Privacy, Data, and Cookie Policy

Amistades is a public-facing brand operated by KUMBA Co., Ltd. This policy applies to amistades.jp, its Japanese-language routes, ticketing and event pages, inquiry forms, newsletter and waitlist signups, account access, and support communications controlled by us.

If you follow links to third-party services such as STORES, Instagram, or an external checkout experience, the data handling rules of those services apply once you leave our controlled environment.

• Information you give us directly, such as your name, email address, phone number, country, inquiry details, reservation notes, and support messages.
• Operational records created when you subscribe, join a waitlist, place an order, receive or transfer tickets, authenticate an account, or contact support, including order references, ticket IDs, sender and recipient emails, transfer history, and communication logs.
• Technical and device information used to run, secure, and improve the site, such as consent preferences, IP address, browser details, device data, referrer data, and page activity.
• Transaction metadata needed to process payments and fulfill ticketing. Full card details are generally handled by the payment provider rather than stored directly on this site.
• Organizer payout information such as bank, branch, account type and number, account holder, preferred payout cycle, and identity or authority verification. Account numbers are encrypted and normal workspace views show only masked details.

• To operate ticketing, ticket transfers, entry management, venue programs, booking support, account access, and customer service.
• To send updates you asked for, including newsletters, waitlist notices, support replies, and service messages. A checkout continuation reminder is sent once only when you explicitly request it at checkout and does not enroll you in marketing. You can unsubscribe from marketing emails at any time.
• To detect fraud, reconcile payments, manage access, investigate incidents, maintain records, and comply with law.
• To understand site usage and improve content and journeys within the scope of your cookie choices.

Necessary cookies may run by default so the site can function, while analytics cookies and any future marketing tags stay subject to your explicit consent choices. You can change those preferences at any time through Cookie Settings in the footer.

On the current implementation, Google Analytics 4, provided by Google LLC, loads only after consent to measure page views and event journeys. Direct personal details such as names, email addresses, and phone numbers are not sent as analytics events. If advertising or remarketing tools are added later, they will remain bound to the same consent controls.

• Service providers that help us run payment processing, authentication, email delivery, hosting, storage, and analytics.
• Venues, organizers, performers, production partners, and support personnel when a disclosure is needed to run an event or answer your request.
• Authorities, professional advisers, or counterparties where disclosure is required by law, court order, fraud prevention, rights protection, or security response.
• A successor or transaction counterparty in the event of a business transfer, restructuring, or asset sale, subject to appropriate confidentiality controls.

We or our service providers may process data outside Japan. When that happens, we seek to use contractual, operational, and technical measures designed to maintain an appropriate level of protection.

We keep personal data and transaction records for as long as reasonably necessary to provide services, maintain accounting and audit records, prevent fraud, resolve disputes, and meet legal obligations. After that, we may delete, de-identify, or otherwise stop active use of the data.

We use measures such as access controls, vendor oversight, authentication, operational logging, and least-privilege practices to help protect personal data against leakage, loss, misuse, and unauthorized access.

No internet transmission or third-party platform can be guaranteed completely secure. If a material security incident occurs, we may report it, notify affected individuals, or take alternative protective steps as required by applicable law.

• You may request access to retained personal data, ask us to correct inaccurate information, request deletion or suspension where applicable, and ask us to stop certain third-party disclosures.
• You can opt out of optional marketing communications at any time using the unsubscribe link or by contacting us directly.
• You can revisit cookie choices at any time through the Cookie Settings control in the site footer.
• We may need to verify your identity and preserve some records where retention is required for security, accounting, fraud prevention, or legal obligations.

The site is publicly accessible, but minors should use ticketing and personal-data submission features with the involvement of a parent or guardian. If you are under 16, please use the service only with parental or guardian consent.