This Privacy Policy explains how TIPUI Co., Ltd., operating as Sunrise Rentacar, handles personal data in connection with our website, reservations, vehicle rentals, customer support and related services.
Effective date: September 2, 2026Data controller / Personal Information Handling Business Operator:
TIPUI Co., Ltd. (TIPUI株式会社)
Trading name: Sunrise Rentacar
Location: Naha, Okinawa, Japan
For privacy questions or requests, please use the contact details in Section 15 below. When you book through a travel platform, payment provider or other third party, that organization may separately act as a controller of the data it collects under its own privacy policy.
Depending on how you interact with us, we may collect the following categories:
We may receive data:
If you provide personal data about another person, you should have authority to do so and, where appropriate, make this Policy available to that person.
We process personal data only when we have an appropriate purpose and a lawful basis under applicable law.
Where the GDPR applies, these activities are generally necessary to enter into or perform a contract or to take requested pre-contractual steps.
Where the GDPR applies, these activities are generally based on our legitimate interests or those of another party, balanced against your rights and interests.
We may rely on consent for optional marketing, certain cookies, sensitive data or another activity when applicable law requires it. You may withdraw consent at any time, without affecting processing already lawfully carried out.
We do not sell personal data. We may disclose only what is reasonably necessary to:
Providers acting on our instructions must process data for authorized purposes and protect it appropriately. Some recipients, such as payment providers, booking platforms, insurers or authorities, may act independently under their own legal duties and privacy policies.
Sunrise Rentacar operates in Japan and serves international travelers. Your personal data may therefore be accessed, stored or processed in Japan and in other countries where our booking partners, payment providers, technology vendors, insurers or advisers operate.
Privacy laws and protections may differ between countries. Where required, we use a lawful transfer mechanism and reasonable safeguards, such as an adequacy decision, contractual protections, consent or another mechanism recognized by applicable law. Japan is recognized by the European Commission as providing an adequate level of protection for relevant transfers from the European Economic Area, subject to the scope and conditions of that decision.
We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including to provide services, maintain business and tax records, comply with legal or regulatory duties, resolve disputes, enforce agreements and handle claims.
Retention periods vary according to the type of record, the rental or incident concerned, legal limitation periods, accounting and insurance requirements, and the need to protect legal rights. When data is no longer required, we delete it, anonymize it or securely isolate it until deletion is possible.
We use reasonable administrative, technical and physical safeguards appropriate to the nature of the information and the risks involved. These may include access controls, authentication, staff confidentiality, secure service providers, system maintenance, backups and secure disposal.
No method of transmission or storage is completely secure. If a personal-data incident occurs, we will investigate it and notify affected persons and authorities when required by applicable law.
Subject to applicable law and any permitted exceptions, you may have the right to:
These rights are not absolute. For example, we may need to retain information to comply with law, complete a transaction, protect another person's rights or establish, exercise or defend legal claims.
To protect personal data, we may verify your identity and authority before acting on a request. We will respond within the period required by applicable law. We will not discriminate against you for exercising a privacy right.
We may use automated tools to support fraud screening, payment authorization, booking validation or security monitoring. Sunrise Rentacar does not ordinarily make decisions based solely on automated processing that produce legal or similarly significant effects on a person. If this changes, we will provide any notice and safeguards required by applicable law.
Our website and service providers may use cookies, pixels, local storage and similar technologies to keep the website working, remember language or session settings, protect forms and payments, understand website performance and, where enabled, measure campaigns.
You can control cookies through your browser and, where presented, our cookie controls. Blocking strictly necessary technologies may prevent parts of the website or booking process from functioning. Where required by law, non-essential cookies will be used only after obtaining the required consent.
Our website may link to booking platforms, payment services, maps, social networks or other third-party services. Their handling of personal data is governed by their own privacy notices. We encourage you to review those notices; this Policy does not control independent third parties.
Our vehicles may be rented only by persons who meet the applicable age, licence and eligibility requirements. Our services are not directed to children acting independently. We may process limited information about child passengers when supplied by a parent, guardian or booking party, for example to arrange a child seat, respond to an emergency or manage an incident. If you believe a child provided personal data to us without appropriate authorization, please contact us.
We may update this Privacy Policy to reflect changes in our services, technology, business practices or legal obligations. The revised version will be posted on this page with a new effective date. Where required, we will provide additional notice or request consent.
