Privacy Policy

Our Commitment to Data Protection

At Kando-sha, we recognize that privacy is fundamental to building trust. This Privacy Policy explains how we collect, use, protect, and share information when you interact with our website and services. We are committed to maintaining the confidentiality and security of your personal data in accordance with applicable Japanese and international privacy regulations.

We believe in transparency about our data practices. This policy provides comprehensive information about what data we collect, why we collect it, how we use it, and the choices you have regarding your information.

Information We Collect

Information You Provide Directly

When you interact with our website or services, you may choose to provide us with personal information, including:

• Contact Information: Name, email address, phone number, organization name, and job title when you submit inquiries through our contact forms
• Communication Data: The content of messages you send to us, including questions about our services and project requirements
• Service Engagement Data: Information provided during consultation discussions, project scoping, and service delivery

Information Collected Automatically

When you visit our website, we automatically collect certain information about your device and browsing activity:

• Device Information: IP address, browser type, operating system, device identifiers, and screen resolution
• Usage Data: Pages visited, time spent on pages, click patterns, navigation paths, and referral sources
• Cookie Data: Information stored through cookies and similar tracking technologies as described in our Cookie Policy
• Location Data: General geographic location based on IP address for analytics and service optimization

Information from Third Parties

We may receive information about you from analytics service providers, advertising partners, and other third-party services we use to operate and improve our website. This information is combined with data we collect directly to provide better service and understand our audience.

How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery and Communication

To respond to your inquiries, provide consultation services, deliver customer experience design projects, and communicate about our services. This includes scheduling meetings, sharing project updates, and providing professional recommendations.

Website Improvement and Analytics

To understand how visitors use our website, identify areas for improvement, optimize user experience, and develop new features. We analyze usage patterns to make our content more relevant and accessible.

Marketing and Business Development

To inform potential clients about our services, share relevant content, and maintain relationships with business contacts. We may send information about our service offerings, case studies, and industry insights to those who have expressed interest.

Legal Compliance and Protection

To comply with legal obligations, protect our rights and property, prevent fraud, resolve disputes, and enforce our agreements. This includes maintaining records as required by Japanese law and responding to legal requests.

Business Operations

To manage our business operations, maintain security, conduct internal research, and improve our consulting methodologies. This supports the quality and effectiveness of our customer experience services.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities, such as receiving marketing communications or accepting cookies
• Contract Performance: When processing is necessary to fulfill our contractual obligations to provide consulting services
• Legitimate Interests: When we have a legitimate business interest that is not overridden by your privacy rights, such as website analytics and business development
• Legal Obligation: When required to comply with applicable laws and regulations

Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers

We work with trusted third-party service providers who assist with website hosting, analytics, email delivery, and other business operations. These providers are contractually obligated to protect your data and use it only for specified purposes.

Professional Advisors

We may share information with legal, financial, and other professional advisors who assist us in conducting our business and providing services to clients.

Legal Requirements

We may disclose your information when required by law, court order, or government regulation, or when necessary to protect our rights, property, or safety, or that of others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

Data Security Measures

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• Encryption: Data transmitted between your browser and our servers is encrypted using industry-standard SSL/TLS protocols
• Access Controls: We limit access to personal information to employees and contractors who need it to perform their duties
• Regular Security Assessments: We conduct periodic reviews of our security practices and update them as needed
• Data Minimization: We collect and retain only the information necessary for specified purposes
• Secure Storage: Personal data is stored on secure servers with appropriate physical and digital safeguards

While we strive to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but remain committed to maintaining industry-standard protections.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our retention periods are based on:

• The nature of our relationship with you and the services we provide
• Legal and regulatory requirements for record-keeping
• Statute of limitations for potential legal claims
• Our legitimate business interests in maintaining records

When we no longer need your information, we securely delete or anonymize it in accordance with our data retention policy.

Your Privacy Rights

You have the following rights regarding your personal information:

Right to Access

You can request access to the personal information we hold about you. We will provide you with a copy of your data in a commonly used format.

Right to Rectification

If you believe your information is inaccurate or incomplete, you have the right to request corrections or updates.

Right to Erasure

You can request deletion of your personal information, subject to certain legal exceptions such as record-keeping requirements or ongoing contractual obligations.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and to transmit it to another service provider where technically feasible.

Right to Object

You can object to processing of your personal information for direct marketing purposes or based on legitimate interests. We will honor your objection unless we have compelling legitimate grounds.

Right to Restrict Processing

In certain circumstances, you can request that we limit how we process your information while we address your concerns about accuracy or legitimacy of processing.

Right to Withdraw Consent

Where processing is based on your consent, you can withdraw that consent at any time. This does not affect the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us at info@domain.com or +81 3 5768-4231. We will respond to your request within 30 days.

Your Rights and Opt-Out Instructions

You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:

• Avoid filling out contact forms, account registrations, or any data-submitting features
• Disable cookies through your browser settings (see our Cookie Policy for more details)
• Contact us directly to request the deletion of any previously shared personal data

We respect your privacy choices. If you would like us to delete your data, please reach out to us at the contact details provided on our Contact page. We will process your request promptly.

International Data Transfers

While our primary operations are based in Japan, we may use service providers located in other countries. When we transfer personal information internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or other legally recognized transfer mechanisms, to protect your data in accordance with applicable privacy laws.

Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the effective date at the top of this page and may provide additional notice through our website or via email. We encourage you to review this policy regularly to stay informed about how we protect your information.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Kando-sha

2-8-7 Meguro, Meguro-ku

Tokyo 153-0063, Japan

Phone: +81 3 5768-4231

Email: info@domain.com

Contact Information