Privacy Policy

1 Information We Collect

We collect personal information you provide directly to us, as well as data collected automatically when you use our services.

1.1 Information You Provide

• Account information: Name, email address, password, date of birth, and profile preferences when you create an account.
• Purchase information: Name, billing address, payment card details (processed via Stripe — we never store full card numbers), order history, and e-ticket delivery preferences.
• Contact information: Messages, queries, and any information you submit through our contact forms or customer support channels.
• Identity verification: For VIP or age-restricted purchases, we may request a copy of government-issued ID, which is deleted immediately after verification.

1.2 Information Collected Automatically

• Device & browser data: IP address, browser type and version, operating system, device identifiers.
• Usage data: Pages visited, time spent, clicks, searches, referring URLs, and navigation patterns.
• Location data: General geographic location inferred from your IP address. We do not collect precise GPS location without your explicit consent.
• Cookies and tracking technologies: See Section 4 for our full Cookies Policy.

1.3 Information from Third Parties

If you connect a social media account or use a social login (e.g., Sign in with Google), we may receive limited profile information from that provider in accordance with your privacy settings on that platform.

2 How We Use Your Information

We use your personal information for the following purposes:

• Processing transactions: To complete ticket purchases, issue e-tickets, manage payments, and provide order confirmations.
• Account management: To create and manage your account, enable login, and provide customer support.
• Communication: To send booking confirmations, event updates, important notices, and responses to your enquiries.
• Marketing (with consent): To send newsletters, promotional offers, lineup announcements, and personalised recommendations — only if you have opted in. You can unsubscribe at any time.
• Service improvement: To analyse usage patterns, fix bugs, test new features, and improve the overall user experience.
• Legal compliance: To comply with applicable Japanese and international laws, regulations, and lawful requests from authorities.
• Fraud prevention and security: To detect, prevent, and investigate fraudulent transactions, unauthorised access, and other security threats.

3 Data Sharing

We do not sell your personal data. We may share your information with the following categories of third parties only as necessary to provide our services:

• Payment processors: Stripe Inc. (credit/debit cards) and PayPal Holdings, Inc. — for processing transactions securely.
• Ticketing infrastructure: Our ticketing platform providers who generate and deliver QR-code e-tickets on our behalf.
• Event venue operators: Limited information (name, ticket type) shared with venue access control systems for entry verification on event days only.
• Email and communication providers: To deliver transactional emails and marketing communications (if consented).
• Analytics providers: Anonymised and aggregated usage data shared with analytics tools for service improvement. We configure these tools to respect user privacy.
• Legal and regulatory authorities: Where required by law, court order, or regulatory obligation under Japanese law.

All third-party service providers are contractually required to handle your data in accordance with applicable privacy laws and our data processing requirements.

4 Cookies Policy

We use cookies and similar tracking technologies to improve your experience on our website. Cookies are small text files placed on your device.

Types of Cookies We Use

• Essential cookies: Required for the website to function correctly (e.g., session management, shopping cart, login state). Cannot be disabled.
• Preference cookies: Remember your settings (e.g., language, currency). Can be disabled but may affect functionality.
• Analytics cookies: Help us understand how visitors interact with the site (e.g., Google Analytics). We anonymise IP addresses. Disabled if you opt out.
• Marketing cookies: Used to show you relevant advertisements on other platforms. Only set with your explicit consent.

You can manage cookie preferences at any time through our Cookie Settings panel (accessible via the footer link) or through your browser settings. Note that disabling essential cookies may impair your ability to purchase tickets or use account features.

5 Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers.
• Payment card data processed exclusively by PCI DSS Level 1 compliant providers (Stripe). We never store full card numbers on our own systems.
• Regular security audits, penetration testing, and vulnerability assessments.
• Access controls ensuring that only authorised personnel can access personal data, on a strict need-to-know basis.
• Multi-factor authentication for all internal staff systems handling personal data.
• Data stored in secure, certified data centres located in Japan and the European Economic Area.

While we take all reasonable steps to protect your data, no method of internet transmission or electronic storage is 100% secure. In the unlikely event of a data breach, we will notify affected users and relevant authorities in accordance with applicable law.

6 Your Rights

Under applicable Japanese law (the Act on the Protection of Personal Information) and, where applicable, the EU GDPR, you have the following rights:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request that we correct inaccurate or incomplete personal data.
• Right to erasure ("right to be forgotten"): You may request that we delete your personal data, subject to certain legal exceptions.
• Right to data portability: You may request your data in a structured, machine-readable format.
• Right to object: You may object to processing for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right not to be subject to automated decision-making: We do not use automated profiling that produces significant legal effects without human review.

To exercise any of these rights, please contact us at info@peacefulmeadowveil.com. We will respond within 30 days.

7 Children's Privacy

Our website and services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us immediately at info@peacefulmeadowveil.com and we will promptly delete such information.

For festival attendance, children under 12 must be accompanied by a parent or legal guardian at all times. We collect minimal information about minors and never use it for marketing purposes.

8 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by:

• Posting the updated policy on this page with a revised "Last updated" date.
• Sending an email notification to your registered email address for material changes.
• Displaying a prominent notice on our website homepage for 30 days following a significant update.

We encourage you to review this page periodically. Your continued use of our services following notification of changes constitutes your acceptance of the updated policy.

9 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

You also have the right to lodge a complaint with the Personal Information Protection Commission of Japan (PPC) if you believe your data rights have been violated.