Legal
Privacy Policy
Last updated: 18 June 2025
Naze Blend Zone takes the handling of personal data seriously. This policy explains what information we collect, why we collect it, how it is used, and what rights you hold over your own data. We operate under Japanese data protection law and, where relevant, the General Data Protection Regulation (GDPR) as it applies to interactions with individuals in the European Economic Area.
If you have questions that this document does not answer, please use the contact form on our Contact page.
1. What data we collect and how
We collect a limited range of personal data, only where a clear reason exists. The categories below cover everything we currently gather.
Contact form submissions
When you send a message through our contact form, we receive your name, email address, and the content of your message. This information is used only to respond to your enquiry and is not added to any mailing list without your explicit consent.
Legal basis: Legitimate interest (responding to a request you initiated).
Retention: Up to 12 months from the date of your enquiry, then deleted.
Cookies and analytics
If you accept analytics cookies, we collect anonymised usage data — which pages were visited, how long was spent on each, and general referral information. We do not collect IP addresses in identifiable form. See our Cookie Policy for full details.
Legal basis: Consent (you choose to accept or decline via the cookie banner).
Retention: Analytics data is aggregated and anonymised after 26 months.
Engagement correspondence
For organisations that proceed to a paid engagement, we retain project-related communications and scoping documents for the duration of the engagement and for three years thereafter, for audit and legal compliance purposes.
Legal basis: Contractual necessity and legal obligation.
Retention: Three years post-engagement close.
2. How we use your data
- — To respond to messages and enquiries you send through this website.
- — To manage and fulfil engagement agreements where a project has been agreed.
- — To measure website performance through anonymised analytics (only where consent has been given).
- — To meet legal, tax, and regulatory obligations applicable to Naze Blend Zone as a business operating in Japan.
Third-party sharing: We do not sell your personal data. Analytics data may be processed by our analytics provider under a data processing agreement. No personal data from contact submissions is shared with third parties except where required by Japanese law.
3. How we protect your data
- — All data transmitted via this website is encrypted using TLS (HTTPS).
- — Access to contact data is restricted to personnel directly involved in responding to enquiries.
- — Storage systems are protected by access controls and reviewed periodically.
- — In the event of a data breach that may affect your rights, we will notify you and the relevant authority within the timeframe required by applicable law.
4. Your rights
Depending on your location, you may hold the following rights in relation to personal data we hold about you:
- — Access: You can request a copy of any personal data we hold about you.
- — Rectification: You can ask us to correct inaccurate information.
- — Erasure: You can request that we delete your data, subject to any legal retention requirements.
- — Portability: Where technically feasible, you can ask for your data in a commonly used, machine-readable format.
- — Objection: You can object to processing based on legitimate interest, and we will review that objection promptly.
To exercise any of these rights, contact us through the Contact page. We will respond within 30 days.
Data Controller and Contact
The data controller responsible for personal information collected through this website is:
Naze Blend Zone
Representative: 山下 優一
〒892-0842 鹿児島県Kagoshima-shi Ichinomiya-cho 1-8-3
Tel: +81 99-257-4891
Email: contact@naze-blendzone.com
If you wish to exercise any of your rights — access, correction, deletion, restriction, portability, or objection — please reach out by email. We aim to respond within two weeks. Where a request cannot be fulfilled, we will explain the reason in writing.
If you are unsatisfied with our response, you have the right to lodge a complaint with the Personal Information Protection Commission (PPC) of Japan or the relevant supervisory authority in your country of residence.
Retention Periods
We keep personal data only for as long as necessary to fulfil the purpose for which it was collected. The table below sets out our standard retention periods.
Enquiry and contact data
Retained for up to 24 months from the date of your last communication with us, then securely deleted or anonymised.
Analytics data
Aggregated and anonymised after 26 months. Raw session identifiers are not retained beyond the active session.
Project and engagement records
Where a paid engagement proceeds, related documents are held for three years post-engagement for legal compliance, then disposed of securely.
Security Measures
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or alteration. These include:
- TLS encryption for all data in transit
- Access controls limiting data to authorised personnel only
- Regular review of our security posture and third-party processors
- Prompt notification in the event of a data breach, as required by applicable law
Your Rights and Opt-Out Instructions
You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:
- —Avoid filling out contact forms, account registrations, or any data-submitting features.
- —Disable cookies through your browser settings (see our Cookie Policy for more details).
- —Contact us directly to request the deletion of any previously shared personal data.
We respect your privacy choices. If you would like us to delete your data, please reach out to us at the contact details provided on our Contact page. We will process your request promptly.