私隱政策

PL A-VENTURE Privacy Policy

Version 2.0｜Last updated: 6 August 2026

1. Purpose and Responsible Companies

This Policy explains how PL A-VENTURE collects, uses, retains, discloses and protects personal data for service enquiries, applications, bookings, payments, identity checks, service delivery, safety, incidents and after-service matters.

• PL A-VENTURE 株式会社 generally handles Equipment Rental, Gear Storage and confirmed services provided in Japan.
• PL A-VENTURE LIMITED (Hong Kong) generally handles Indoor Lessons, including lessons currently conducted at Guangzhou Sunac Snow World and Shenzhen Huafa Snow World.
• For Camps, Events, collaborations or another service, the responsible PL A-VENTURE company is identified on the booking page, payment document or written confirmation.

The companies may provide necessary data to each other for cross-border fulfilment, payment, support, safety and legal compliance. Each processes data under applicable data-protection law, including Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486), Japan's Act on the Protection of Personal Information and mandatory rules at the place of service.

2. Scope

This Policy applies to service pages and forms on pl-aventure.jp, communications through email, WhatsApp, WeChat, LINE, social media or another designated channel, and Equipment Rental, Gear Storage, Indoor Lessons, Camps/Events and related support.

It does not cover a Concierge or vehicle-booking service that has not been launched or confirmed by us in writing. Data independently collected by a snow venue, hotel, payment platform, insurer, transport provider or other partner is governed by that party's privacy arrangements. Our Shopify Online Store and its physical-product and after-sales activities are governed by the separate Online Store Privacy Policy.

3. Data We May Collect

Depending on the service, we may collect identity and contact details; passport and verification data; accommodation, delivery, collection, sizing, ability, stance, equipment, stored-item and handover records; participant, guardian, emergency, health, injury, medication, insurance and accessibility information; payment, invoice, pre-authorisation, refund and Rental Credit records; enquiries, complaints, incident evidence and communications; website, device, Cookie and security data; and marketing or public-image consent choices.

Full card numbers and security codes are generally processed directly by Square, banks or payment providers and are not ordinarily obtained or stored by us. A person booking or supplying data for someone else must be authorised and should make this Policy available to that person.

4. Purposes

We use data as reasonably necessary and legally permitted to answer enquiries; review applications; verify identity; handle bookings, payments, pre-authorisations, refunds and Rental Credit; prepare and deliver services; match equipment, ability, instructors or groups; communicate with participants and necessary partners; protect persons and property; prevent fraud, misuse, non-return, unauthorised collection, prohibited contents or illegality; handle cancellation, injury, incidents, complaints, insurance, disputes and claims; secure and improve our systems and services; comply with accounting, tax, audit, regulatory and legal obligations; and, with separate required consent, send marketing or publicly use identifiable images.

5. Required Data, Passports and Verification

Required fields are needed to assess or provide the relevant service. Without them, we may be unable to verify identity, accept a booking, release property, arrange a lesson or process a request.

For Equipment Rental, the renter follows our instructions and chooses either a passport image or an HKD5,000 credit-card pre-authorisation, subject to reasonable additional verification for an individual order. Every Gear Storage application requires a valid passport image.

Passport images are not used for ordinary marketing. A Rental passport image is deleted immediately after all equipment is correctly returned, related charges are resolved and the rental process ends. A Storage passport image is deleted immediately after correct return of property, settlement of all charges and closure of the case. An image may be retained only while required by law or lawfully requested by police or another authority, or while reasonably necessary for unreturned property, unpaid charges, an incident, dispute or other unresolved case.

6. Health, Minors and Emergencies

Health, injury, medication, insurance and emergency data for a lesson, Camp or Event is used only as necessary to assess safe participation, make reasonable arrangements, respond to an incident, contact an emergency contact, assist medical or insurance handling, and meet legal duties. A parent or legal guardian should provide or consent to data for a participant under 18. In an emergency, necessary data may be provided to medical, venue, police, rescue or insurance personnel to protect vital interests.

7. Payments, Square and Pre-authorisation

Square, banks, card issuers and other payment providers process payments, card pre-authorisations and refunds to the original payment method under their systems. We may receive transaction status, limited card details, risk signals and identifiers necessary for a refund, but do not ordinarily obtain or retain the full card number or security code.

A pre-authorisation is not a completed charge but may temporarily reduce available credit. Release timing is determined by the bank or card issuer. Square is a payment-processing system; Rental Credit is not credit supplied by Square.

8. Photos, Video, CCTV and Communications

We may photograph equipment, stored property, handover condition or an incident for service records, asset protection, damage verification, insurance or disputes. This does not authorise public promotion.

We do not use identifiable lesson, Camp or Event photos or videos on websites, social media, advertising or other public promotion without separate explicit consent from the participant or parent/guardian. Refusal or withdrawal does not affect ordinary participation. Withdrawal stops new use, although material lawfully published or physically produced beforehand may not be immediately recoverable.

Where we or a third-party venue operates CCTV with appropriate notice, footage is used for security, incident investigation, protection of persons and property or legal requirements and is handled under the operator's applicable policy and law. Communications platforms also process message data under their own privacy terms.

9. Direct Marketing

We send information about PL A-VENTURE products, services, lessons, Camps, Events, membership or offers only after describing the contact data and marketing classes and obtaining the consent or indication of no objection required by law. Marketing choices are separate from service-required consent and are not pre-selected. Opt out free of charge through the message or at info@pl-aventure.com. This does not stop non-marketing booking, payment, safety, service-change or incident messages.

10. Disclosure and Recipients

We do not sell personal data or customer lists for money. As reasonably necessary for the stated purposes, data may be provided to the other responsible PL A-VENTURE company; Square, banks and payment, fraud-prevention, website, forms, cloud, messaging, analytics and IT providers; hotels, logistics, storage, delivery, snow venues, instructors, event partners and authorised personnel; medical, rescue and insurance personnel; professional advisers; courts, police, regulators, government and tax authorities; and persons you direct or authorise.

We seek to provide only the data needed for the task and require appropriate confidentiality and security from processors acting for us. Some recipients independently process data under their own legal responsibilities.

11. Cross-border Processing

Our services involve Hong Kong, Japan and Mainland China, and some payment, cloud, communications or technology providers operate elsewhere. Data may therefore be transferred to, stored in or accessed from another jurisdiction. For example, Japan rental/storage data may be handled by the Japan team, while Guangzhou or Shenzhen lesson data may pass between Hong Kong and necessary instructors, venues or partners in Mainland China.

Cross-border processing is limited to service, safety, payment and legal needs. We provide required notice or obtain required consent and take reasonably practicable measures such as data and access minimisation, suitable providers, confidentiality or data-protection arrangements, and purpose restrictions. Laws and government-access regimes differ between jurisdictions.

12. Retention

Except for passport images under Section 5, data is retained only for the collection purpose, service completion, enquiries/incidents/disputes and applicable accounting, tax, audit, contract or legal obligations. Booking, payment, invoice and refund records follow the responsible company's statutory periods. Equipment, storage, handover, loss, damage and incident records are kept for service completion and reasonable claims. Health and emergency data is deleted or reduced after a lesson, Camp or Event unless needed for an incident, claim or law. Consent and suppression records are retained as reasonably necessary to evidence a choice. Website and technical data follow relevant tools, security needs and provider settings.

At the end of the period, data is deleted, anonymised or securely isolated where reasonably practicable. Backup data may remain until normal rotation completes.

13. Security and Incidents

We use reasonably practicable administrative, technical and physical measures proportionate to sensitivity, including restricted access to passport and health data, permission management, appropriate platform and transmission security, confidentiality arrangements and incident procedures. No transmission or storage system is absolutely secure. Use only designated channels for passport, payment or health information and notify us promptly of suspected misuse. We assess and contain a data incident, investigate and remedy it, and make any notice required by applicable law.

14. Access, Correction, Deletion and Other Requests

Under applicable law, you may ask whether we hold your data, request access and correction and, where available, request cessation, deletion, withdrawal of consent or another legal protection. Rights may be limited by identity verification, statutory retention, incomplete services, incidents, payment, fraud prevention, legal claims and other lawful exceptions.

A valid access request concerning Hong Kong-company data is generally handled within 40 days under the PDPO. We may request enough information to verify identity and locate records and may charge a non-excessive access fee where permitted. Requests involving an independent payment platform, venue or third party may need to be made directly under its procedure.

15. Cookies and Third-party Links

The website and providers may use Cookies, local storage, pixels or similar technologies for forms and core functions, preferences, security, analytics and, where enabled with required consent, marketing. Manage non-essential technologies through displayed Cookie settings or your browser; disabling essential Cookies may affect functions. Third-party websites, maps, venues, payments, social media and communications services are governed by their own privacy policies.

16. Updates, Language and Contact

We may update this Policy for service, technical or legal reasons and publish the new version and date here. Material changes are separately notified where required. Chinese and English versions are provided. If they conflict, the English version prevails unless applicable law requires otherwise.