Privacy Policy

1. Information We Collect

• Name, phonetic reading, date of birth, address, phone number, email address
• Driver's license number, expiration date, nationality
• Images of identity documents such as a driver's license or passport
• Handwritten signature at the time of contract (captured electronically)
• Photographs taken at vehicle handover and return (to check for damage)
• Location data from the vehicle's GPS device, and video and records of driving conditions from the dashcam
• Credit card information (processed by our payment processor (Stripe); not stored on the Company's servers)
• Service usage history, booking history, and inquiry contents
• Access information (IP address, browser type, referrer URL, etc.)

Images of identity documents may include your registered domicile, nationality, appearance, and the like, but the Company does not use these for any purpose other than verifying identity and driving eligibility. We do not intentionally collect special-care-required personal information. We obtain your consent in advance before collecting document images.

2. Purposes of Use

• Providing the Service and performing the contract
• Verifying identity and driving eligibility
• Processing payments and deposits
• Responding to accidents and trouble
• Vehicle safety management, and locating the vehicle in the event of theft or non-return
• Administrative contact regarding bookings and use
• Compliance with laws such as the Road Transportation Act
• Statistical analysis to improve the Service

Emails from the Company are limited to administrative contact incidental to your booking and use (we do not send advertising or promotional emails).

3. Provision to Third Parties

Except in the following cases, the Company does not provide personal information to third parties without obtaining the person's prior consent.

• When based on laws and regulations
• When necessary to protect a person's life, body, or property and it is difficult to obtain the person's consent
• When based on a request from the police or an administrative agency (accidents, theft, traffic violations, etc.)

In addition, to the extent necessary for responding to accidents and breakdowns, and with your prior consent, we provide information to insurance companies and roadside-assistance providers. We entrust handling to the minimum necessary extent to subcontractors for payment processing, email delivery, and the like.

4. Provision to Third Parties Overseas

In connection with payment processing and other operations, the Company may provide personal data to third parties located overseas (such as Stripe, Inc., headquartered in the United States) or handle it overseas.

• Destination country: United States
• Information on that country's personal-information protection system: we understand it based on materials published by the Personal Information Protection Commission and the like. Details are provided at our inquiry desk.
• Measures taken by the recipient: we conclude data processing agreements (standard contractual clauses, etc.) to ensure that appropriate and reasonable safety management measures are implemented.

By using the Service, you consent to the provision of personal data to the third parties located overseas described above.

5. Retention Period and Disposal

• Under laws concerning private passenger vehicle rental (rent-a-car), rental records are retained for at least 2 years from the end date of each rental (a legal obligation). Records subject to this retention obligation are not subject to deletion requests during the retention period.
• The handwritten signature at the time of contract forms part of the rental record as evidence that the rental contract was concluded, and is managed in a form that cannot be edited or deleted after storage, to prevent tampering.
• Driver's license and passport images, vehicle photographs, and other personal information linked to a booking are retained for 2 years from the last rental date, after which they are deleted in accordance with the Company's standards and procedures.

6. Safety Management Measures

• Personal information is stored in the Company's management system, and access to the admin screen requires two-factor authentication.
• Images of identity documents and the like are stored in private storage, with access controls applied so that only the operator can access them.
• Communications are encrypted (TLS). We do not hold credit card numbers (Stripe processes them).
• The Company uses services provided by operators headquartered in the United States (cloud infrastructure, payment processing, etc.) to store and process personal data. Having understood the personal-information protection systems of these countries, we ensure safety management through contractual and technical measures.

7. Response to Leaks

If a leak, loss, or damage of personal information occurs and there is a significant risk of harm to individuals' rights and interests, we will report to the Personal Information Protection Commission and notify (or publicly announce to) the affected individuals in accordance with the law.

8. Requests for Disclosure, Correction, Suspension of Use, Deletion, etc.

Requests for notification of the purpose of use, disclosure, correction, addition, deletion, or suspension of use of retained personal data are accepted at info@agito-campingcar.com. After confirming your identity, we respond within a reasonable period. There is no fee.

9. Access Analysis Tools (information sent externally)

To analyze and improve how the Service is used, the Company uses "Google Analytics," an access analysis tool provided by Google LLC. As a result, when you view this site, the following information is sent from your device to Google.

• Usage such as the URL of the page viewed, the date and time viewed, and time spent
• Environment information such as IP address and the type of browser or device
• A user identifier generated by cookies and the like (does not include information that directly identifies an individual, such as a name)

The information sent is managed under Google's privacy policy (policies.google.com/privacy). If you wish to disable measurement, use the Google Analytics Opt-out Add-on (tools.google.com/dlpage/gaoptout) or disable cookies in your browser settings.

10. Complaints, Inquiries / Business Information

Please send complaints and inquiries regarding this policy and the handling of personal information to the desk below. You may also file with the Personal Information Protection Commission.

• Business: Befreak Inc. (trade name: AGITO)
• Representative: Kentaro Kawamura
• Address: 京都府向日市上植野町桑原5番地の3
• Contact: info@agito-campingcar.com