Skip to content
Shonomori 書の杜
JA（日本語）

Privacy

Last updated: ［公開日］

Shonomori (the "Site") is operated by Toyogakuso Co., Ltd. ("we", "us"). This policy explains what information we collect through the Site, why we collect it, how long we keep it, and the choices you have.

1. Who we are

Toyogakuso Co., Ltd.
3 Hachikenya, Kamo-cho, Fukuyama-shi, Hiroshima 720-2410, Japan
President and Representative Director: Hideki Kobayashi
Contact for privacy questions, requests and complaints: hideki@toyogaku.co.jp

2. Information we collect

When you contact us. If you send an enquiry through our contact form, we collect your name, email address, the type of enquiry, the artwork you are asking about (if any), and your message.

When you visit the Site. To keep the contact form safe from forged submissions, the Site uses a session cookie and a security token cookie. Linked to that session, our server keeps your IP address and browser type for a short time; once the session has expired, this record is deleted the same day (normally within about a day of your last visit). Our server also keeps access logs, including IP addresses and the pages requested, for 90 days for security and to resolve technical problems.

Your consent choice. When you accept or decline analytics, your choice is stored in your browser (local storage). It is not sent to us.

Analytics (only with your consent). If — and only if — you agree, we use Google Analytics 4 to understand how visitors use the Site, such as which pages are viewed and how visitors arrive. Google Analytics is not loaded at all unless you agree. If you agree, Google Analytics sets cookies (such as _ga, which can last up to two years unless you withdraw consent). We have set the retention period for user-level and event-level data to the shortest option available (two months), and we do not use Google Analytics for advertising.

3. How we use your information

  • To reply to your enquiry and arrange viewings or other follow-up you have asked for
  • To understand and improve how the Site is used (analytics, with your consent only)
  • To keep the Site secure

We do not sell your information, and we do not use it for any purpose other than those stated here.

4. How long we keep it

Enquiries sent through the contact form are automatically deleted from the Site's database one year after we receive them. A copy of each enquiry is also delivered to our email, and our email correspondence may be kept as part of our business records; this is not covered by the one-year deletion. Session records are deleted daily once the session has expired, and server access logs are kept for 90 days.

5. Sharing your information

We do not provide your personal information to third parties except:

  • with your consent;
  • to service providers who host and operate the Site and its email on our behalf, under appropriate confidentiality;
  • where required by law.

Google Analytics. If you consent to analytics, information about your visit is sent to Google LLC in the United States. Google LLC participates in the EU-U.S. Data Privacy Framework. For information on the data protection system of the United States, see the website of Japan's Personal Information Protection Commission. Google's own measures are described in Google's Privacy Policy.

The recipients of information are therefore: our hosting and email providers, and — only with your consent — Google.

6. Videos and external links

Videos on artist pages are not loaded until you press play. When you do, the video is served by YouTube (using its privacy-enhanced mode) or Vimeo (with "Do Not Track" enabled), and their privacy policies apply. Links to Instagram and other external websites take you to sites that we do not control.

7. Your choices and rights

Analytics. You can decline analytics, and you can change your choice at any time from "Cookie settings" at the bottom of every page. Withdrawing consent does not affect the lawfulness of processing before you withdrew it. You can also block cookies in your browser settings.

Requests about your personal information. You may ask us to disclose the personal information we hold about you (including records of any provision to third parties), to correct or add to it, to delete it, to stop using it, or to stop providing it to third parties.

  • How to ask: email us at the address in Section 1, stating what you are requesting.
  • Identity: we will confirm your identity by asking you to reply from the email address you used when contacting us, or by other reasonable means. A representative may make a request on your behalf with proof of authority.
  • How we respond: we will reply by email, including electronic copies where you ask for disclosure.
  • Fees: we do not charge a fee.

If you are in the European Economic Area or the United Kingdom. Where the GDPR or UK GDPR applies, we process your enquiry on the basis of steps you ask us to take and our legitimate interest in replying to you, we keep the Site secure on the basis of our legitimate interest, and we use analytics only on the basis of your consent. You also have the rights to restrict processing, to data portability, to object to processing, and to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office). We do not make decisions about you based solely on automated processing.

8. How we protect your information

  • Policy: we handle personal information in accordance with this policy and applicable Japanese law.
  • Organisational: access to enquiries is limited to staff who need it to reply.
  • People: staff who handle personal information are made aware of their responsibilities.
  • Physical: devices used to handle enquiries are managed to prevent loss and theft.
  • Technical: the Site's administration area requires a login, the Site is served over an encrypted connection (HTTPS), and enquiries are deleted automatically after one year.
  • Location: the Site and its data are hosted on servers in Japan. Analytics data (only with your consent) is processed by Google in the United States, as described in Section 5.

9. Children

The Site is not directed at children, and we do not knowingly collect information from children.

10. Changes to this policy

We may update this policy. When we do, we will post the new version on this page with a new "Last updated" date.

11. Language

This policy is provided in English and Japanese. If there is any inconsistency, the Japanese version prevails.