Privacy Policy
Last Updated: 31st March 2023
XPAND K.K. ("We," "Us," or "Our") is committed to protecting the privacy of our users ("You," "Your") and complying with the General Data Protection Regulation (GDPR). This Privacy Policy outlines the types of information we collect, how we use it, and the rights you have concerning your personal data. By using our website or services, you agree to the terms outlined in this Privacy Policy.
1.Data Controller
XPAND K.K. 6-6-1 Ginza, Chuo-ku, Tokyo, Japan
2.Personal Data Collection and Purposes
We collect and process personal data for the following purposes:
a) Account creation and management: We collect your name, email address, and other relevant information when you register for an account, subscribe to our newsletters, or use our services.
b) Providing and improving our services: We may collect data such as your browsing history, device information, and location data to enhance your user experience, provide personalized content, and analyze usage patterns to improve our services.
c) Communication: We may use your contact information to send you important service updates, marketing communications, and respond to your inquiries.
d) Legal compliance: We may process personal data as required by applicable laws, regulations, or in response to requests from relevant authorities.
3.Legal Basis for Processing
We process personal data based on the following legal grounds:
a) Consent: We may process your data based on your explicit consent for specific purposes, such as receiving newsletters or participating in surveys.
b) Contractual necessity: We may process your data to fulfill our contractual obligations, such as providing services or products you requested.
c) Legal obligations: We may process your data to comply with legal requirements, such as tax or regulatory obligations.
d) Legitimate interests: We may process your data for our legitimate interests, such as improving our services, providing customer support, or protecting our business interests.
4.Data Retention
We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, or enforce agreements.
5.Data Sharing
We may share your personal data with trusted third parties to help us provide, maintain, and improve our services. We ensure that these parties adhere to the same data protection standards as we do. We may also share your personal data if required by law, to protect our rights, or in connection with a merger, acquisition, or sale of our assets.
6.Your Rights
Under the GDPR, you have the following rights concerning your personal data:
a) Access: You have the right to request a copy of your personal data held by us.
b) Rectification: You have the right to request correction of any inaccurate or incomplete personal data.
c) Erasure: You have the right to request the deletion of your personal data under certain circumstances.
d) Restriction: You have the right to request the restriction of processing your personal data under certain circumstances.
e) Portability: You have the right to request the transfer of your personal data to another organization or to yourself.
f) Objection: You have the right to object to the processing of your personal data under certain circumstances.
g) Withdraw consent: If we are processing your personal data based on consent, you have the right to withdraw your consent at any time.
To exercise your rights, please contact us at the enquiry form.
7.Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. However, no method of data transmission or storage is 100% secure, and we cannot guarantee absolute security.
8.International Data Transfers
Your personal data may be transferred to, stored, and processed in countries outside of your country of residence, including countries outside the European Economic Area (EEA). In such cases, we ensure that the receiving country provides an adequate level of data protection or that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
9.Third-Party Websites
Our website may contain links to third-party websites. This Privacy Policy does not apply to these websites, and we are not responsible for their privacy practices or content. We recommend that you review the privacy policies of any third-party websites you visit.
10.Children's Privacy
Our services are not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe that your child has provided us with personal data without your consent, please contact us at the enquiry form, and we will take appropriate steps to delete such data.
11.Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated Privacy Policy on our website or by sending an email notification. Your continued use of our services following the posting of changes constitutes your acceptance of those changes.
12.Contact Us
If you have any questions, concerns, or complaints regarding this Privacy Policy or our data protection practices, please contact us at:
XPAND K.K. 6-6-1 Ginza, Chuo-ku, Tokyo, Japan
If you believe that your rights have been violated, you also have the right to lodge a complaint with the appropriate data protection authority in your country of residence.
13.Data Protection Officer
We have appointed a Data Protection Officer (DPO) to oversee our data protection efforts and ensure compliance with the GDPR. If you have any questions or concerns about our data protection practices, you can contact our DPO at the following address:
Data Protection Officer XPAND K.K. 6-6-1 Ginza, Chuo-ku, Tokyo, Japan
14.Cookie Policy
Our website uses cookies to improve your user experience, personalize content, and analyze website traffic. Cookies are small text files stored on your device by your web browser. You can manage your cookie preferences through your browser settings.
a) Types of cookies we use:
i) Strictly necessary cookies: These cookies are essential for the operation of our website and cannot be disabled.
ii) Performance cookies: These cookies collect information about how visitors use our website, such as which pages are most popular and if there are any errors. The data collected is anonymous and only used to improve our website.
iii) Functionality cookies: These cookies allow our website to remember choices you make, such as your language or region, and provide personalized features.
iv) Targeting or advertising cookies: These cookies are used to deliver relevant advertisements tailored to your interests on our website and third-party websites.
b) Third-party cookies: We may use third-party services.
By using our website, you consent to the use of cookies as described in this Privacy Policy. If you do not wish to accept cookies, you can adjust your browser settings to block or delete them. However, some features of our website may not function properly without cookies.
15.Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of Japan. Any disputes arising from or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of Japan.
Thank you for taking the time to read our Privacy Policy. Your privacy is important to us, and we are committed to protecting your personal data in compliance with the GDPR. Please do not hesitate to contact us if you have any questions or concerns.