Privacy Policy

Last updated: May 2026

Who I am

This privacy policy applies to Gohan World (gohanworld.com), a travel and insurance information website focused on travel between Japan and the USA. The data controller is Yuko McLeod, the individual operator of this site. If you have questions about this policy, please visit my Contact page.

What information I collect

Information you provide directly

• Newsletter sign-ups: If you subscribe to my email newsletter, I collect your email address and the date and approximate location (city and country, derived from your IP address) of sign-up. I do not collect your name unless you provide it.
• Contact submissions: If you contact me, I collect the information you include in your message (typically your email address and message content).

Information collected automatically

When you visit this site, the following may be collected automatically:

• Your IP address (anonymized by Google Analytics where possible)
• Browser type and version
• Pages visited and time spent on each page
• Referring URL (the page that linked you here)
• Device type (desktop, mobile, tablet)
• General geographic location (country and city, derived from IP)

I use this information in aggregate to understand how readers use my site and to improve my content. I do not use it to identify individual users.

Cookies I use

This site uses cookies for the following purposes:

Your dark/light theme preference is stored in your browser's local storage — not a cookie. It never leaves your device and is not shared with anyone.

You can control or disable cookies through your browser settings. Disabling analytics cookies will not affect your ability to read content on this site.

To opt out of Google Analytics tracking across all sites: tools.google.com/dlpage/gaoptout

How I use your information

I use the information I collect to:

• Send my email newsletter (only if you subscribed)
• Respond to enquiries you send me
• Improve the content and performance of this site
• Understand which articles and topics are most useful to readers
• Comply with legal obligations

I do not sell your personal information to any third party. Ever.

Legal basis for processing (GDPR)

If you are located in the European Union or United Kingdom, the following legal bases apply under the General Data Protection Regulation (GDPR):

• Consent — Analytics cookies, affiliate cookies, and newsletter sign-ups are processed based on your consent. You can withdraw consent at any time.
• Legitimate interests — Essential site security cookies (Cloudflare) and basic server logging are processed on the basis of legitimate interests in operating a secure and functional website.
• Contract performance — If you contact me directly, I process your information to respond to your enquiry.

Your rights under GDPR (EU and UK visitors)

If you are located in the European Union or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) or UK GDPR:

• Right of access: Request a copy of the personal data I hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): Request deletion of your personal data.
• Right to restrict processing: Request that I limit how I use your data.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw consent for analytics or newsletter at any time without affecting prior processing.

To exercise any of these rights, please contact me. I will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority (for EU residents) or the Information Commissioner's Office (for UK residents) if you believe your rights have not been respected.

Your rights under CCPA (California residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) give you the following rights:

• Right to know: You have the right to request disclosure of the categories and specific pieces of personal information I have collected about you, the sources of that information, and the purposes for which it is used.
• Right to delete: You have the right to request deletion of personal information I have collected from you, subject to certain exceptions.
• Right to correct: You have the right to request correction of inaccurate personal information I hold about you.
• Right to opt out of sale or sharing: I do not sell or share your personal information with third parties for cross-context behavioral advertising. No opt-out is required because no sale occurs.
• Right to non-discrimination: I will not discriminate against you for exercising any of your CCPA rights. Exercising your rights will not affect your ability to access or read content on this site.

To submit a CCPA request, please contact me. I will respond within 45 days as required by law.

Categories of personal information collected: Identifiers (email address, IP address); Internet or other electronic network activity (pages visited, browser type, device type); Geolocation data (approximate city/country from IP address).

Third-party services

When you click an affiliate link, the affiliate partner may set their own cookies and collect data according to their own privacy policy. I recommend reviewing the privacy policies of any service you purchase from.

Email newsletter

If you subscribe to my newsletter:

• Your email address is stored securely in Google Sheets and used only to send you my newsletter
• I do not share your email address with third parties for marketing purposes
• You can unsubscribe at any time by contacting me — I will remove your email within 7 days
• I retain your email address only for as long as you remain subscribed
• The legal basis for processing is your consent (GDPR Article 6(1)(a))

Data retention

• Newsletter subscribers: Retained while subscribed; removed within 30 days of unsubscription request
• Contact enquiries: Retained for up to 2 years, then deleted
• Analytics data: Per Google Analytics default retention settings (up to 26 months)

Data transfers outside your country

If you are located in the EU or UK, please be aware that some third-party services I use (including Google Analytics and Google Sheets) may transfer and process your data in the United States. These transfers are conducted under appropriate safeguards including Standard Contractual Clauses approved by the European Commission.

Children's privacy

This site is not directed at children under the age of 13 (or 16 in the EU). I do not knowingly collect personal data from children. If you believe a child has provided me with personal information, please contact me and I will delete it promptly.

Changes to this policy

I may update this privacy policy from time to time to reflect changes in law, technology, or my practices. When I do, I will update the "Last updated" date at the top of this page. For significant changes, I will make reasonable efforts to notify newsletter subscribers. Continued use of this site after any changes constitutes your acceptance of the updated policy.

Contact

If you have questions, concerns, or requests regarding this privacy policy or your personal data — including GDPR or CCPA requests — please visit my Contact page. I aim to respond within 5 business days for general enquiries, 30 days for GDPR requests, and 45 days for CCPA requests.