Privacy Policy

1. Basic Policy

ULT COLONY Inc. (hereinafter referred to as "the Company") recognizes the importance of customers' personal information and complies with laws and regulations concerning the protection of personal information, and handles customers' personal information appropriately in accordance with the following privacy policy.

2. Definition of Personal Information

In this privacy policy, "personal information" means information about a living individual that can identify a specific individual by name, date of birth, or other description contained in such information (including information that can be easily collated with other information and thereby identify a specific individual).

3. Collection of Personal Information

The Company will collect customers' personal information in the following cases:

• When booking or applying for services
• When responding to inquiries
• When participating in various events and campaigns
• When responding to questionnaires
• Other cases where personal information is provided directly or indirectly by the customer

4. Types of Personal Information Collected

The personal information collected by the Company includes, but is not limited to, the following:

• Name
• Address
• Phone number
• Email address
• Date of birth
• Gender
• Emergency contact information
• Information on health status (if necessary for service provision)
• Insurance information
• Payment information

5. Purpose of Use of Personal Information

The Company will use the collected personal information for the following purposes:

• Provision and operation of helicopter services
• Processing of booking confirmations, changes, and cancellations
• Safety management and emergency contact
• Improvement of services and development of new services
• Responding to inquiries from customers
• Sending important notices and service information
• Marketing activities (with customer consent)
• Compliance with laws and regulations

6. Provision of Personal Information to Third Parties

The Company will not provide customers' personal information to third parties except in the following cases:

• With the customer's consent
• When required by law
• When it is necessary for the protection of the life, body, or property of an individual and it is difficult to obtain the consent of the person
• When it is particularly necessary for improving public health or promoting the sound growth of children and it is difficult to obtain the consent of the person
• When it is necessary to cooperate with a state organ or a local public entity or a person entrusted by it in executing the affairs prescribed by laws and regulations and obtaining the consent of the person is likely to impede the execution of the affairs

7. Security Management of Personal Information

The Company takes the following security management measures to prevent the loss, destruction, alteration, and leakage of personal information:

• Appointment of a personal information protection manager
• Implementation of education and training on personal information protection for employees
• Restrictions on access to personal information
• Security measures for storage locations of personal information
• Encryption of communications using SSL, etc.

8. Use of Cookies

The Company's website uses cookies to provide better services to customers. A cookie is a small text file that a website sends to your computer.

You can disable cookies by setting your browser, but in that case, some functions of our website may not operate normally.

9. Analytics Tools

We may use analytics tools such as Google Analytics to understand usage and improve our Site. These tools may use cookies and collect data such as IP address. Collected data is anonymized and not used to directly identify individuals.

For Google’s data handling, please refer to Google’s policies. You may opt out using the browser add‑on: Google Analytics Opt‑out.

10. Joint Use and Outsourcing

We may jointly use personal data or outsource handling to the extent necessary to provide the Services.

• Parties: air operators, pilots, guide companies, insurers, payment and messaging providers
• Purposes: safe operation, tour delivery, reservation management, inquiry responses, payment/settlement, insurance
• Data items: name, contact details (email/phone), reservation details, declared health/equipment information (where necessary)
• Controller for joint use: ULT COLONY Inc.

We enter appropriate contracts with processors and supervise their handling and safeguards.

11. Provision to Third Parties

We do not provide personal data to third parties without consent except where permitted by laws, to protect life/body/property, or to cooperate with public authorities, among other legitimate grounds.

12. Overseas Transfers

Servers of external services we use (e.g., Google services, CDNs) may be located outside Japan, and personal data may be processed abroad. We implement appropriate safeguards in accordance with applicable laws.

13. Retention and Deletion

• Inquiry records: in principle deleted within 12 months after completion (unless legal retention is required)
• Reservation/payment/accounting data: retained for periods required by law (e.g., up to 7 years)
• Logs: retained for security for a limited period then deleted/anonymized

14. Security Measures

We take organizational, technical and physical measures to prevent leakage, loss or damage of personal data, including:

• Least‑privilege access control and credential management
• TLS encryption for communications and security headers on the server
• Logging/auditing and continuous vulnerability management
• Processor oversight and staff awareness/training

15. Disclosure, Correction, and Deletion

Customers have the right to request disclosure, correction, and deletion of their personal information held by the Company. If you wish to make a request, please contact us at the contact information below.

Please note that we may not be able to respond to requests for disclosure, etc. in the following cases:

• When there is a risk of harming the life, body, property, or other rights and interests of the person or a third party
• When there is a risk of significantly impeding the proper execution of our business
• When it would violate laws and regulations

Identity verification: presentation of official ID, verification of sender email address, etc. Target response time: within 30 days in principle (unless unavoidable).

16. Personal Data of Minors

If a minor uses our services, please do so after obtaining the consent of a guardian.

17. Changes to this Policy

The Company may change this privacy policy in response to amendments to laws and regulations, changes in social conditions, technological advances, etc. The revised privacy policy will become effective from the time it is posted on our website.

18. Contact