Privacy Policy

Name: SoA Co., Ltd.

Location: Kawagoe, Saitama, Japan (we will provide our full address without delay upon request)

Representative: Soichi Saito, Representative Director / CEO

We may collect the following personal information in connection with your use of the Site.

• Information you enter in the contact form (topic, company or organization, department, name, email address, phone number, country or region, and your message)
• Information about your use of the Site (date and time of access, browser type, referrer, identifiers such as cookies, IP address, etc.)

We use the personal information we collect within the scope of the following purposes.

• To respond to and follow up on inquiries
• To provide information about our business and services
• To operate, maintain and improve the Site and analyze its use
• To prevent misuse and abuse
• To comply with laws and protect our rights

We do not provide personal information to third parties without your prior consent, except in the following cases.

• Where required by law
• Where necessary to protect a person's life, body or property and it is difficult to obtain your consent
• Where necessary to cooperate with a national or local government body performing duties prescribed by law

We may outsource all or part of the handling of personal information to the extent necessary to achieve the purposes of use. In such cases we appropriately assess and supervise the contractor.

We use the following external services to operate the Site and respond to inquiries. All of these providers are located in a foreign country (the United States), and the content of your inquiry may be processed on servers outside Japan, including in that country.

- Cloudflare, Inc. (United States): serving the Site, bot protection for the contact form (Turnstile), and storing a record of inquiries

- Resend (United States): delivering inquiry notifications to us and acknowledgment emails to the sender

- Google LLC (United States): the email service through which we receive notifications

To prevent abuse, the sender’s IP address is converted into a form that cannot be reversed (a keyed hash) and kept for only a few minutes before it is deleted automatically (at the latest by the next morning). Our delivery provider (Cloudflare, Inc.) may keep records of communications, including IP addresses, for security purposes for the period it determines. To avoid sending duplicate acknowledgments, the email address is converted in the same way and kept for up to two hours.

Records of inquiries stored in our management system are automatically anonymized (name, email address and content deleted) two years after receipt.

The Site may use cookies and similar technologies to improve convenience and understand usage. The map on the contact page loads an external service (Google Maps) only when you select “Show map”. Once loaded, that service may set its own cookies. You can disable cookies in your browser settings, in which case some functions of the Site may not be available.

To improve the Site, we count page views, the type of referring source (such as search or social media) and the use of the contact form (such as the number of views and submissions) as daily totals, without cookies. These totals do not include information that identifies individuals, such as IP addresses, browsing history or what you enter in the form.

We take the following measures to prevent leakage, loss or damage of personal information.

• Organizational: our Representative Director is responsible for the handling of personal information, and access is limited to the persons and scope necessary.
• Technical: communications are encrypted (SSL/TLS); stored email addresses and inquiry content are encrypted; access to administration screens requires authentication and keys; the contact form uses bot protection and rate limits. We also automatically detect failures in storing or notifying inquiries and sudden increases in suspicious submissions, and alert the person responsible.
• Physical: devices used to handle personal information are protected by login authentication.
• Understanding the external environment: we use services of providers located in the United States (Cloudflare, Inc., Resend and Google LLC). We take the measures above with an understanding of the personal information protection system of the United States.

You may request notification of the purpose of use, disclosure, correction, addition or deletion, suspension of use or deletion, and suspension of provision to third parties of your personal information held by us. Please contact us through the contact point below (choose “Other” as the topic in the contact form). We will respond without delay in accordance with the law after verifying your identity. We do not charge a fee for these requests.

For inquiries, requests and complaints regarding this Policy or the handling of personal information, please use the contact form on the Site.

Contact us

We may revise this Policy in response to changes in law or in our business. The revised Policy takes effect when posted on the Site.