Privacy Policy of CAFÉ DE L'AMBRE

Effective Date: August 6, 2026

1. Introduction and company information

This Privacy Policy explains how CAFÉ DE L'AMBRE (“we,” “us,” or “our”) collects, uses, discloses, stores, and protects personal information in connection with our coffeehouse business and our website at nymflyr.pro.

Operator / Data Controller: CAFÉ DE L'AMBRE

Address: 8-10-15 Ginza, Chuo-ku, Tokyo 104-0061, Japan

Email: [email protected]

Phone: +81 3-3571-1551

Business Type: Coffeehouse

Company Registration / CIN: N/A

This Privacy Policy is intended to comply with applicable Japanese privacy laws, including the Act on the Protection of Personal Information (APPI), and related guidelines issued by Japanese authorities.

2. Data collection and processing

We may collect and process the following categories of personal information, depending on your interaction with CAFÉ DE L'AMBRE:

• Identification and contact information: name, email address, telephone number, postal address, and other contact details you provide.
• Reservation and visit-related information: reservation requests, visit dates and times, seating preferences, special requests, and related correspondence.
• Transaction information: purchase records, payment-related details, receipts, billing information, and order history.
• Customer service information: inquiries, feedback, complaints, and communications with our staff.
• Website and device information: IP address, browser type, device identifiers, log data, cookies, and usage information collected through our website.
• Marketing preferences: preferences regarding promotional communications and opt-in/opt-out settings.
• Special requests or dietary information: only if you voluntarily provide such information in the context of reservations or service requests.

We generally collect personal information directly from you. In some cases, we may also receive information from third parties such as payment service providers, reservation platforms, delivery partners, or analytics providers, to the extent permitted by law.

3. Purpose of data processing

CAFÉ DE L'AMBRE processes personal information for the following purposes:

• to provide coffeehouse services and manage customer visits, reservations, and orders;
• to process payments and issue receipts or invoices;
• to respond to inquiries, comments, and complaints;
• to improve our products, services, website, and customer experience;
• to send service-related notices and, where permitted, marketing communications;
• to manage security, prevent fraud, and protect our business, customers, and staff;
• to comply with applicable legal and regulatory obligations;
• to maintain records and support accounting, auditing, and internal management.

4. Legal basis for processing

Under Japanese privacy law, we process personal information only where appropriate and for specified purposes. Depending on the context, our processing is based on one or more of the following grounds:

• Performance of a service relationship: to provide goods or services requested by you, including reservations and in-store service.
• Consent: where you have given clear consent, such as for certain marketing communications or optional data collection.
• Compliance with legal obligations: where processing is necessary to comply with laws, tax, accounting, or regulatory requirements.
• Legitimate business interests: where processing is necessary for our legitimate business operations, such as improving services, ensuring security, and managing operations, provided that such interests are not overridden by your rights and interests.
• Protection of life, body, or property: in limited cases permitted by law where processing is necessary to protect important interests.

5. Data sharing and third parties

We do not sell your personal information. We may share personal information with third parties only when necessary and permitted under applicable law, including:

• Service providers: IT hosting, website maintenance, analytics, communications, payment processing, booking systems, and other operational vendors.
• Professional advisors: lawyers, accountants, auditors, consultants, and similar advisors under confidentiality obligations.
• Business and operational partners: reservation platforms, delivery services, and related partners assisting us in providing services.
• Authorities and legal recipients: courts, regulators, police, or other public authorities when required by law or to protect our rights.

Where we provide personal data to a third party in a manner requiring notice or consent under the APPI, we will do so in compliance with applicable requirements.

6. Data transfer to third countries

Some of our service providers may process personal information outside Japan, including in third countries. In such cases, CAFÉ DE L'AMBRE will take appropriate measures to ensure that the transfer is permitted under Japanese law and that suitable safeguards are applied, which may include contractual protections, security controls, and review of the recipient’s data handling practices.

Where required, we will provide necessary information about the recipient country, the recipient’s data protection system, and the safeguards adopted, in accordance with APPI requirements.

7. Storage duration

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods may depend on the category of data and the applicable legal requirements.

• Transaction and accounting records: retained for the period required by tax, accounting, and commercial laws.
• Customer service records: retained for a reasonable period to resolve inquiries and improve service.
• Marketing data: retained until you unsubscribe, withdraw consent, or we determine it is no longer needed.
• Website logs and security records: retained for a limited period necessary for operational security and troubleshooting.

When personal information is no longer needed, we will delete, anonymize, or otherwise dispose of it securely in accordance with our internal retention and destruction procedures.

8. User rights

Subject to applicable law, you may have the following rights regarding your personal information:

• Access: to request confirmation of whether we hold your personal information and obtain a copy of it.
• Rectification: to request correction or updating of inaccurate or incomplete information.
• Erasure: to request deletion of your personal information where lawful grounds exist.
• Restriction: to request restriction of processing in certain circumstances.
• Data portability: to request the transfer of certain information in a commonly used format where applicable.
• Objection: to object to certain processing based on our legitimate interests or other lawful grounds where applicable.

To exercise these rights, please contact us using the details in Section 12. We may need to verify your identity before responding. We will respond in accordance with applicable legal requirements and within a reasonable timeframe.

9. Withdrawal of consent

Where we rely on your consent to process personal information, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing conducted before the withdrawal.

If you withdraw consent, we may be unable to provide certain optional services or communications, such as marketing emails or other consent-based features.

10. Right to complain

If you believe that our handling of personal information violates applicable law, you may contact us first so we can address your concern. You also have the right to lodge a complaint with the relevant Japanese supervisory or consumer protection authorities where applicable.

We encourage you to contact CAFÉ DE L'AMBRE directly so that we may investigate and resolve any issue promptly and fairly.

11. Data security

CAFÉ DE L'AMBRE implements reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, loss, destruction, alteration, and disclosure. These measures may include:

• restricted access to personal information on a need-to-know basis;
• staff training and confidentiality obligations;
• secure storage and transmission methods where appropriate;
• system monitoring and access controls;
• periodic review of security practices and vendor controls.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Contact information

If you have questions, requests, or concerns regarding this Privacy Policy or our handling of personal information, please contact:

CAFÉ DE L'AMBRE
8-10-15 Ginza, Chuo-ku, Tokyo 104-0061, Japan
Email: [email protected]
Phone: +81 3-3571-1551

13. Changes to privacy policy

CAFÉ DE L'AMBRE may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or operational needs. Any revised version will be posted on our website at nymflyr.pro with an updated effective date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.