Legal
Privacy Policy
Cascade Pivot takes your privacy seriously. This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have. Last updated: May 2025.
Our commitment
Cascade Pivot is committed to handling personal data with care, transparency, and respect. We collect only what is necessary to provide our services and communicate with people who reach out to us. We do not sell personal data to third parties.
This policy applies to information collected through this website. By using our site, you acknowledge that you have read and understood this policy.
Data we collect
Information you provide directly
When you fill out our contact form, we collect your name, email address, and the content of your message. Providing a subject line is optional. This information is used solely to respond to your enquiry.
Cookies and tracking data
If you consent, we may collect anonymized data about how you use the site — pages visited, time spent, and general navigation patterns — through analytics cookies. See our Cookie Policy for full details.
Technical data
Our web server may automatically log standard technical information such as your IP address, browser type, and referring URL. This data is used for security purposes and is not linked to personal identities.
Legal basis for processing
Consent: Where you have provided explicit consent — such as accepting analytics cookies or submitting the contact form — we process data on that basis.
Legitimate interest: We may process certain technical data where we have a legitimate interest in maintaining the security and performance of this website.
Contractual necessity: If you engage with our services, we process the data necessary to provide those services.
How we use your data
Data collected through the contact form is used to respond to your message and, if relevant, to provide the service you've enquired about.
Analytics data is used in aggregate form to understand how visitors use the site and to make improvements. It is not used to identify individual visitors.
We do not use your data for automated decision-making or profiling, and we do not sell or rent personal data to third parties for marketing purposes.
Third-party services
We may use trusted third-party analytics services (such as Google Analytics) to understand site usage. These services may set their own cookies if you have consented to analytics. Their use of data is governed by their own privacy policies.
We do not share personally identifiable information from contact form submissions with any third party unless required by law.
How long we keep data
Contact form data is retained for as long as necessary to provide the requested service or to respond to the enquiry — typically no longer than 12 months unless an ongoing relationship continues.
Analytics data is retained in aggregate, anonymized form for up to 26 months.
You may request deletion of your data at any time by contacting us through the Contact page.
How we protect your data
We use industry-standard security measures to protect data transmitted through this website, including HTTPS encryption for all communications.
Access to personal data is limited to those who need it to respond to your enquiry or provide the service you have requested.
In the unlikely event of a data breach that poses a risk to your rights, we will notify affected individuals and relevant authorities as required by applicable law.
Your rights
Right to access: You may request a copy of personal data we hold about you.
Right to rectification: You may ask us to correct inaccurate or incomplete data.
Right to erasure: You may request that we delete your personal data, subject to legal obligations.
Right to data portability: Where applicable, you may request your data in a structured, machine-readable format.
Right to object: You may object to certain types of processing, including marketing communications.
Right to withdraw consent: You may withdraw any previously given consent at any time. This does not affect the lawfulness of prior processing.
Your Rights and Opt-Out Instructions
You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:
- →Avoid filling out contact forms, account registrations, or any data-submitting features.
- →Disable cookies through your browser settings (see our Cookie Policy for more details).
- →Contact us directly to request the deletion of any previously shared personal data.
We respect your privacy choices. If you would like us to delete your data, please reach out to us at the contact details provided on our Contact page. We will process your request promptly.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised date. Continued use of the site after changes are posted constitutes acceptance of the updated policy.
Retention and storage of personal information
Cascade Pivot retains personal information only for the period required to fulfil the original purpose for which it was collected, or as required by Japanese law (Act on the Protection of Personal Information, APPI Article 19). For most contact-form submissions and consultation records, our retention period is up to 36 months from your last interaction; transactional records (e.g., invoices, refunds) are retained for the seven-year period mandated by Japanese tax law. After the retention period elapses, data is securely deleted or anonymised in line with our internal records-management policy. You may request earlier deletion at any time using the contact details below — we will action verified requests within 30 calendar days unless legally required to retain the information.
International transfers and cross-border safeguards
While Cascade Pivot operates from Japan and stores most data on infrastructure located within the Japanese jurisdiction, certain processors used for hosting, email delivery and aggregated analytics may be located in the European Union, the United Kingdom or the United States. Where personal information is transferred outside Japan, transfers are made under safeguards required by APPI Article 28 — namely (i) the destination jurisdiction recognises an equivalent personal-information-protection framework, or (ii) the processor is contractually bound to standards substantially equivalent to APPI, or (iii) you have provided explicit informed consent at the point of collection. A list of sub-processors currently engaged is available on request.
Children's privacy and accessibility
Our services are not directed to children under sixteen (16). We do not knowingly collect personal information from minors and we apply additional verification when an account or enquiry appears to originate from a person below the age of consent. If you become aware that a child has provided us with personal information, please contact us using the channels below and we will delete the records promptly. We design our forms and consent flows to meet Japanese web-accessibility expectations (JIS X 8341-3) wherever practical; if you encounter an accessibility barrier preventing you from exercising your rights, please tell us and we will provide an alternative channel.
Contact — personal-information protection manager
Cascade Pivot — Personal Information Protection Manager
Address: 〒179-0072 Tokyo, Nerima Ward, Hikarigaoka,
Phone: +81 3-3979-5184
Email: info@cascadepivot.com
For complaints regarding personal-information handling that we cannot resolve to your satisfaction, you may contact the Personal Information Protection Commission of Japan (PPC, 個人情報保護委員会) at www.ppc.go.jp.