Privacy Policy

1. Who we are

The controller of your personal data is YKBridge G.K. (YKBridge合同会社), Miyamasuzaka Building 609, 2-19-15 Shibuya, Shibuya-ku, Tokyo 150-0002, Japan, represented by Yuki Kishi. We also operate from Amsterdam, the Netherlands. For anything in this policy, write to y.kishi@ykbridge.net or use the contact page.

2. What we collect, and why

We only collect what you give us or what is needed to run the site.

• —Contact form. Your name, email address, company and the message you write. Used to reply to you and, if the conversation continues, to prepare for it.
• —Playbook request. Your name, work email and company. Used to send you the playbook you asked for and, where you have agreed, occasional notes on Japan market entry. You can opt out of those at any time by replying to any email.
• —Call booking. When you book a call through our scheduler (Calendly), it asks for your name, email, company, website and any notes. Used to hold the call and prepare for it. Calendly's own privacy policy also applies to the booking page.
• —Careers applications. The details you submit about your background and availability. Used to assess your application and to contact you about it.
• —Correspondence. Emails and calls with us, which we keep as part of the normal record of a business relationship.
• —Site usage. We use Google Analytics 4 to understand which pages are read and how visitors arrive. It sets cookies and records pages viewed, approximate location, device and browser type, and a pseudonymous identifier. It is not used for advertising. Our hosting provider also keeps short-lived server logs (IP address, time, pages requested) for security.

3. Legal bases (where the GDPR applies)

If you are in the European Economic Area or the United Kingdom, we rely on the following bases: taking steps at your request before entering into a contract and performing it (replying to enquiries, holding calls, running engagements); our legitimate interest in running and securing this site and in understanding how it is used; and your consent, where we ask for it (for example, for follow-up notes after a playbook download). You can withdraw consent at any time without affecting what was done before.

4. Who processes data on our behalf

We do not sell or rent personal data. We share it only with service providers that act on our instructions:

• —Calendly (scheduling of calls)
• —Web3Forms (delivery of contact, playbook and careers form submissions to our inbox)
• —Google (Google Analytics; our email and calendar)
• —Vercel (hosting of this site)

These providers are established in the United States and the European Union. Transfers from the EEA to Japan are covered by the European Commission's adequacy decision; transfers to the United States rely on the providers' certification under the EU–US Data Privacy Framework or on standard contractual clauses. We may also disclose data where the law requires it.

5. How long we keep it

• —Enquiries and correspondence: for as long as the conversation or relationship is active, and up to three years after the last contact.
• —Playbook and newsletter contacts: until you opt out.
• —Careers applications: up to one year after the application closes, unless you ask us to delete them sooner.
• —Analytics data: 14 months, after which Google Analytics deletes it automatically.

6. Your rights

You can ask us to tell you what personal data we hold about you, to correct it, to delete it, to restrict or object to how we use it, or to give it to you in a portable format. Where we rely on consent, you can withdraw it. To exercise any of these, email us at the address above; we will respond within one month. If you are in the EEA or the UK you can also complain to your data protection authority — in the Netherlands, the Autoriteit Persoonsgegevens. In Japan, requests for disclosure, correction or suspension of use under the Act on the Protection of Personal Information can be made the same way.

7. Cookies and analytics choices

The only cookies this site sets itself are those of Google Analytics (names beginning with _ga). The embedded scheduler on the contact page is served by Calendly and may set its own cookies when you use it. You can block or delete cookies in your browser settings, or install Google's Analytics opt-out add-on. The site works without cookies.

8. Security

Data is transmitted over HTTPS and stored with providers that maintain recognised security certifications. Access within YKBridge is limited to the people who need it for the purposes above.

9. Children

This site is directed at businesses and is not intended for anyone under 18. We do not knowingly collect data from children.

10. Changes

We will post any changes to this policy on this page with a new effective date. Material changes affecting data we already hold will be notified to the people concerned.