Hanastay Co., Ltd. (花溪居株式会社) (“we”) handles personal information in accordance with Japan’s Act on the Protection of Personal Information and other applicable laws, as set out below.
Name, address, occupation, email address, phone number, nationality, passport details (including a copy of the passport), stay dates, number of guests and expected arrival time, payment-related information (we do not store card numbers), member account information (passwords are stored with irreversible encryption), the content of enquiries and messages, and site usage data (IP address, cookies, device and browser information).
Concluding and performing the accommodation contract; sending check-in guidance and door codes; preparing and retaining the guest register required by law; responding to enquiries; processing payments and refunds; member registration, the award and redemption of points and management of membership tiers; communications about your booking (including by email); preventing fraud and impersonation; statistical analysis to improve the service; and disclosures required by law. With your consent only, we also email offers and seasonal recommendations, which you can stop at any time.
Under the National Strategic Special Zone Act and related ordinances we are required to obtain and retain a copy of the passport of foreign guests. This is kept for the statutory retention period of three years and destroyed promptly thereafter.
We do not provide personal information to third parties without consent, except where required by law, where necessary to protect life, body or property, or in response to a lawful request from a public authority.
We entrust parts of our operations to the following providers, and personal data is transferred to their countries to that extent: Stripe, Inc. (United States / Ireland — payment processing); Cloudflare, Inc. (United States — site hosting, storage of data and passport images, and Turnstile human verification against abuse); Hostex (Singapore — reservation and property management, guest messaging); Lark Technologies Pte. Ltd. (Singapore — email); Google LLC (United States — maps and web fonts on our pages; your IP address and similar data are sent to Google when you view them); Woan Technology (SwitchBot, China) and Sciener (TTLock, China) — issuing smart-lock door codes, for which we register the guest name and booking number; and Anthropic, PBC (United States — an AI service that helps draft replies to enquiries). We supervise these providers as required under data-processing agreements or their terms of service.
Traffic is encrypted with TLS. Passport images are held in private storage and are accessible to staff only through signed, time-limited URLs. Passwords are stored with irreversible encryption, and access is limited to those who need it.
We use cookies to keep you signed in and to remember your language. To block automated abuse, Cloudflare Turnstile uses device and browser information. We do not run advertising trackers.
On request we will disclose, correct, suspend the use of, or delete the personal data we hold about you — write to support@hanastay.net. The guest register and passport records cannot be deleted during their statutory retention period. You can stop offer emails at any time from your member page or the unsubscribe link in each email.
Hanastay Co., Ltd. (花溪居株式会社) — Personal Information Manager — support@hanastay.net / +81 6-7220-9118
The Japanese version of this page is authoritative. Other languages are provided for convenience; in case of any discrepancy the Japanese version prevails.
Hanastay Co., Ltd. (花溪居株式会社) 〒541-0057 大阪府大阪市中央区北久宝寺町２丁目２−13 マエダ本社ビル 604号室