Privacy Policy
Personal Information Protection Policy
Personal Information Protection Philosophy
Gurunavi Inc. (hereinafter referred to as “the Company,” or “we/us/our” as applicable) operates a business based on the provision of restaurant information and online reservation services, management and sales promotion support for restaurants, companies, and individual businesses, and promotional services such as advertisement distribution and marketing research, based on its desire to continue to provide new value to the world and contribute to the realization of a better society by exploring the potential of “food” and connecting all things through “food.”
In operating these business activities, we recognize that the dignity of the rights and interests of individuals and the appropriate protection of personal information are of utmost importance as well as being our social responsibility.
To accomplish this, we have established a “Personal Information Protection Management System” to ensure the proper handling of personal information in compliance with the Act on the Protection of Personal Information and other relevant laws and regulations, and in consideration of the content and scale of our business, and all employees will implement, continuously improve, and maintain this system in accordance with the Personal Information Protection Policy.
1. Handling of Personal Information
We will handle personal information in a legal and fair manner, taking into account the content and size of our business. We will indicate to you the purpose of utilization and will not use any personal information for any purpose other than the purpose indicated to you, and we will take appropriate measures to ensure this.
2. Compliance with Laws, Ordinances, and Standards
We will comply with the laws, ordinances, policies, and other standards, customs and social rules in Japan and any other countries and regions.
3. Appropriate Measures for Personal Information Management
We will take organizational, human, physical and technical measures to securely manage personal information, endeavoring to prevent the leakage, destruction, damage, loss, falsification, or illegal access of personal information. We will constantly seek to improve in this area.
- Organizational measures to securely manage personal information:We have appointed a supervisor for the handling of personal information, clarified the employees handling personal information and the scope of personal information handled by those employees, and established a system for reporting and contacting the supervisor in accordance with laws, regulations and internal rules in the event a violation or an indication thereof is found.
- Human measures to securely manage personal information:We conduct education of employees on the protection of personal information to provide awareness of the importance of handling personal information. We also ensure employees comply with matters related to maintaining the confidentiality of personal information by stating these in internal rules and the written pledge made when joining the company.
- Physical measures to securely manage personal information:We implement access control for employees in areas where personal information is handled. We take measures to prevent the theft or loss, etc. of equipment, electronic media and documents, etc. used to handle personal information.
- Technical measures to securely manage personal information:We implement appropriate access controls to limit the scope of databases, etc. handling personal information. Information systems handling personal information are equipped with systems protecting them from unauthorized access and unauthorized software from outside.
- Understanding of the external environment:When the Company handles personal data in a foreign country (for example, when the Company stores personal data in an external cloud service whose data center is located in a foreign country, or when the handling of personal information is outsourced), we will implement safety management measures after understanding the system for protecting personal information in that foreign country. When the Company uses cloud services or outsources the handling of personal information, we select services that meet our standards using a survey form to ascertain the safety management measures of the relevant cloud service, and then use them after entering into an agreement (including terms of use) that includes a confidentiality clause. When providing personal information to a third party in a foreign country that does not have a personal information protection system equivalent to that of Japan, and when it is anticipated that "information related to personal information" that cannot identify a specific individual will be acquired as personal data by a foreign business operator to whom it is provided, we will obtain the consent of the individual to whom the information pertains in advance. When obtaining consent, pursuant to laws and regulations, we will provide the individual with the name of the foreign country, and information on the system for protecting personal information in the foreign country and the measures taken by the third party to protect personal information.
| Name of foreign country or region | Information on systems related to the protection of personal information * The following URLs are information published by the Personal Information Protection Commission. |
|---|---|
| EU | The EU has been designated by the Personal Information Protection Commission as a foreign country (or region) that has a system for protecting personal information that is recognized as being equivalent to that of Japan in terms of protecting the rights and interests of individuals. |
| United States of America | |
| India | |
| Commonwealth of Australia | |
| Republic of Singapore | |
| Taiwan | |
| People's Republic of China |
* In some cases, the location of data storage may not be disclosed, specified or identified due to the policies of the business operator to whom the information is provided.
* This policy will be updated if we add a new country or region where a third-party data recipient is located.
4. Organized Activities for Personal Information Protection
- (1)We will designate a personal information management officer and an internal audit officer to establish the Personal Information Protection Management System, and give them responsibility and authority for its implementation and operation to conduct business.
- (2)Based on internal audits and inspections, we will improve our internal rules and operations.
- (3)This policy will be made available to the general public by posting it on the Company’s website.
5. Continuous Improvement
- (1)We will periodically review the “Personal Information Protection Management System” in order to establish, implement, maintain, and improve the appropriate protection of personal information.
- (2)We will endeavor to educate and enlighten employees on the protection of personal information so that they recognize the importance of the protection of personal information and properly manage and handle such information.
- (3)We may revise this policy based on customer feedback, in order to protect the personal information we have obtained, or to comply with revisions to laws, regulations and other norms. Any changes will be published on the Company’s website or elsewhere.
6. Complaints, Opinions, and Other Enquiries about Personal Information
Established: July 1, 2004
Last updated: July 27, 2026
Gurunavi, Inc.
Akio Sugihara, President, Representative Director
Handling of Personal Information
1. Obtaining Personal Information
1-1 Methods of obtaining personal information
We obtain personal information using the following methods.
- - When we receive personal information directly from an individual orally or in writing, etc.
- - When the information is automatically sent to us when an individual uses or views our services, etc. (products, advertisements, contents, etc.)
- - When personal information is provided indirectly by a third party to which the individual has given consent.
- - When publicly available personal information is obtained from publications, the Internet, etc.
1-2 Obtaining personal information by methods not easily recognizable by the individual
We may handle "Information related to personal information" that cannot identify a specific individual (cookies, IP addresses, Device identifiers, location information, web browsing/activity history, etc.) collected on our services (such as our websites) or acquired from third parties (data management platforms, advertisement delivery business operators, affiliate service providers, etc.).
We may use such personally referable information in combination with customers' personal data held by us. In this case, it will be appropriately treated as personal information.
2. Purpose of use of personal information
Category | Purpose of Utilization |
|---|---|
| Customers’ Personal Information |
|
| Information for compliance with laws and regulations, etc. |
|
| Personal Information Obtained from Public Information Sources |
|
| Personal Information Obtained During Recruiting Activities |
|
| Information on employees |
|
| Information on former employees |
|
| Information on shareholders and investors |
|
| Enquiry |
|
3. Provision of personal information
3-1 Provision of personal information
When providing personal information, we take measures to avoid providing personal information to any third party (including third parties located in the foreign countries) without the individual’s consent except in the following cases:
- (1)Cases in which the provision of personal information is required by laws and ordinances
- (2)Cases in which the provision of personal information is necessary for the protection of the life, body or property of an individual, and for which your consent is difficult to obtain
- (3)Cases in which the provision of personal information is particularly necessary for improving public health or promoting the sound development of children, and it is difficult to obtain your consent
- (4)Cases in which the provision of personal information is necessary for cooperating with a state organ or a local government, or those entrusted by the state organ or local government in executing the affairs prescribed by laws and ordinances, and in which obtaining your consent is likely to impede the execution of such affairs
- (5)Cases in which we entrust the handling of personal data in whole or in part within the scope necessary for the achievement of the specified purpose of utilization
- (6)Cases in which we provide personal data as a result of succeeding to a business due to a merger or other event, and the acquirer uses such personal data within the scope of the purpose of utilization before the succession
- (7)Cases in which personal data is jointly used between the Company Group and a specific entity or individual, and in advance we notify, or make readily available to, you the following matters, or similar details of equal or greater scope
- •Joint use of personal data
- •Purpose of utilization of an entity or individual using personal data
- •Items of personal data to be jointly used
- •Name or company name responsible for the management of personal data
- •Scope of entities or individuals jointly using personal data
- •Method of obtainment
3-2 Provision to Rakuten Group
In this case, Rakuten and Rakuten Group shall use the information in accordance with the agreement on the handling of personal information with the Company and the “
Privacy Policy
3-3 Provision of information of officers and shareholders of corporations and other entities
We may provide information regarding the officers and shareholders of corporations or other organizations that is included in the information of such corporation or other organization and that has already been disclosed or publicly announced under laws and ordinances or by such person or such corporation or other organization, after obtaining the person’s consent and notifying the person of the purpose of utilization.
3-4 Supervision of contractors
When we entrust the performance of services involving the handling personal information, we execute an agreement with the contractor regarding personal information protection, and exercise appropriate supervision or other control over the contractor to ensure the prevention of leakage, destruction, damage, loss, falsification, or illegal access of personal information or other divulgement of personal information.
3-5 Provision of information to credit card issuers
When credit card payment is selected for the settlement of our services, we will provide information such as your name, email address or telephone number, and internet usage environment to the credit card issuer you use, for the purpose of fraud detection and prevention by the card issuer.
If the credit card issuer you use is located in a foreign country, this information may be transferred to the country where the issuer belongs. Since we cannot identify the credit card issuer you use and the country where the company is located from the information collected from you, we cannot provide the name of the foreign country, information on the personal information protection system in that country, or information on the personal information protection measures taken by that company. Information on personal information protection systems in various countries is published on the website of the Personal Information Protection Commission (https://www.ppc.go.jp/).
Please note that we do not retain your credit card details (such as your card number) on our systems after securely transmitting the necessary information to the issuer.
4. Activity History, Attribute Information, and Advertisement Delivery by a Third Party
4-1 Provision of Information Related to Personal Information
When providing Information related to personal information (such as Cookies, IP addresses, device identifiers, location information, and Web browsing/activity history) to a third party, and it is anticipated that such information will be acquired as personal data of the customer by the recipient, we will only provide it after obtaining your prior consent or confirming that the recipient has already obtained your consent.
Please refer to the "External Transmission Policy" for details on the information transmitted externally using Cookies, etc., the destinations of transmission, and the method for suspending utilization (opting out).
External Transmission Policy
4-2 Delivery of advertisements using cookies
- (1)We use cookies (including similar technologies) to provide information that is easily accessible by, and more valuable to, customers. Cookies allow data to be temporarily saved on a computer or other device used by a customer when accessing a website. Using cookies enables us to acquire and save in the Company's server the customer's activity history on the Company's websites (including, but not limited to, URLs and content accessed and the order of access), and attribute information that cannot be used to identify an individual such as age and sex, occupation, area of residence, history of store visits, and location information (and that which an individual cannot be identified by a combination thereof). If you do not wish to have information about yourself acquired, you can refuse to receive cookies by configuring your internet browsing software (browser) settings. Please contact the manufacturer of each software for how to configure browser settings. Please note that if you refuse to receive cookies, some of our services, such as the login retention function, may become unavailable.(2)We use advertisement delivery services provided by third parties. When doing so, such third parties may obtain and use information about visits to our site and activity history by means of cookies, etc. The cookie information, etc. obtained by such third parties will be handled in accordance with the privacy policies of such third parties. You can access the opt-out page provided within the website of the relevant third party to stop the delivery of advertisements that use cookie information, etc. by that third party.
4-3 Delivery of advertisements provided by third-party advertisers
In order to display more appropriate advertising to customers, we irreversibly transforms part of the personal information we possess (e-mail addresses, etc.) into data that cannot be used to identify individuals, and provide it to third-party advertisers.
Third-party advertisers do not use this information for any purpose other than delivery of advertisements.
You can choose to enable or disable personalized advertisements, etc. for these advertisements by third-party advertisers.
Please note that if a third-party advertiser is newly added, we will update this policy.
- (1)Google customer matching The “customer matching” provided by Google is used to customize the display of advertising and content on Gurunavi’s products and services that you see on Google’s services for you and to improve convenience. Some personal information (e-mail address, etc.) is shared with Google for this purpose, and only used for the purpose of displaying Gurunavi’s advertisements on Google’s services. Please refer to Google’s advertising help page for information on the “customer matching” system and the limited handling of data by Google.
Google (How to disable advertising)
*Japanese page only
- (2)Yahoo! JAPAN data import function Gurunavi uses the “data import function” provided by Yahoo! JAPAN to display advertisements on Yahoo! JAPAN and Yahoo! JAPAN partner sites according to usage of Gurunavi services. Please refer to the help page for the data import function for information on the “data import function” system and the limited handling of data by Yahoo! JAPAN and Yahoo! JAPAN partner sites.
Yahoo! JAPAN (How to disable advertising)
*Japanese page only
- (3)Facebook customer audience Gurunavi uses the “customer audience” provided by Facebook to display advertisements on Facebook services according to usage of Gurunavi services. Please refer to Facebook’s customer audience help page for information on the “customer audience” system and the limited handling of data by Facebook.
Facebook (How to disable advertising)
*Japanese page only
- (4)Microsoft Advertising customer matching Gurunavi uses the “customer matching” provided by Microsoft to display advertisements on Microsoft services according to usage of Gurunavi services. Please refer to Microsoft’s customer matching help page for information on the “customer matching” system and the limited handling of data by Microsoft.
Microsoft (How to disable advertising)
*Japanese page only
- (5)TikTok Ads Customer File Audience According to the usage of our services, we use "Customer File Audience" to display advertisements on the TikTok service. Please refer to the "Customer File Audience" help page for the mechanism of "Customer File Audience" and the limited handling of data by TikTok.
TikTok Ads (Changing Personalized Ad Settings)
*Japanese page only
TikTok Privacy Policy
*Japanese page only
* In this initiative, personal data may be provided to third parties located in foreign countries. For the names of such foreign countries and their personal information protection systems, please check the "Understanding of the external environment" section of the Personal Information Protection Policy.
5. Transfers out of the European Economic Area (EEA) and the United Kingdom
When customers residing in the EEA (EU member states, Iceland, Norway and Liechtenstein) and the United Kingdom use services provided by the Company, we may receive and handle transfers to countries outside the EEA and the United Kingdom (mainly Japan) from other business operators, etc.
In such cases, the same rights of the data subject as under the GDPR (EU General Data Protection Regulation) may not be recognized in countries outside the EEA and the UK. However, we will comply with the “Act on the Protection of Personal Information” of Japan and the “Supplementary Rules under the Act on the Protection of Personal Information for the Handling of Personal Data Transferred from the EU and the United Kingdom based on an Adequacy Decision” and ensure necessary measures for the protection of personal information.
6. Voluntary nature of the individual providing personal information
When the Company obtains personal information from an individual, whether or not to provide personal information is at the discretion of the individual, who can make their own choice.
Please be aware that if you do not provide information or if it is inaccurate, the procedures and services necessary to achieve the purpose of use may be impeded in whole or in part.
7. Disclosure, etc. of Personal Information
7-1 Disclosure, etc. of retained personal data handled by the Company
- (1)You may request the Company to notify you of the purpose of utilization of, disclose, correct, add or delete the content of, discontinue its utilization of, erase of, discontinue its provision to a third party, or disclosure of records provided to third parties of, the retained personal data handled by the Company ("disclosure, etc.") pursuant to the Act on the Protection of Personal Information.
- (2)When requesting notification of the purpose of utilization and disclosure, you are required to pay handling fees. (For handling fees, please refer to the "Fee and payment method for request for disclosure, etc.")
- (3)You are required to pay all of the printing costs, costs of obtaining documents for identity verification, mailing costs and other costs.
- (4)Request documents must be in the format prescribed by the Company. No other format will be accepted.
- (5)Disclosure of all or part of the personal data held pertaining to a request may be withheld in any of the following cases. If a decision is made to withhold disclosure, notification will be provided with the reason.
- •If there is a risk of harming life, body, property or other interests due to disclosure
- •If there is a risk of significantly impeding the appropriate execution of the Company’s business due to disclosure
- •If disclosure constitutes a violation of laws and regulations
- •If it cannot be confirmed that the request for disclosure is from the individual to whom the information pertains
- •If the Company is otherwise allowed to reject the request pursuant to applicable laws
- (6)We will properly handle personal information acquired at the time of your request to the extent necessary for such request. Please understand that we do not return documents or other materials submitted (including documents for identity verification).
7-2 Fee and payment method for request for Disclosure, Etc
In the case of request for disclosure and request for notification of the purpose of utilization:
- (1)Fee: 500 yen (including tax) per request.(2)Payment method: Please enclose postage stamps worth 500 yen with the request form.
* Cost for replying in writing by simplified registered mail. We will provide separate notification in the event fees are required for disclosure by means other than mail.
* If the cost of simplified registered mail or the simplified registered mail system is changed, the fee for requests for disclosure, etc. will be changed accordingly.
* If the payment is either less than the specified fee amount or not enclosed, we will notify you thereof, and return all the submitted documents. You will be requested to resubmit the documents.
* Please understand that we do not accept requests made in person by visiting our company.
7-3 Procedures for request
- (1)Please use the inquiry form to request disclosure, etc. We will follow up by providing information on the procedure. If sending by mail, please download or print out the “Request form designated by the Company” indicated below.(2)After filling out the relevant items in the form, and affixing your signature and seal, please enclose the “documents for identity verification” and mail them to the Company’s “Personal Information Enquiry Desk.” If a request is made by an agent on your behalf, the address, signature and seal of the agent are required in addition to your address and name.
- 1)Request form designated by the Company
* If we are not able to proceed with the procedures because the necessary items are incomplete or flaws, etc. are contained in the request form, we will notify you thereof using the contact details indicated in the request form. Please understand that if we do not receive a resubmission of the documents (including undelivered mail) within 2 weeks from such notification, we will deem that you have not requested disclosure, etc.
- 2)Documents for identity verification
Please enclose one copy of any of the following. Please make sure that the copies clearly show your name and address.
- •Valid driver's license (copies of both sides are required)
- •Valid Individual Number Card (My Number Card) (front side only. Individual Number is not required)
- •Valid passport
- •Copy of residence certificate (only relevant entries such as address and name, which do not include your domicile of origin or personal identification number)
- •Valid Health Insurance Eligibility Certificate (both sides are required. Please black out the insured person's symbol, number, branch number, and insurer number)
Notes
- •If the present address is different from the address recorded with the Company due to a change of residence, etc., please submit a copy of the residence certificate (not including your personal identification number) showing the history of change of residence.
- •If we are unable to verify your identity for reasons such as the documents for identification documents not being enclosed or the identification documents containing unclear sections, we will notify you thereof, and return all the submitted documents. You are requested to resubmit the documents.
- •If an agent delegated by you makes a request for disclosure, etc., we will confirm that he or she is your agent by the power of attorney to which your registered seal is attached and your certificate of seal impression, and the agent's document for identity verification, and if your statutory agent makes a request for Disclosure, Etc., we will confirm that he or she is your statutory agent by the statutory agent’s document for identity verification and a document certifying the relationship between the statutory agent and you.
(3)Once we verify the identity, we will appropriately and promptly make a response within a reasonable period of time and to the reasonable extent. - 1)Request form designated by the Company
Name of the Personal Information Manager
CISO(Chief Information Security Officer)
Complaints, Opinions, and Other Enquiries about Personal Information
Please contact us using the dedicated contact form or the following links:
※Click here for enquiries regarding our handling of personal information.
※Click here for enquiries regarding activity history and contextual information.
※Please contact the following address for enquiries regarding the personal information we have obtained.
Personal Information Enquiry Desk:
Gurunavi, Inc.
Hibiya Mitsui Bldg. 11F, 1-1-2 Yurakucho, Chiyoda-ku, Tokyo 100-0006
Complaint and Consultation Desk Manager at Personal Information Enquiry Desk
Click here to make an enquiry.
(Inquiries can only be made in Japanese.)
Established:July 1, 2004
Last updated:July 27, 2026