Privacy Policy

Our Privacy Policy governs your visit to https://shibui.pro and your interactions with Shibui, including booking calls, requesting or receiving services, making payments, and communicating with us.

We use your data to provide and improve Service. By using Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, the terms used in this Privacy Policy have the same meanings as in our Terms and Conditions.

Our Terms and Conditions (“Terms”) govern all use of our Service and together with the Privacy Policy constitute your agreement with us (“agreement”).

SERVICE means the https://shibui.pro website and related services operated by Retreat Builder, Inc. under the Shibui name.

PERSONAL DATA means data about a living individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession).

USAGE DATA is data collected automatically either generated by the use of Service or from Service infrastructure itself (for example, the duration of a page visit).

COOKIES are small files stored on your device (computer or mobile device).

DATA CONTROLLER means a natural or legal person who determines the purposes and means of processing Personal Data. For the purpose of this Privacy Policy, Retreat Builder, Inc. is the Data Controller of your data and can be contacted at hello@shibui.pro.

DATA PROCESSORS (OR SERVICE PROVIDERS) means any natural or legal person who processes the data on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more effectively.

DATA SUBJECT is any living individual who is the subject of Personal Data.

THE USER is the individual using our Service. The User corresponds to the Data Subject, who is the subject of Personal Data.

We collect information you provide directly, information collected automatically when you use the Service, and information received from service providers and advertising partners. We use this information to provide and improve the Service, communicate with you, process payments, measure performance, advertise Shibui, and protect our users and business.

Information You Provide

While using our Service, you may provide Personal Data including:

• name, email address and other contact information;
• company, project, product and service-request information;
• booking details, selected appointment times and calendar-event information;
• messages, feedback, support requests and other communications;
• subscription, transaction and billing information; and
• any other information you choose to provide.

We may use your Personal Data to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link.

Usage Data

We may also collect information that your browser sends whenever you visit our Service or when you access Service by or through a mobile device (“Usage Data”).

This Usage Data may include information such as your computer’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When you access Service with a mobile device, this Usage Data may include information such as the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use, unique device identifiers and other diagnostic data.

Cookies and Similar Technologies

We use cookies and similar tracking technologies to track the activity on our Service and we hold certain information.

Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Other tracking technologies are also used such as beacons, tags and scripts to collect and track information and to improve and analyze our Service.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Categories of cookies and similar technologies we may use include:

• Necessary and Security: to operate the Service, prevent fraud and protect our systems.
• Preference: to remember your preferences and settings.
• Analytics: to understand traffic, usage and performance.
• Advertising: to measure campaigns, create audiences and serve advertisements that may be relevant to your interests.

Shibui uses the collected data for the following business and commercial purposes:

1. to provide and maintain our Service;
2. to notify you about changes to our Service;
3. to schedule calls, create calendar events and communicate about appointments;
4. to fulfill service requests and manage subscriptions;
5. to provide customer support;
6. to process payments, transactions, billing and collections;
7. to analyze traffic, campaign performance and use of our Service;
8. to personalize and measure advertising, create advertising audiences and conduct remarketing;
9. to detect, prevent and address technical issues;
10. to protect the security and integrity of the Service, our users and our business;
11. to fulfill any other purpose for which you provide it;
12. to carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection;
13. to provide you with notices about your account and/or subscription, including expiration and renewal notices, email instructions, etc.;
14. to provide you with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information;
15. in any other way we may describe when you provide the information;
16. for any other purpose with your consent.

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

We will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.

Your information, including Personal Data, may be transferred to – and maintained on – computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to United States and process it there.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

Shibui will take all the steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organisation or a country unless there are adequate controls in place including the security of your data and other personal information.

We may disclose Personal Data in the following circumstances:

• Service Providers. To providers that support hosting, security, databases, form processing, scheduling, video meetings, email delivery, analytics, advertising, customer communications and payment processing.
• Analytics and Advertising Partners. To Google, Meta and similar providers for analytics, campaign measurement, audience creation and remarketing. These transfers may constitute “sharing” for cross-context behavioral advertising under California law.
• Business Transactions. In connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, sale of assets or similar corporate transaction.
• Legal and Safety Reasons. If required by law, legal process or a valid request from public authorities, or when reasonably necessary to protect rights, safety, security or property.
• At Your Direction or With Consent. To fulfill the purpose for which you provide information, display your company name or work with permission, or for another purpose disclosed when you provide the information.

We do not sell Personal Data for monetary consideration. As described above, our use of advertising and remarketing providers may be treated as “sharing” under applicable privacy laws.

The security of your data is important to us but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

If you are located in the European Union (EU), European Economic Area (EEA) or another jurisdiction where the GDPR applies, you may have certain data protection rights. See the official GDPR text.

Legal Bases for Processing

Depending on the context, we process Personal Data because it is necessary to perform a contract or take steps at your request, to comply with legal obligations, based on your consent, or for our legitimate interests in operating, securing, improving and marketing the Service where those interests are not overridden by your rights.

We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

If you wish to be informed what Personal Data we hold about you and if you want it to be removed from our systems, please email us at hello@shibui.pro.

In certain circumstances, you have the following data protection rights:

1. the right to access, update or to delete the information we have on you;
2. the right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete;
3. the right to object. You have the right to object to our processing of your Personal Data;
4. the right of restriction. You have the right to request that we restrict the processing of your personal information;
5. the right to data portability. You have the right to be provided with a copy of your Personal Data in a structured, machine-readable and commonly used format;
6. the right to withdraw consent. You also have the right to withdraw your consent at any time where we rely on your consent to process your personal information.

Please note that we may ask you to verify your identity before responding to such requests. Please note, we may not be able to provide Service without some necessary data.

You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in the European Economic Area (EEA).

The California Online Privacy Protection Act (“CalOPPA”) requires operators of commercial websites that collect personally identifiable information from California consumers to post a conspicuous privacy policy. Our Privacy link appears on the home page, and we will post changes to this policy on this page.

You may request access to or correction of your personal information by emailing hello@shibui.pro.

Do Not Track and Global Privacy Control

Some browsers offer a “Do Not Track” setting. Because there is no uniform industry standard for responding to Do Not Track signals, the Service may not respond to them.

Global Privacy Control (“GPC”) is a separate browser-based opt-out signal. Where applicable law requires it, we treat a valid GPC signal as a request to opt out of the sale or sharing of Personal Data for the browser or device sending the signal.

If the California Consumer Privacy Act, as amended (“CCPA”), applies to Shibui’s processing of your Personal Data, California residents may have the rights described below, subject to applicable exceptions.

Categories of Personal Information

In the preceding 12 months, we may have collected the following CCPA categories: identifiers; customer-record information; commercial and transaction information; internet or other electronic network activity; professional or employment-related information; geolocation derived from an IP address; communications and service-request content; and inferences drawn from this information. The specific information, sources and purposes are described in Sections 3 through 5 above.

We may disclose these categories for business purposes to the service-provider categories described in Sections 8 and 13. We do not sell Personal Data for monetary consideration. We may share identifiers and internet or electronic activity information with analytics and advertising partners for cross-context behavioral advertising.

Your Rights

• Know and Access. Request the categories and specific pieces of Personal Data we collected, sources, purposes, and categories of third parties to whom we disclosed, sold or shared it.
• Delete. Request deletion of Personal Data we collected from you, subject to legal exceptions.
• Correct. Request correction of inaccurate Personal Data.
• Opt Out. Opt out of the sale or sharing of Personal Data, including sharing for cross-context behavioral advertising.
• Limit. Where applicable, limit certain uses and disclosures of sensitive Personal Data.
• Non-Discrimination. Exercise your privacy rights without receiving unlawful discriminatory treatment.

Submitting a Request

Email hello@shibui.pro with the subject “California privacy request.” To opt out of sale or sharing, use the subject “Do not sell or share my personal information.” We also process valid GPC signals where required by law.

We may need to verify your identity before completing an access, deletion or correction request. An authorized agent may submit a request on your behalf where permitted by law, subject to verification of the agent’s authority. We will respond within the time required by applicable law.

For more information, visit the California Attorney General’s CCPA resource.

We use third-party companies to operate and support the Service. Depending on how you interact with Shibui, these providers may include:

• Cloudflare for website hosting, content delivery, security and related infrastructure;
• Convex for backend infrastructure, database storage and form-submission processing;
• Google for Calendar, Meet, Ads and related scheduling, communications and advertising services;
• PostHog for website analytics, product-usage measurement, performance monitoring and session replay;
• Meta for Facebook advertising, audience measurement and remarketing;
• Stripe for payment and subscription processing; and
• email and communications providers for transactional messages, customer communications and marketing emails.

These providers may process Personal Data only as permitted by their agreements with us, their own privacy policies and applicable law. Some providers may act as independent businesses or controllers for certain processing, particularly advertising and payment services.

We may use third-party Service Providers to monitor and analyze the use of our Service.

PostHog

PostHog helps us measure website traffic, booking-funnel progress, performance and product usage. It may process online identifiers, device and browser information, approximate location, page activity and interaction events. We do not intentionally send booking-form contents, names, email addresses, free-text responses or verification tokens to PostHog.

For more information, visit the PostHog Privacy Policy.

Shibui uses remarketing services to advertise on third-party websites after you have visited our Service. We and our advertising partners use cookies and similar technologies to measure campaigns, create audiences and serve ads based on past visits to our Service. Under California law, some of these transfers may constitute “sharing” for cross-context behavioral advertising.

Google Ads (AdWords)

Google Ads remarketing service is provided by Google LLC.

You can manage personalized advertising through the Google Ads Settings page.

Google also recommends installing the Google Analytics Opt-out Browser Add-on for your web browser. This add-on gives visitors the ability to prevent their data from being collected and used by Google Analytics.

For more information on Google’s privacy practices, visit the Google Privacy Terms.

Facebook

Facebook remarketing service is provided by Meta Platforms, Inc. You can learn more about interest-based advertising from Facebook on its interest-based advertising help page.

To opt out from Facebook’s interest-based ads, follow Facebook’s opt-out instructions.

Facebook adheres to the Self-Regulatory Principles for Online Behavioural Advertising established by the Digital Advertising Alliance. You can also opt out from Facebook and other participating companies through the Digital Advertising Alliance in the USA, the Digital Advertising Alliance of Canada, or the European Interactive Digital Advertising Alliance, or opt out using your mobile device settings.

For more information on Meta’s privacy practices, visit Meta’s Privacy Policy.

California residents may also opt out as described in the California Privacy Rights section above.

We provide paid products and services and use Stripe for payment and subscription processing.

We will not store or collect your payment card details. That information is provided directly to our third-party payment processors, whose use of your personal information is governed by their Privacy Policy.

These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, a joint effort of brands including Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.

Stripe may provide us with transaction details, payment status and limited payment-method information. Stripe’s Privacy Policy is available at stripe.com/privacy.

Our Service may contain links to other sites that are not operated by us. If you click a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

Our Services are not intended for use by children under the age of 13 (“Children”).

We do not knowingly collect personally identifiable information from Children under 13. If you become aware that a Child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from Children without verification of parental consent, we take steps to remove that information from our servers.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

We will let you know via email and/or a prominent notice on our Service prior to the change becoming effective, and update the “effective date” at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

If you have questions about this Privacy Policy or want to exercise a privacy right, contact Retreat Builder, Inc. (“Shibui”):

By email: hello@shibui.pro.