there and change your choice later through the same notice. You can also delete or block cookies through your browser settings, and use the Google and Meta opt-out links above; blocking necessary cookies may prevent you from completing a booking.

7. Your rights

Depending on where you live, you may have the right to:

ask what personal information we hold about you and receive a copy
ask us to correct information that is inaccurate or incomplete
ask us to delete information, or to stop using it, where we no longer have a lawful reason to keep it
ask us to stop providing your information to third parties
object to, or withdraw consent for, marketing and advertising uses at any time
receive your information in a portable format
complain to a supervisory authority — in Japan the Personal Information Protection Commission (https://www.ppc.go.jp/en/), and in the EEA or UK your local data-protection authority

We cannot delete information we are legally required to keep, such as the guest register during its retention period. To exercise any right, contact us using the details in section 11. We may ask you to verify your identity.

8. Marketing

We will only send you marketing email if you have opted in or, where permitted, if you have stayed with us and have not opted out. Every marketing email includes an unsubscribe link. Booking confirmations, check-in instructions and other service messages are not marketing and will be sent regardless.

9. Security

Our websites use TLS encryption for all pages. Reservation and payment data are processed by our booking engine and payment processor, which maintain their own certified security programmes. Access to guest information within MoriKoYa is limited to staff who need it to do their work. Door-lock codes are unique to each reservation and expire at check-out.

10. Children

Our websites and booking services are intended for adults. We collect information about children only as part of a reservation made by a parent or guardian, and only to the extent needed to provide the accommodation.

11. Contact

For any question about this policy or your personal information:

MoriKoYa Hotel — 雅倉風株式会社 Hotel: 3-20-13 Nishi-Asakusa, Taito-ku, Tokyo 111-0035, Japan Registered office: RAID Ueno-Okachimachi 2F, 4-18-4 Taito, Taito-ku, Tokyo 110-0016, Japan Email: info@morikoyahotel.com Telephone: +81 70-5338-7017 Personal information manager: Hotel Manager, MoriKoYa Hotel

12. Changes

We may update this policy from time to time. The current version is always available at morikoyahotel.com/privacy, with the date of the last update shown at the top. Where a change materially affects how we use your information, we will notify guests with active reservations by email.