Privacy

Who is responsible

Tokyo Bowl Club, Tokyo, Japan, trading as Bowl Club, is the data controller for this site. For any privacy question, or to ask for a copy or deletion of your data, email info@bowl-club.com.

What is stored, and where

By Stripe, when you pay

Payments run through Stripe, which acts as the payment processor and its own controller for payment data. Stripe receives your card details, name, email address, billing country and, for subscriptions, your card on file. Bowl Club never sees or stores a card number. Stripe’s privacy policy is at stripe.com/privacy.

By Bowl Club, to deliver your files

• Your Stripe checkout reference, customer id and, for members, subscription id.
• The email address you gave at checkout.
• Which product you bought and which files you are entitled to.
• Whether and when each file was downloaded — this is what the refund policy is decided on.

That is the whole record. No addresses, no phone numbers, no card data, no profile of what you cooked.

Why it is stored

To perform the contract you entered into when you bought something: unlocking your downloads, showing members their drops, and handling refunds and support. For tax and accounting, records of a sale are kept as long as the law requires.

Cookies and analytics

Bowl Club uses Google Analytics 4 to count page views, to record when someone clicks a buy button before Stripe Checkout opens, and to record a purchase when Stripe confirms payment on the success page. Google may set cookies or use similar storage on your device; their privacy policy is at policies.google.com/privacy. There is no advertising, no fingerprinting and no newsletter tracking. Stripe sets cookies on its own checkout pages, which are necessary for fraud prevention and payment security. Your download links are signed tokens in the URL, not cookies.

Email

Stripe sends payment receipts. Bowl Club sends a delivery email with your download links only when email delivery is switched on for the shop, and only to the address used at checkout. There is no newsletter and no marketing list; your address is never sold, shared or added to one.

Sharing

Data is shared only with the services needed to run the shop: Stripe for payments, Google Analytics for page and checkout-click measurement, the hosting provider serving these pages, and — where enabled — a transactional email provider to send your download links. Nothing is shared with advertisers or data brokers.

How long it is kept

• Entitlement and download records: while the entitlement is active, plus seven years for accounting.
• Support emails: up to two years, then deleted.
• Stripe holds payment records under its own retention rules.

Your rights

Under the UK GDPR and equivalent rules in Australia and New Zealand you can ask for a copy of your data, ask for it to be corrected, ask for it to be deleted where no legal obligation requires keeping it, and object to processing. Email info@bowl-club.com and expect a reply within two working days and completion within one month.

Deleting your entitlement record removes your access to future downloads, so a copy of your files is worth keeping first.

Complaints

If you are in the UK you can complain to the Information Commissioner’s Office at ico.org.uk. In Australia, the Office of the Australian Information Commissioner; in New Zealand, the Office of the Privacy Commissioner. Telling me first is faster, and I would rather fix it.