Privacy Policy

This is an English translation of our Japanese Privacy Policy. If there is any discrepancy between the two versions, the Japanese version prevails.

HANA HOSPITALITY Co., Ltd. (the “Company”) complies with the Act on the Protection of Personal Information and other applicable laws, regulations and guidelines, and handles personal information and other information obtained through the restaurant “Moon Forest (ムーンフォレスト／月林閣)” operated by the Company and the official Moon Forest website (the “Site”) appropriately, as set out below.

1. Scope

This Privacy Policy applies to personal information and other information obtained by the Company through the inquiry forms on the Site, as well as by telephone, email, social media, in person at the restaurant, through TableCheck and other reservation services, external ordering services, job applications and similar channels.

Information independently obtained and handled by TableCheck, Uber Eats, Instagram, Google Maps and other external services is governed by the terms of use and privacy policies of the respective service providers.

2. Business Operator

Company name
HANA HOSPITALITY Co., Ltd.

Representative
Representative Director, CEO & Founder
Glass Wu

Address
7F, 4-1-29 Akasaka, Minato-ku, Tokyo

Restaurant operated
Moon Forest (ムーンフォレスト／月林閣)
THE GALA TOWER AZABU 6F
3-5-9 Higashi-Azabu, Minato-ku, Tokyo

3. Information We Collect

The Company may collect the following information.

(1) Information relating to inquiries

Name
Email address
Telephone number
Company name, affiliation, etc.
Details of inquiries, consultations or requests
Other information voluntarily entered or provided by the individual

(2) Information relating to reservations and visits

Name
Telephone number
Email address
Reservation date and time
Number of guests
Requested seating, course or plan
Visit history
Information on reservation changes, cancellations and no-shows
Information on payment status, cancellation fees, etc.
Requests relating to anniversaries, messages, surprises, etc.
Food allergies, dietary restrictions and other information necessary for serving food
Other information provided by the individual when making a reservation or visiting

(3) Information relating to private hire, business dining and events

Name
Company name, affiliation, position
Telephone number, email address
Preferred date and time
Number of guests
Purpose of use
Budget
Requested food, beverages, seating and facilities
Other information necessary for private hire or holding an event

(4) Information relating to orders and payments

Order details
Amount spent
Payment method
Payment status
Information relating to cancellations, refunds, etc.

Credit card numbers and other payment information may be handled by TableCheck and other payment service providers in accordance with their own terms and privacy policies.

(5) Information relating to job applications

Name
Address
Telephone number
Email address
Date of birth
Résumé and career history
Education, work history and qualifications
Information relating to interviews and selection
Other information provided by applicants

(6) Information collected automatically through use of the Site

IP address
Cookie ID
Advertising identifiers
Information about the device used
Operating system, browser and language settings
Pages viewed
Date and time of viewing and time spent
Referring websites
Activity on the Site
Information on ad impressions, clicks and conversions
Approximate location
Other information contained in access logs

(7) Information obtained through external services

The Company may receive information from TableCheck, Uber Eats, Google, Meta and other external service providers to the extent necessary for reservations, orders, inquiries, measuring advertising effectiveness or providing services.

4. Purposes of Use

The Company uses the personal information it obtains for the following purposes.

To respond to inquiries, consultations and requests, and to contact individuals as necessary
To accept, confirm, change and cancel reservations and to manage visits
To provide seating, food, beverages, courses and other services
To serve food and provide services safely, taking into account allergies, dietary restrictions and other circumstances
To accommodate requests such as birthdays, anniversaries and message plates
To propose, quote, prepare and hold private hire, business dining, corporate events, private parties and similar
To process orders, payments, cancellation fees, refunds, etc.
To prevent no-shows, fraudulent use and other inappropriate use
To manage customer service and visit histories and provide ongoing services
To improve products, food, services, hospitality and restaurant operations
To analyse use of the Site and improve its display, structure and usability
To measure advertising effectiveness, optimise ad delivery and analyse marketing activities
To send information about events, new menus, campaigns, etc. where the individual has given consent
To conduct questionnaires, satisfaction surveys, etc.
To contact job applicants and manage selection and recruitment
To protect the rights, property and services of the Company
To respond to requests from laws and regulations, government agencies, courts and other public bodies
To deal with disputes, complaints, accidents and other issues
To create statistical information that does not identify individuals and use it for business analysis and service improvement
To carry out work incidental to the above purposes

The Company will not use personal information beyond the above purposes without the individual’s consent, except where permitted by law.

5. Health Information Such as Allergies

Information about food allergies, illness, physical condition and other health matters may, depending on its content, require particularly careful handling.

The Company collects and uses such information only to the extent necessary to serve food and provide services safely, after stating the purpose of use and obtaining the individual’s consent at the time of reservation or visit.

This information may be shared with kitchen staff, service staff and other relevant personnel as necessary, but will not be used for any purpose other than serving food and providing services safely.

6. Use of Cookies and Similar Technologies

The Site may use cookies, pixel tags and similar technologies to display the Site correctly, improve usability, analyse access, measure advertising effectiveness and prevent unauthorised access.

A cookie is information stored in the user’s browser or device when they view a website. Information obtained through cookies alone does not normally identify a user by name. However, where it can identify an individual when combined with other information held by the Company, it is handled appropriately as personal information.

The Site may use the following external services.

Services provided by Google

Google Tag Manager
Google Analytics 4
Google Ads
Google Maps

Through these services, information such as cookie IDs, IP addresses, device information, browser information, pages viewed, date and time of viewing, referrers, and ad impressions, clicks and conversions may be sent to Google.

This information is used to analyse use of the Site, improve the Site, measure advertising effectiveness and optimise ad delivery.

Services provided by Meta

Meta Pixel
Facebook
Instagram and embedded Instagram content

Through these services, information such as cookie IDs, device information, pages viewed, referrers, ad impressions and clicks, and reservation and other conversion information may be sent to Meta.

This information is used to measure advertising effectiveness, optimise ad delivery and display social media content.

Other external services

TableCheck
Uber Eats
Other services necessary for reservations, orders, payments, site operation or customer service

For how each external service provider handles information, please refer to its privacy policy.

Users can restrict or refuse the use of cookies through their browser settings or the cookie settings screen. However, if cookies are disabled, some functions of the Site may not work correctly.

7. External Reservation and Ordering Services

When users move from the Site to TableCheck, Uber Eats or another external service to make a reservation or order, the information entered is collected and managed by the respective external service provider.

The Company may receive the following information from these providers to the extent necessary for reservations, visits, orders, payments, handling cancellations and providing services.

Name
Telephone number
Email address
Reservation date and time
Number of guests
Course or plan reserved
Order details
Cancellation and visit history
Payment status
Allergies, dietary restrictions and other requests

Processing carried out by external service providers for their own purposes is governed by their respective privacy policies.

8. Provision to Third Parties

The Company will not provide personal data to third parties without the individual’s consent, except in the following cases.

Where required by law
Where necessary to protect a person’s life, body or property and it is difficult to obtain the individual’s consent
Where especially necessary to improve public health or promote the healthy development of children and it is difficult to obtain the individual’s consent
Where necessary to cooperate with a national or local government body in carrying out duties prescribed by law
Where the individual has given prior consent
Where handling of personal information is entrusted to an external business to the extent necessary to achieve the purposes of use
Where personal information is provided in connection with a merger, company split, business transfer or other succession of business
Other cases permitted under the Act on the Protection of Personal Information or other laws

9. Entrustment

The Company may entrust the following work to external businesses and provide personal information to the extent necessary for that work.

Website operation, maintenance and hosting
Management of inquiry forms and email
Reservation and customer management
Order and payment processing
Ad delivery and measurement of advertising effectiveness
Access analysis
System operation and security management
Recruitment management
Other work necessary to operate the restaurant and its services

The Company selects contractors appropriately, concludes the necessary agreements and exercises necessary and appropriate supervision so that personal information is properly managed by contractors.

10. Handling of Information Outside Japan

Google, Meta and other external service providers may store or process the information they obtain on servers located outside Japan.

Where personal information is handled in a foreign country, the Company takes appropriate measures, including providing the necessary information and contractual measures, in accordance with the Act on the Protection of Personal Information and other applicable laws.

11. Retention and Deletion

The Company retains personal information only for as long as necessary to achieve the purposes of use, handle reservations and visits, provide customer service, carry out accounting, meet legal obligations and deal with disputes.

When personal information is no longer needed, the Company deletes or disposes of it, or processes it into a form that does not identify individuals, within a reasonable period, except where retention is required by law.

12. Security Measures

To prevent leakage, loss, damage, unauthorised access, misuse, etc. of personal information, the Company takes necessary and appropriate security measures according to the content of the information handled and the associated risks, including the following.

(1) Basic policy and internal rules

The Company establishes a basic policy on the appropriate handling of personal information and sets out handling procedures for each stage: collection, use, storage, provision, deletion and disposal.

(2) Organisational measures

The Company clearly designates the persons responsible for and handling personal information, and establishes systems for checking how it is handled and for reporting and responding to incidents.

(3) Personnel measures

The Company trains and supervises employees as necessary in the handling of personal information and requires them to keep confidential the personal information they learn in the course of their work.

(4) Physical measures

The Company takes measures to prevent theft or loss of, and unauthorised viewing by third parties of, documents, devices, electronic media, etc. containing personal information.

(5) Technical measures

The Company takes measures to prevent unauthorised access, malware, etc., including restricting access rights, user authentication, password management, protecting communications, security measures and software updates.

(6) Supervision of contractors

When the Company entrusts work involving personal information to external businesses, it confirms the contractor’s security management system and supervises the contractor appropriately by contract or other means.

13. Requests for Disclosure, Correction, Deletion, etc.

Individuals may make the following requests under the law regarding their personal information held by the Company.

Notification of the purposes of use
Disclosure of personal information or records of provision to third parties
Correction, addition or deletion of content
Suspension of use or erasure
Suspension of provision to third parties

To make a request, please contact the inquiry desk at the end of this Policy.

After confirming that the requester is the individual or a legitimate agent, the Company responds within a reasonable period in accordance with the law.

The Company may ask for identification documents or other necessary materials to verify identity. If a fee is required, the Company will inform you of the amount and payment method before accepting the request.

The Company may be unable to respond to a request where the law permits it not to make disclosure, etc. In that case, the Company will explain the reason to the extent possible.

14. Personal Information of Minors

Minors who provide personal information through the Site should do so with the consent of a parent or legal guardian where necessary.

When the Company collects personal information from minors, it handles it appropriately according to their age, the content of the information and the purposes of use.

15. Links to External Websites

The Site may contain links to websites or services operated by third parties.

For how personal information is handled on linked websites or services, please refer to the privacy policy of the relevant third party.

16. Changes to this Policy

The Company may change this Privacy Policy as necessary, for example due to changes in laws, its business or the services it uses.

When making significant changes, the Company will give notice by posting on the Site or by other appropriate means.

The revised Privacy Policy takes effect from the date it is posted on the Site or another date specified separately.

17. Inquiry Desk

For inquiries about the handling of personal information, requests for disclosure, etc., opinions or complaints, please contact:

HANA HOSPITALITY Co., Ltd.
Moon Forest Personal Information Inquiry Desk

Address: 7F, 4-1-29 Akasaka, Minato-ku, Tokyo
Restaurant: THE GALA TOWER AZABU 6F, 3-5-9 Higashi-Azabu, Minato-ku, Tokyo
Email: reservation@moon-forest.jp
Telephone: 03-6277-6394

Established: October 17, 2026
Last revised: October 17, 2026