Privacy Policy

Account information you provide when registering or signing in, including name, email address, phone number, and password (stored only as a hash via Supabase Auth).

Identity and contact details required to complete a booking, such as travel companions, check-in dates, and any guest requests you share with us.

Payment details collected and processed by Stripe — we do not store full card numbers on our servers.

Information you provide when contacting support, leaving a review, or participating in our referral and membership programs.

Technical data automatically collected when you visit the Site, including IP address, device type, browser, language preference, and pages viewed.

To create and manage your Iromi Yado account, including authentication via email or Google sign-in.

To process bookings, payments, refunds, and to communicate confirmations, reminders, and post-stay messages.

To operate our membership tiers, referral rewards, and Cat points program.

To improve the Site, our properties, and our services through analytics and guest feedback.

To comply with legal obligations, prevent fraud, and enforce our terms.

Supabase — authentication, database, and file storage.

Stripe — payment processing for bookings and deposits.

Google — optional Google sign-in (OAuth). When you choose Google sign-in, Google shares your name, email address, and profile picture with us. We do not receive your Google password.

Vercel — hosting and content delivery.

Email delivery providers — for transactional messages such as booking confirmations and password resets.

These providers process your data on our behalf under their own privacy policies and contractual safeguards.

We use strictly necessary cookies to keep you signed in and to remember your language preference (English or 繁體中文).

We may use analytics cookies to understand how guests use the Site so we can improve it. You can disable cookies in your browser, but parts of the Site (such as login) may not function correctly.

We do not sell your personal data.

We share booking details with the specific Iromi Yado property and on-site staff who need them to host your stay.

We share data with the service providers listed above strictly to operate the Site and your booking.

We may disclose information when required by law, court order, or to protect the rights, property, or safety of Iromi Yado, our guests, or others.

Account and booking records are retained for as long as your account is active and for a reasonable period afterwards to meet legal, accounting, and tax obligations.

You may request deletion of your account at any time, subject to records we are required to retain by law.

You may access, correct, or update your profile information from your account settings.

You may request a copy of the personal data we hold about you, ask us to delete it, or withdraw consent for optional uses by contacting us at the address below.

If you are in a jurisdiction that grants additional data protection rights (such as the EU/UK GDPR or Hong Kong PDPO), we will honour those rights to the extent they apply.

We use industry-standard safeguards including encrypted connections (HTTPS), hashed passwords, row-level security on our database, and access controls for staff. No system is perfectly secure, so we encourage you to use a strong, unique password and to contact us immediately if you suspect unauthorised access.

Iromi Yado is intended for guests aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us information, please contact us so we can remove it.

Your data may be processed in Hong Kong, Japan, the United States, and other regions where our service providers operate. Where required, we rely on appropriate safeguards for cross-border transfers.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, notify you by email or through the Site.

Questions or requests about this policy can be sent to privacy@iromiyado.com.

IMS Group — Iromi Yado, Hong Kong.