Privacy Policy
Last updated: June 2026
Information We Collect
When you interact with Swallow Base, we may collect the following information:
- Contact information: Name, email address, and message content when you use our contact form or chatbot.
- Booking information: Name, email, dates, location preferences, and payment details when you reserve a Pass.
- Usage data: Analytics data about how you navigate our website (pages visited, time spent, device type) — collected only with your consent.
- Lead data: Information you provide through forms, chatbot conversations, or newsletter sign-ups.
- Payment data: Payment details are processed securely by Stripe and are never stored on our servers.
Cookies & Consent
We use a cookie consent system that allows you to control which cookies are active. Cookies are grouped into three categories:
- Essential (always active): Required for security (Cloudflare), payment processing (Stripe), and basic site functionality. These cannot be disabled.
- Functional (your choice): Enable enhanced features such as the booking system, chatbot, and personalized content. Disabled by default until you consent.
- Analytics & Marketing (your choice): Allow us to measure website performance (Google Analytics) and track campaign effectiveness. Disabled by default until you consent.
You can change your cookie preferences at any time through the cookie banner. Your preferences are stored locally in your browser and never sent to our servers.
We also use sessionStorage (not cookies) to remember your scroll position and language preference during your browsing session. This data is automatically cleared when you close your browser tab.
How We Use Your Information
We use the information we collect to:
- Process Pass reservations and communicate booking details.
- Process payments securely through Stripe.
- Respond to inquiries submitted through our contact form or chatbot.
- Send occasional updates about Swallow Base (only with your explicit consent).
- Improve our website and services through analytics (only when you consent to analytics cookies).
- Track and manage leads to provide better service.
We do not sell, rent, or share your personal information with third parties for marketing purposes.
Data Storage & Security
Your data is stored on secure servers. We implement industry-standard security measures including encrypted connections (SSL/TLS) for all data transmission. Payment processing is handled entirely by Stripe (PCI DSS Level 1 compliant) — we never store credit card numbers. Booking and contact data is retained for the duration of your relationship with Swallow Base and deleted upon request.
Third-Party Services
Our website uses the following third-party services, each with its own privacy policy:
- Cloudflare: Website hosting, CDN, and security (essential — always active).
- Stripe: Payment processing (essential — active only during checkout).
- Google Fonts: Typography delivery (functional).
- Google Analytics: Website usage statistics (analytics — only with your consent).
- Chatbot service: Customer support and lead management (functional — only with your consent).
- Instagram/Facebook: Social media links (no tracking pixels embedded).
Third-party services that require consent are only loaded after you accept the corresponding cookie category.
Your Rights
Under applicable privacy laws (including GDPR, APPI, CCPA, and LGPD), you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data ("right to be forgotten").
- Withdraw consent for cookies or marketing communications at any time.
- Opt out of analytics tracking at any time via the cookie banner.
- Request data portability (receive your data in a machine-readable format).
- Lodge a complaint with your local data protection authority.
California residents (CCPA/CPRA): We do not sell your personal information. You have the right to know what data we collect and to request its deletion.
International Data Protection
Swallow Base operates under Japanese law and complies with the Act on the Protection of Personal Information (個人情報保護法, APPI) as amended. We also respect:
- GDPR (EU/UK) — data minimization, purpose limitation, right to be forgotten, and consent-based cookie processing.
- CCPA/CPRA (California) — right to know, delete, and opt out.
- LGPD (Brazil) — consent-based data processing and data subject rights.
By using our cookie consent system and providing these controls, we aim to comply with privacy regulations globally.
Contact
For privacy-related inquiries or to exercise your data rights, contact us at:
Email: info@swallowbase.com
Operator: Lila.Inc — Japan