Skip to content
JDM Mafia
Book

Privacy Policy

This policy covers jdm-mafia.com. It explains what we collect, why, how long we keep it, and what you can ask us to do with it. It is written to be read, not to be survived.

Who is responsible

JDM Mafia operates this site and decides what happens to the data described here. You can reach us at hello@jdmmafia.tokyo for anything on this page, including deletion requests.

What we collect

When you send an enquiry

The form asks for what we need to answer you and quote a run:

  • Your name and email address — required, so we can reply
  • Which service you want and, for self-drive, the country that issued your licence — this determines whether you can legally drive here at all
  • Optional details you choose to give: preferred date, party size, car, run, add-ons, hotel area, and your message

We do not ask for your licence number, passport, date of birth, or payment details through this form.

Automatically, when you submit

Sending the form also records technical information about the request:

  • Your IP address, and the network operator it belongs to
  • Approximate location derived from that IP — country, region, city, and timezone. This is city-level at best and is not your exact position
  • Your browser, operating system, and device type
  • The languages your browser is set to
  • The page you submitted from, and how long the form was open

We collect this for two reasons, both practical. It lets us spot automated and fraudulent submissions — we receive them, and separating them from real enquiries protects the people waiting for a genuine reply. And it lets us answer you properly: knowing your timezone stops us calling at 4am, and knowing your browser language tells us which language to reply in.

Cookies

This site sets one cookie, NEXT_LOCALE, and only when you choose a language. It remembers that choice so you are not sent back to the wrong language on your next visit.

We do not use advertising cookies, tracking pixels, or third-party analytics. There is no cookie banner because there is nothing to consent to beyond a cookie that is strictly necessary for the function you asked for.

Where it goes

  • Your enquiry is stored in a database run by Supabase. Access is closed by default and only our server can write to it.
  • A notification email is sent to us through Resend so we see the enquiry. It contains the enquiry and the technical information above.
  • The site is hosted by Vercel, which keeps short-lived server logs as part of running the service.

We do not sell your data, and we do not share it with advertisers or data brokers. We share it with the providers above only because they are the machinery that makes the site work.

These providers operate outside Japan and outside the EEA. Where data leaves the EEA, it is transferred under the standard contractual clauses those providers publish.

What we deliberately do not keep

We do not store your raw IP address in our database. Rate limiting needs to recognise repeat submissions, not identify you, so what we store is a salted SHA-256 hash of the IP. The salt never leaves our server, and the hash cannot be read back into an address without it.

Your full IP does appear in the notification email we receive. That email lives in our mailbox, not in our database.

How long we keep it

  • Enquiries that lead to a booking: kept while we are dealing with you, and afterwards for as long as we may need them for tax and accounting records.
  • Enquiries that go nowhere: deleted within 24 months.
  • Spam and automated submissions: deleted when identified.
  • The hashed IP used for rate limiting: it is only meaningful for 10 minutes, and goes when the enquiry it belongs to goes.

Your rights

You can ask us to show you what we hold, correct it, delete it, or stop using it. Email hello@jdmmafia.tokyo and we will act within 30 days. We do not require a specific form of words.

If you are in the EU or UK, the GDPR applies to you and gives you those rights directly, plus the right to complain to your national data protection authority. Our lawful basis is:

  • Your consent, for the enquiry you chose to send us
  • Our legitimate interest, for the technical information used to block fraud and abuse

If you are in Japan, the Act on the Protection of Personal Information applies and gives you equivalent rights of disclosure, correction, and deletion.

Children

This service is not intended for children under 16, and we do not knowingly collect their data.

Changes

If we change this policy we will update the date below. If a change materially affects people who have already contacted us, we will say so directly rather than quietly editing the page.

Last updated: 3 August 2026