UMAMI Privacy Policy

This Privacy Policy explains how MUSUBI Co., Ltd. (“MUSUBI”, “we”, “our”, or “us”), operating the UMAMI Platform, collects, uses, and protects personal data of users.

The UMAMI Platform includes websites, mobile applications, and associated digital interfaces that enable Customers to reserve and collect surplus food from participating Merchants.

This Privacy Policy applies to all users of the UMAMI Platform, including the website, mobile applications, and other digital services operated by MUSUBI.

“UMAMI” is a commercial brand name and digital platform operated by MUSUBI Co., Ltd. and does not constitute a separate legal entity. All personal data is collected and processed solely by MUSUBI.

Information we collect

Account information

Information provided when creating or managing an account, including:

• Full name
• Email address
• Phone number
• Account login credentials

Transaction information

When Customers reserve or purchase a Surprise Bag, MUSUBI may collect:

• Order details
• Reservation history
• Payment confirmation information
• Pickup records

Device and usage data

When Customers access the UMAMI Platform, certain technical information may automatically be collected, including:

• IP address
• Device type and operating system
• Browser type
• Application usage patterns
• Session activity

This information helps improve platform security and performance.

Communication and feedback

MUSUBI may collect information provided when Customers:

• Contact customer support
• Submit reviews or ratings
• File complaints or incident reports
• Participate in surveys or promotions

Purpose of data processing

MUSUBI collects and processes personal data for the following purposes:

• Facilitating reservations, payments, and pickup coordination
• Providing customer support and responding to inquiries
• Communicating important service notifications
• Improving the functionality and reliability of the Platform
• Preventing fraud, abuse, or unauthorized access
• Complying with applicable legal and regulatory obligations

MUSUBI processes personal information only for legitimate business purposes necessary for the operation of the Platform.

MUSUBI limits the sharing of personal data and only discloses information when necessary to operate the Platform. Limited information necessary for order fulfillment, such as:

• Customer name
• Order confirmation details
• Pickup reservation information

Payment service providers

Third-party payment processors may receive information required to complete transactions. MUSUBI may disclose information when required by applicable laws, legal processes, or government authorities.

MUSUBI does not sell, rent, or trade personal data to third parties for marketing purposes.

Data security

MUSUBI implements reasonable technical and administrative measures to protect personal information against:

• Unauthorized access
• Data loss
• Disclosure
• Alteration or misuse

Security measures may include encryption, access control systems, and monitoring of platform activity. Customers are responsible for maintaining the confidentiality of their login credentials and must promptly notify MUSUBI of any suspected security breach.

Data retention

MUSUBI retains personal information only for as long as necessary to:

• Operate the Platform
• Maintain transaction records
• Resolve disputes
• Comply with legal and regulatory obligations

After the retention period expires, personal data may be securely deleted or anonymized.

Cookies and tracking technologies

MUSUBI may use cookies and similar technologies to:

• Maintain user sessions
• Improve navigation and platform functionality
• Analyze usage trends
• Personalize user experience

Customers may manage cookie preferences through their browser settings. Disabling cookies may affect certain features of the Platform.

Customer rights

Customers may have the right to:

• Access their personal data
• Request correction of inaccurate information
• Request deletion of their account or personal data (subject to legal obligations)
• Withdraw consent for certain types of processing where applicable

Requests relating to personal data may be submitted using the contact details provided below.

Data breach notification

In the event of a data breach that may affect Customer personal information, MUSUBI will take reasonable steps to:

• Investigate the incident
• Mitigate potential harm
• Notify affected users where appropriate in accordance with applicable laws.

Third-party services

The Platform may integrate services provided by third parties such as payment processors or analytics providers. These third parties operate under their own privacy policies, and MUSUBI is not responsible for their data practices.

Changes to this Privacy Policy

MUSUBI may update this privacy policy from time to time to reflect operational, legal, or technological changes. Customers will be notified of significant changes through the Platform or other appropriate communication channels. Continued use of the Platform after updates constitutes acceptance of the revised Privacy Policy.

Contact information

For questions, requests, or concerns regarding privacy or personal data, Customers may contact: