Last amended on July 29, 2025
Recruit Co., Ltd. (“Company”) has established this Privacy Policy to set forth the purpose and the method of use of users’ personal information when users use the services the Company operates (“Services”).
This Privacy Policy governs the data processing of Recruit Co., Ltd. (“Company”) in relation to the Jalan.net. Please read this Privacy Policy carefully in its entirety, including the jurisdiction-specific annexes which apply to you, which depends on your residency/location.
In addition, Lists of Cookies Used on the Websites and Lists of Cookies Used on the Apps are also provided, so please also refer to these as necessary.
1. Acquisition of personal information
2. Purpose of use of personal information
3. Provision of personal information to third parties
4. Receiving of personal information from companies, schools, associations, etc. that participate in the Services
5. Outsourcing of personal information handling
6. Provision of personal information to third parties in foreign countries
7. Request of disclosure, etc. of personal information
8. Voluntary nature of provision of personal information
9. Persons responsible for the business and manager for the protection of personal information
10. Contact details regarding personal information
The Company acquires personal information by the following methods:
The Company also acquires from users or third parties information that does not by itself fall under personal information, such as attribute information (e.g., age, sex, occupation, or resident area), Cookies, IP addresses, advertising identifiers (AAID, IDFA), log information related to Internet usage, such as location information, activity history, and transmission information (including the details and subjects of communications sent to or received by users in connection with the use of the Services, whether received communications have been read, and whether or not any communications are sent or received) (collectively, “Informative Information”), and purchase history at physical shops. If a user provides personal information to the Company for use of the Services, the Company may link such information with such user’s Informative Information, in which case such Informative Information shall be treated as personal information.
The Company uses personal information for the following purposes.
Please check here for information on “Group Companies.”
[Collected Personal Information]
*We will use the information (e.g., name and address) after processing it into information that cannot be used to identify specific individuals
[Collected Personal Information]
Activity logs on Jalan.net, IP address and cookie.
[Collected Personal Information]
*We will use the information (e.g., name and address) after processing it into information that cannot be used to identify specific individuals
[Collected Personal Information]
Activity logs on Jalan.net.
[Collected Personal Information]
The Company will provide personal information in writing or by electromagnetic means to the following recipients in accordance with the respective paragraphs. The items of personal information that the Company provides may include Informative Information.
* We are unable to list all accommodation as the list is updated from time to time.
[Purpose of Use of Personal Information by Recipient(s) ]
[Items of Personal Information Provided to Recipient(s) ]
For the purpose of accommodation reservations (including management of reservations, etc.)
For the purpose of forwarding inquiries from users to accommodations upon users’ request
[Period(s) of Retention/Use by Recipient(s)]
Until the purpose of transfer is achieved (however, if there is a retention period set by each accommodation facility, the retention period shall be in accordance with such period)
[Purpose of Use of Personal Information by Recipient(s)]
To improve their accommodation services and user accommodation experience
[Items of Personal Information Provided to Recipient(s)]
Statistical data, such as number of customers in a designated area (*)
* any information which can identify a specific user, including name, e-mail address, activity logs etc., will not be provided.
[Period(s) of Retention/Use by Recipient(s)]
Until the purpose of transfer is achieved (however, if there is a retention period set by each accommodation facility, the retention period shall be in accordance with such period)
[Purpose of Use of Personal Information by Recipient(s)]
・To handle procedures related to referrals to Jalan.net (Payment of commissions for introductions and recommendations, etc.)
[Items of Personal Information Provided to Recipient(s)]
・Information relating to reservations made by users (e.g., reservation number, booking date, check-in date, check-out date, referrer, kayak click ID, payment amount, cancellation type etc.) (*)
* Any information which can identify a specific user, including name, e-mail address, etc., will not be provided.
[Period(s) of Retention/Use by Recipient(s)]
Until the purpose of transfer is achieved (however, if the business partner specifies a retention period, that period will apply)
Furthermore, other than the above, the Company may provide personal information to third parties to follow laws and regulations (including when responding to investigations of police and orders of courts) or if it separately obtains a user’s consent, specifying the party to whom the information is to be disclosed, the information to be disclosed, purpose of use, and disclosing the means or method.
The Company properly receives personal information in writing or by electromagnetic means from the following sources in accordance with the respective paragraphs. The items of personal information that the Company receives may include Informative Information.
[Receiving purpose of the Company]
[Items of personal information that will be received]
[If the Company conducts outsourcing]
[If the Company is entrusted with handling personal information]
*When the Company prepares and provides analysis results or results of advertisement distribution, etc. as a commission, it will process such information to ensure that the information alone cannot be used by such companies, schools, associations, etc. to identify particular individuals, by methods such as excluding information on names and addresses and replacing them with attribute information on sex or age, etc.
We may provide personal information to third parties in foreign countries (meaning countries or areas outside Japan) in the following cases.
[If the Company provides personal information to third parties]
[If the Company outsources personal information handling operations]
[If the Company provides personal information due to succession of business by merger or other events]
The Company will store and use personal information within the scope and for the period necessary to comply with laws and regulations or to achieve the purposes of use, but the user or agent thereof may, in accordance with the procedures prescribed by the Company, request the Company to disclose, correct, add, or delete content, or discontinue utilizing or erase the personal information that can be used to identify the user. For details on how to make such requests, please contact us as set forth in “10. Contact details regarding personal information”. However, the Company might not respond to the request to the extent permitted by law.
Furthermore, in order to prevent false requests due to identity theft, etc. the Company will conduct identification by using reasonable methods such as requesting submission of identification documents at the time of a request. If all items necessary for identification prescribed by the Company are fulfilled, the Company will consider such request is from the user itself and respond to the request, but even if such request is from third parties other than such user who obtained personal information or identification documents of the user, the Company will not be responsible for damages incurred by the user due to responding to such request unless the Company is intentionally grossly negligent or in violation of the Consumer Contract Act by the Company. Please be careful in handling your personal information.
Provision of personal information from users is voluntary, but if a user does not enter items necessary for Services, such user may not be able to use Services.
[Person responsible for the business] Recruit Co., Ltd. Head of Product Division
[Manager for the protection of personal information] Recruit Co., Ltd. Head of Privacy Risk Control Department
Please contact us via: here
Annex: Korea
This Annex (this “Annex”) applies to the data subjects located or residing in the Republic of Korea (“Korea”). This Annex should be read together with the Privacy Policy, and in case of any conflict, the terms of this Annex will prevail as to personal information of Korean data subjects.
Legal Basis for Processing
We process your personal information pursuant to the following legal basis for the purposes stated in “2. Purpose of use of personal information” of the Privacy Policy.
Accommodation reservations (including notification to accommodation facilities, management of reservations, etc.)
[Legal Basis]
your consent
[Collected Personal Information]
Improvement and new development of our services including Jalan.net (e.g., analysis) (*)
*We will use the information (e.g., name and address) after processing it into information that cannot be used to identify specific individuals
[Legal Basis]
your consent
[Collected Personal Information]
Activity logs on Jalan.net, IP address and cookie.
Responding to inquiries from users
[Legal Basis]
your consent
[Collected Personal Information]
Preparation of statistical data for provision of information to accommodations
[Legal Basis]
your consent
[Collected Personal Information]
Activity logs on Jalan.net.
To perform procedures related to the use of Jalan.net based on referrals from business partners (e.g., Payment of commissions for introductions and recommendations, etc.)
[Legal Basis]
your consent
[Collected Personal Information]
Retention Period and Term of Use of Collected Personal Information
When personal information is no longer needed, such as when the retention period of the personal information has expired or the purpose of use has been achieved, the Company will dispose of such personal information without delay. However, the foregoing shall not apply in cases where personal information must be preserved in accordance with the provisions of other laws and regulations, such as the cases listed in the following items. In such cases, the Company will store and manage such personal information separately from other personal information for the period stipulated by such laws and regulations.
Procedures and Methods for Destroying Personal Information
In accordance with laws, regulations, and internal rules, including when we receive a request to delete personal information, we delete personal information by physically deleting or masking information that could identify a specific individual.
Transfer of Personal Information to Third Parties
Provision of personal information to third parties
Accommodations listed on Jalan.net for which users have made reservations (*)
* We are unable to list all hotels as the list is updated from time to time.
[Purpose of Use of Personal Information by Recipient(s)]
[Items of Personal Information Provided to Recipient(s)]
In case of accommodation reservations (including management of reservations, etc.)
In case of forwarding inquiries from users to accommodations upon users’ request
[Period(s) of Retention/Use by Recipient(s)]
Until the purpose of transfer is achieved (however, if there is a retention period set by each accommodation facility, the retention period shall be in accordance with such period)
Accommodations listed on Jalan.net (*)
* We are unable to list all hotels as the list is updated from time to time.
[Purpose of Use of Personal Information by Recipient(s)]
To improve their accommodation services and user accommodation experience
[Items of Personal Information Provided to Recipient(s)]
Statistical data, such as number of customers in a designated area (*)
* any information which can identify a specific user, including name, e-mail address, activity logs etc., will not be provided.
[Period(s) of Retention/Use by Recipient(s)]
Until the purpose of transfer is achieved (however, if there is a retention period set by each accommodation facility, the retention period shall be in accordance with such period)
Business Partner companies for use of Jalan.net
[Purpose of Use of Personal Information by Recipient(s)]
・To verify and settle commissions from the introduction and referral of Jalan.net
[Items of Personal Information Provided to Recipient(s)]
・Information relating to reservations made by users (e.g., reservation number, booking date, check-in date, check-out date, referrer, kayak click ID,
payment amount, cancellation type etc.) (*)
*Any information which can identify a specific user, including name, e-mail address, etc., will not be provided.
[Period(s) of Retention/Use by Recipient(s)]
Until the purpose of transfer is achieved (however, if the business partner specifies a retention period, that period will apply)
Outsourcing of the processing of personal information to third parties
Salesforce Japan Co., Ltd.
[Outsourced Operations]
To store and manage inquiries from customers
SB Payment Service Corp.
[Outsourced Operations]
To handle online payment for reservations made by customers with accommodation facilities
Accertify, Inc.
[Outsourced Operations]
To detect fraudulent use of credit cards
Nexway Co., Ltd.
[Outsourced Operations]
To contact the accommodation facility selected by the customer to make a reservation
Cross-border outsourcing of the processing/storage of personal information to third parties
Salesforce Japan Co., Ltd.
[Contact]
1-1-3, Marunouchi, Chiyoda-ku, Tokyo, Japan, 100-0005
[Items of Personal Information to be Transferred to Recipient(s)]
[Countries where the Personal Information is to be Transferred and the Date, Time, Methods of Transfer]
Country: Japan and the United States
Date/Time/Method of Transfer: Upon receiving inquiries from customers, transferred via secure network
[Purpose of Use of the Personal Information by Recipient(s)]
To store and manage inquiries from customers
[Period(s) of Retention/Use by Recipient(s)]
Five (5) years from completing reservation
[Legal Basis for the Cross-Border Transfer]
PIPA, Article 28-8(1)(iii)
SB Payment Service Corp.
[Contact]
Tokyo Portcity Takeshiba Office Tower, 1-7-1, Kaigan, Minato-ku, Tokyo, Japan, 105-0022
[Items of Personal Information to be Transferred to Recipient(s)]
[Countries where the Personal Information is to be Transferred and the Date, Time, Methods of Transfer]
Country: Japan
Date/Time/Method of Transfer: Upon entering credit card information, transferred via secure network
[Purpose of Use of the Personal Information by Recipient(s)]
To handle online payment for reservations made by customers with accommodation facilities
[Period(s) of Retention/Use by Recipient(s)]
Until the completion of the outsourced tasks and the expiration of the outsourced contract
[Legal Basis for the Cross-Border Transfer]
PIPA, Article 28-8(1)(iii)
Accertify, Inc.
[Contact]
2 Pierce Place, Suite 900, Itasca, Illinois, 60143 USA
[Items of Personal Information to be Transferred to Recipient(s)]
[Countries where the Personal Information is to be Transferred and the Date, Time, Methods of Transfer]
Country: the United States
Date/Time/Method of Transfer: Upon entering credit card information, transferred via secure network
[Purpose of Use of the Personal Information by Recipient(s)]
To detect fraudulent use of credit cards
[Period(s) of Retention/Use by Recipient(s)]
Two (2) years from transmission
[Legal Basis for the Cross-Border Transfer]
PIPA, Article 28-8(1)(iii)
Nexway Co., Ltd.
[Contact]
Toyosu Bay Side Cross Tower, 2-2-1, Toyosu, Koutou-ku, Tokyo, Japan, 135-0061
[Items of Personal Information to be Transferred to Recipient(s)]
[Countries where the Personal Information is to be Transferred and the date, time, methods of Transfer]
Country: Japan and Singapore
Date/Time/Method of Transfer: Upon completing reservation or request from accommodation
[Purpose of Use of the Personal Information by Recipient(s)]
To contact the accommodation facility selected by the customer to make a reservation
[Period(s) of Retention/Use by Recipient(s)]
Sixty-five (65) days from facsimile to reserved accommodation
[Legal Basis for the Cross-Border Transfer]
PIPA, Article 28-8(1)(iii)
You have the right to decline granting your consent. However, please be aware that exercising this right may impose restriction on completing reservations.
In the case of cross-border access by or disclosure to third parties (“Recipients”) for their benefit (Provision)
Accommodations listed on Jalan.net for which users have made reservations (*)
* We are unable to list all hotels as the list is updated from time to time.
[Country and Date/Time/Method of transfer]
Country: Japan
Date/Time/Method of Transfer: Upon completion of the online reservation or request by user to forward inquiries, the information will be transferred via secure network (including facsimile or telephone)
[Personal Information to be Transferred]
In case of completing reservation:
In case of forwarding user inquiries, the following information may be transferred in addition to the above:
[Purpose of use by Recipient]
[Retention period of collected personal information]
Until the purpose of transfer is achieved (however, if there is a retention period set by each accommodation facility, the retention period shall be in accordance with such period)
[Legal basis for the cross-border transfer]
PIPA, Article 28-8(1)(i)
Accommodations listed on Jalan.net (*)
* We are unable to list all hotels as the list is updated from time to time.
[Country and Date/Time/Method of Transfer]
Country: Japan
Date/Time/Method of Transfer: Upon request of the accommodations or providing advices regarding use of Jalan.net to the accommodations, the information will be transferred via secure network (including facsimile or telephone) or by hand
[Personal Information to be Transferred]
Statistical data, such as number of customers in a designated area (*)
* any information which can identify a specific user, including name, e-mail address, activity logs etc., will not be provided.
[Purpose of Use by Recipient]
To improve their accommodation services and user accommodation experience
[Retention Period of Collected Personal Information]
Until the purpose of transfer is achieved (however, if there is a retention period set by each accommodation facility, the retention period shall be in accordance with such period)
[Legal Basis for the Cross-Border Transfer]
PIPA, Article 28-8(1)(i)
Business partner companies for use of Jalan.net
[Third-party recipient]
Company Name: KAYAK Software Corporation
[Country and Date/Time/Method of Transfer]
Country: USA
Date/Time/Method of Transfer: Upon a user's checkout from or cancellation of their accommodation, the information will be transferred via
secure network (including facsimile or telephone)
[Personal Information to be Transferred]
Information relating to reservations made by users (e.g., reservation number, booking date, check-in date, check-out date, referrer, kayak click ID,
payment amount, cancellation type etc.)(*)
*Any information which can identify a specific user, including name, e-mail address, etc., will not be provided.
[Purpose of Use by Recipient]
To verify and settle commissions from the introduction and referral of Jalan.net
[Retention Period of Collected Personal Information]
Until the purpose of transfer is achieved (however, if the business partner specifies a retention period, that period will apply)
[Legal Basis for the Cross-Border Transfer]
PIPA, Article 28-8(1)(i)
You have the right to decline granting your consent. However, please be aware that exercising this right may impose restriction on completing reservations.
Measures to Ensure Security of Personal Information
The Company implements the following technical, managerial, and physical measures necessary to ensure the security of the personal information.
Contact Information / Domestic Representative
Chief Privacy Officer
Rights of Data Subjects
You (and your legal representative) have statutory rights under the Korean Personal Information Protection Act, in particular the right to access, rectification, erasure, suspension of processing, withdrawal of consent, and request explanations regarding automated decision-making or not be subject thereto.
You (or your legal representative) can exercise such rights by contacting our Domestic representative or CPO using the contact details set out in the above.