ZECTA / LEGAL
ZECTA G.K. (“ZECTA”, “we” or “us”) handles personal information in accordance with the Act on the Protection of Personal Information of Japan and other applicable laws. This Policy explains how we collect and handle information through our business activities, website and inquiries.
1. Controller and contact point
Operator: ZECTA G.K.
Address: 3F R-Cube Aoyama, 1-3-1 Kita-Aoyama, Minato-ku, Tokyo 107-0061, Japan.
For questions or requests concerning personal information, use the CONTACT form on this website. We will provide additional information required to be made available under Japanese law, including representative details, upon a valid request where applicable.
2. Information we collect
Depending on the inquiry or engagement, we may collect names, organization and department names, job titles, business contact details, correspondence, project briefs, attachments and information given during calls or meetings. Systems supporting the website may process access times, IP addresses, browser/device information, referrer URLs and security logs. Please do not submit sensitive personal information unless we have expressly requested it for a legitimate purpose.
3. Purposes of use
We use information to (1) respond to inquiries and verify requests; (2) discuss projects, proposals, quotations and potential engagements; (3) perform services and manage projects; (4) fulfill contractual, accounting and legal obligations; (5) maintain security, prevent misuse and operate the website; and (6) improve our services and maintain necessary business correspondence. We will take appropriate steps if additional purposes require notice, publication or consent.
4. How information is obtained
Information may be obtained from forms, email, calls, meetings, business cards and other lawful sources. Providing information is generally voluntary, but we may be unable to respond where necessary contact details or a sufficient description of the inquiry are missing. We do not knowingly collect information by unlawful means.
5. Disclosure to third parties
We do not disclose personal data to third parties without appropriate consent unless permitted or required by law. When a project requires sharing with clients, project managers, architects, IT specialists, AV vendors or contractors, we assess the purpose and scope of sharing and the appropriate lawful basis. Processing by service providers on our behalf is managed separately from ordinary third-party disclosure under Japanese law.
6. Service providers and cloud systems
We may use external services for website hosting, contact forms, email and business information systems, subject to appropriate access controls and oversight. The website is developed using Framer. Before publication, we will reconcile this statement with the actual form delivery, data storage and subcontractor settings and supplement relevant information as required.
7. Processing outside Japan
Cloud services or projects involving overseas teams may result in information being stored or handled outside Japan. We review relevant countries, safeguards and the legal distinction between outsourcing and transfers to foreign third parties. Where applicable, we provide required information and obtain consent or implement other measures required under the APPI.
8. Security safeguards
We implement reasonable safeguards appropriate to the information involved, such as internal handling rules, role-based access, account authentication, device and cloud administration, suitable communication/storage protections and oversight of service providers. We may withhold technical details where disclosure would impair security.
9. Retention and disposal
Information is retained for the period reasonably needed for the purposes described, contractual and accounting requirements, legal retention duties and legitimate dispute handling. Information no longer needed is deleted or disposed of appropriately, subject to backups and legal obligations.
10. Individual rights and requests
Subject to applicable law, individuals may request information about the purposes of use and the disclosure, correction, addition, deletion, suspension of use, erasure or suspension of third-party provision of personal data, including applicable disclosure records. Submit a request through the CONTACT form and identify it as a personal information request. We may verify identity or authority and may decline a request where permitted by law.
11. Cookies and external transmissions
The website may use cookies, local storage, technical logs or similar technologies needed for operation, security or analytics. Please see our Cookie Policy for purposes, service providers and available choices. We will review any additional advertising, analytics or embedded services before enabling them.
12. Data incidents
If a data incident occurs, we will investigate, assess the impact, take appropriate corrective steps and, where Japanese law requires, notify the relevant authority and affected individuals.
13. Changes and effective date
This Policy may be updated when our operations, technologies or applicable laws change. Significant changes will be communicated appropriately.
Prepared / last updated: 9 November 2026 (pre-publication draft).