Privacy Policy

Information You Provide Directly

When you contact us through forms on our website, you may provide:

• Your name and email address
• Organization name and role
• Information about your sustainability needs or inquiries
• Any other information you choose to include in your message

Information Collected Automatically

When you visit our website, we may automatically collect:

• Browser type and version
• Operating system and device information
• IP address and approximate geographic location
• Pages visited and time spent on our site
• Referring website or source that brought you to our site
• Date and time of your visit

Information from Cookies and Similar Technologies

We use cookies and similar tracking technologies to collect information about your browsing activity. For detailed information about our use of cookies, please see our Cookie Policy. These technologies help us:

• Remember your preferences and settings
• Understand how you interact with our website
• Improve website functionality and performance
• Provide relevant content and advertising

Legal Basis for Processing

We process your personal data based on your consent, our legitimate business interests in providing and improving our services, and where necessary to comply with legal obligations. You can withdraw consent at any time by contacting us.

Service Provision and Communication

We use the information you provide to respond to your inquiries, discuss potential consulting engagements, and provide the services you request. This includes following up on contact form submissions and maintaining correspondence about our sustainability consulting services.

Website Improvement and Analytics

We analyze how visitors use our website to understand which content is most valuable, identify technical issues, and improve overall user experience. This information helps us make informed decisions about website design, content development, and service offerings.

Marketing and Business Development

With your consent, we may use your contact information to share relevant updates about our services, sustainability insights, or information about ESG consulting that may interest you. You can opt out of marketing communications at any time.

Legal Compliance and Protection

We may use your information to comply with applicable laws and regulations, respond to legal requests, enforce our terms of service, protect our rights and property, and ensure the security of our website and services.

Service Providers

We may share your information with trusted third-party service providers who help us operate our website, conduct business activities, or provide services on our behalf. These providers are contractually bound to protect your information and use it only for the purposes we specify.

Analytics Partners

We use analytics services to understand website usage patterns. These services may collect information about your online activities over time and across different websites. They process data according to their own privacy policies.

Legal Requirements

We may disclose your information if required by law, court order, or other legal process, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to government requests.

Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website of any such change in ownership or control of your personal information.

No Sale of Personal Information

We do not sell your personal information to third parties. We only share information as described in this policy and with your consent where required.

Security Measures

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure server infrastructure, and regular security assessments.

Data Storage and Encryption

Personal information is stored on secure servers with restricted access. We use industry-standard encryption protocols to protect data in transit and at rest. Access to personal information is limited to employees and contractors who need it to perform their job functions.

Access Controls and Monitoring

We maintain strict access controls and logging systems to monitor who accesses personal information and when. Our team members are trained on data protection principles and are bound by confidentiality obligations.

Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities in accordance with applicable data protection laws. We maintain an incident response plan to address security incidents promptly.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we securely delete or anonymize it.

Right to Access

You have the right to request access to the personal information we hold about you. We will provide you with a copy of your data in a commonly used format within a reasonable timeframe.

Right to Rectification

If you believe any information we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. We will respond to your request promptly.

Right to Erasure

You may request that we delete your personal information under certain circumstances, such as when it is no longer necessary for the purposes for which it was collected or when you withdraw consent. We will comply with such requests except where we have a legal obligation to retain the information.

Right to Data Portability

Where technically feasible and legally required, you have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit it to another organization.

Right to Object

You have the right to object to processing of your personal information for direct marketing purposes or when processing is based on legitimate interests. We will stop processing your data for these purposes upon receiving your objection.

How to Exercise Your Rights

To exercise any of these rights, please contact us using the information provided at the top of this policy. We will respond to your request within the timeframe required by applicable law, typically within 30 days.

Children's Privacy

Our website and services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us so we can delete it.

International Data Transfers

Your information may be transferred to and processed in countries other than Japan. We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place to protect your information.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by posting the updated policy on our website with a new effective date. Your continued use of our website after such changes constitutes acceptance of the updated policy.

Contact Us About Privacy

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us using the information at the top of this page. We take privacy matters seriously and will respond to your inquiry as promptly as possible.