Privacy notice

Updated September 30, 2026 (hashed email with measured reservations) · Updated October 16, 2026 (shipping carrier: DHL) · Updated October 21, 2026 (steps toward an order measured) · Updated October 22, 2026 (pages delivered by Cloudflare)

This reservation page is operated by Pachi Pachi Inc. (N&E BLD. 7F, 1-12-4 Ginza, Chuo-ku, Tokyo, Japan; contact: contact@vip-selection.tokyo). The pages are delivered by Cloudflare, Inc. (Cloudflare Pages). The database and the server functions that record reservations, measurement and survey answers run on private servers provided by Xserver in Japan.

What we collect

When you reserve a box we store your email address, the plan you picked, the date, and, if you answer it, your reason for reserving. We use this only to contact you about your reservation and the first box. We do not send automated marketing emails and we do not sell your address. If advertising measurement is on when you reserve, a one-way hash of your address is shared with Meta as described in the measurement section below; opting out or Global Privacy Control stops this.

Orders, payments and delivery

When checkout is available, purchases are processed as described below. This notice also covers reservations made before paid checkout opens.

When you buy a plan, Stripe processes your payment on its secure checkout page. Stripe collects your email, name, shipping and billing address, phone number and card details. We receive your name, email, shipping address, phone number, your plan and its payment status, but never your full card number. We use them to pack and ship your deliveries, send order and shipping emails, handle cancellations, refunds and support, prevent fraud, and keep business and tax records. We give DHL, its delivery partners and customs authorities your name, delivery address, phone number and the parcel contents so each delivery can ship and clear U.S. customs. Stripe’s own notice: stripe.com/privacy.

If you answer the 5 questions after paying, we store your answers and optional comment with your Stripe checkout reference, to pack your chopstick gift and to improve ENISHI BOX. We don’t store your IP address with them; to limit abuse, a salted hash of your network address is kept for up to 2 hours.

We keep order and payment records for as long as your plan is active and then for 7 years, as Japanese tax law requires. We keep survey answers for up to 2 years. To see, correct or delete your information, email contact@vip-selection.tokyo; we may need to keep records the law requires.

Age and reservations

This reservation service is for US adults aged 18 or older buying for themselves or their families. Before opening the email form, we ask you to select an age range in your browser. We do not send the selected range or date of birth to our server. An adult eligibility confirmation is sent when an adult opens the reservation form. We do not request your precise location. Visitors who select an age below 18 can browse, but cannot submit a reservation or enable optional measurement. A local browser-session flag remembers an ineligible selection.

Optional measurement

Visitors in the United States. If our server determines from your IP address that you are in the United States, Meta advertising measurement is on from page load and a notice is shown at the bottom of the page (see “Advertising measurement for visitors in the United States” below). Elsewhere, or when the country cannot be determined, measurement stays off until you explicitly allow it. Existing refusals, Global Privacy Control and test visits stay off. You can use Opt out in the notice, the Off choice under “Ad measurement with Meta” in the reservation form, or the footer button to stop measurement without losing access to the service. Declining is remembered in this browser using a privacy-preference cookie and browser storage. If those preferences cannot be read or saved reliably, optional measurement stays off.

While measurement is on, Meta Pixel directly collects visit and completed-action events, page information, device/network information and its cookie identifiers. We do not add your email or form answers to these browser events. A completed reservation is sent as a Lead with an event ID derived from a random reservation reference, to support duplicate removal when browser and server events arrive within Meta’s deduplication window. For a completed reservation made with measurement on, our server also sends that Lead to Meta (Conversions API) with the same event ID, the IP address and browser user agent of the request, and Meta’s cookie identifiers (_fbp/_fbc) if present. For reservations made on a page that shows this notice, that server-side Lead also includes a one-way SHA-256 hash of your email address (lowercased, with surrounding spaces removed) so Meta can match the reservation to our ad. Hashing hides the address in transit, but it is not anonymous: Meta can recognize a hashed address that is already linked to a Meta account. We never send your readable email address or your survey answers, and reservations made before this update did not include the hash. Opting out, Global Privacy Control, test visits and choosing an age under 18 stop this sharing. When measurement is allowed, we may also retain an actual Meta ad-click identifier in this browser session and use it to supply _fbc if the Pixel has not set that cookie; it is not sent for test visits or when Global Privacy Control is on. Microsoft Clarity is not started in the notice mode for US visitors. Events from before measurement starts are not replayed. Stopping measurement prevents new browser events and cancels unsent server events once our server receives the change. A request already in transit may complete; stopping cannot erase information already received by Meta. Meta may use information under its Privacy Policy, including advertising and other personalization. Some US state laws treat this disclosure as sharing for cross-context advertising. Use the measurement control to opt out of sale/sharing for advertising; we also respect GPC.

We do not create a reservation session before the age check. Meta events are PageView beginning when measurement starts, and Lead for a new completed reservation. Clarity session replay remains disabled.

Activity and service records

While measurement is enabled under either choice above, our server records limited usage events such as sections viewed, scrolling and form activity. These usage logs contain a short browser-session reference, time, broad device class and campaign codes, not email addresses or free text, and are deleted after 30 days. Without measurement, we still save the information needed to operate a reservation you submit, your optional survey answers, and changes to your measurement choice. We also record whether a submitted reservation qualifies for measurement, the applicable notice version, and a limited reason when it does not. From September 28, 2026, we also keep the page version and the reported source of a refusal (a control used on the current page or a saved preference), so we can diagnose measurement problems. This does not reveal why a person made that choice. These operational fields are linked to the reservation; they are not anonymous browsing records. Apart from the reservation Lead described above, we do not send these service records to Meta. Our hosting services (Cloudflare, which delivers the pages, and Xserver, which runs our server functions) necessarily receive network information to deliver pages and protect the service; web-server and security logs may contain IP addresses.

Cookies and browser storage

After an adult opens the reservation form, an essential session cookie protects submissions and expires after 30 days. Your age selection itself is not retained; a browser-session flag can prevent an ineligible visitor from opening the form. While measurement is enabled, Meta may set its own measurement cookies. Turning measurement off does not erase records already received by Meta.

Retention

Reservations are kept for up to 180 days or until the first box ships, whichever comes first, unless you confirm an order. Usage logs and server delivery records are kept for up to 30 days. Reservation measurement status is kept with the reservation. Server event details are removed after successful delivery; events delayed for 48 hours are held for review rather than automatically resent. Encrypted database backups are kept for 7 days.

Contact

Pachi Pachi Inc., contact@vip-selection.tokyo.