The operator of du-o ("we," "us") runs du-o (du-o.com), an information and consulting service for overseas companies launching apps, games, and e-commerce in Japan. This Privacy Policy explains what personal information we collect through du-o, why we collect it, and how you can control it. We handle personal information in accordance with Japan's Act on the Protection of Personal Information (APPI) and other applicable laws.
If this policy is provided in other languages and the versions differ, the English version prevails.
- Who we are
- Information we collect
- How we use it
- Cookies and analytics
- Service providers and sharing
- International transfers
- How long we keep it
- Security measures
- Your rights
- EEA and UK users
- California users
- Children
- Changes to this policy
- Contact us
1. Who we are
Our company name, address and representative are listed on the Operator information page.
2. Information we collect
Information you give us
| Contact form | Name, company or organization, email address, and the details of your inquiry |
|---|---|
| Newsletter sign-up | Email address |
| Email and meetings | Anything you choose to share when you correspond with us after an inquiry |
Please do not include sensitive information (such as health data, or racial or religious information) or confidential information about third parties in your inquiry.
Information collected automatically
When you visit du-o, your browser and our analytics tools may collect your IP address, browser and device type, referring page, pages viewed, time spent, and approximate location (country or city level). See Cookies and analytics.
3. How we use it
- To reply to your inquiry and, where you ask us to, propose or provide our services
- To send the du-o newsletter (market data, regulatory updates, new articles) to people who subscribed
- To understand how the site is used and to improve our articles and services
- To prevent spam, abuse, and security incidents
- To comply with legal obligations
We will not use your personal information for any other purpose without your consent, except where the law permits.
4. Cookies and analytics
We use Google Analytics, provided by Google LLC, to measure site traffic. Google Analytics uses cookies to collect information such as pages viewed and the approximate location of visitors. This information does not identify you by name. For how Google handles this data, see How Google uses information from sites or apps that use its services.
We also use Microsoft Clarity, provided by Microsoft Corporation, to see how visitors use our pages through heatmaps and anonymized session replays (mouse movement, clicks and scrolling). Clarity masks text you type into forms. For how Microsoft handles this data, see the Microsoft Privacy Statement.
You can block cookies in your browser settings, or opt out of Google Analytics with the Google Analytics Opt-out Browser Add-on. We do not use cookies for targeted advertising on du-o.
If you visit from the European Economic Area, the United Kingdom or Switzerland, we do not store analytics cookies until you give consent (we use Google Consent Mode). You can change your choice at any time.
5. Service providers and sharing
We do not sell your personal information. We do not provide it to third parties except in the following cases:
- With your consent
- When we entrust its handling to service providers within the scope needed for the purposes above. We select providers carefully and supervise them. Our main providers are:
- Google LLC (USA): Google Forms and Google Sheets (receiving and storing form submissions), Google Workspace (email), Google Tag Manager, and Google Analytics
- Microsoft Corporation (USA): Microsoft Clarity (site usage analysis)
- Website hosting and newsletter delivery providers
- When required by law, or when needed to protect someone's life, body, or property and it is difficult to obtain your consent
- In connection with a merger or other business succession
We provide some of the services described on du-o together with its group companies. If your inquiry concerns a service operated by a group company, we will ask for your consent before passing on your details.
6. International transfers
We are based in Japan, so information you send us is processed in Japan. Some of our service providers, including Google LLC, may store or process it on servers outside Japan, including in the United States.
- Transfers out of Japan: Where we entrust personal data to a provider in another country, we confirm that the provider maintains a system that meets the standards set by Japan's Personal Information Protection Commission, and we take the measures needed to ensure that the provider continues to protect the data appropriately. On request, we will provide information about these measures. Information on the personal information protection systems of foreign countries is published by the Personal Information Protection Commission (in Japanese).
- Transfers into Japan from the EEA and UK: The European Commission has recognized Japan as providing an adequate level of protection for personal data (adequacy decision of January 2019). The UK recognizes the same.
7. How long we keep it
| Inquiries | Three years after our last communication with you, or longer if a business relationship or legal obligation requires it |
|---|---|
| Newsletter | Until you unsubscribe. We then delete your address or keep it only on a suppression list so that we do not email you again. |
| Analytics data | Up to 14 months (Google Analytics retention setting). Microsoft Clarity keeps session replays for 30 days and heatmap data for up to 13 months. |
8. Security measures
We take the following measures to keep personal data secure:
- Policies: We have adopted this policy and internal rules on how personal data is handled.
- Organizational: We appoint a person responsible for personal data and have a process for reporting and responding to incidents.
- Staff: We train employees on personal data handling and bind them to confidentiality.
- Physical: We control who can enter areas where personal data is handled, and we prevent the theft or loss of devices.
- Technical: We limit access to form responses to the staff who need them, and we use multi-factor authentication and encrypted connections (HTTPS).
- Overseas environment: We store data with providers in the United States and elsewhere after reviewing the personal data protection systems of those countries.
9. Your rights
You may ask us to disclose the personal data we hold about you, including records of its provision to third parties. You may also ask us to correct, add to, or delete it, or to stop using it or providing it to third parties. We will respond within a reasonable period after verifying your identity, as required by law. Contact us using the details in section 14.
Unsubscribing: Every newsletter includes an unsubscribe link. You can also contact us and we will remove your address.
10. EEA and UK users
If you are in the European Economic Area or the United Kingdom, the GDPR or UK GDPR may also apply to our processing. Our legal bases are:
- Consent: to send the newsletter. You can withdraw consent at any time by unsubscribing.
- Steps before entering into a contract / legitimate interests: to respond to your inquiry and to discuss our services with you
- Legitimate interests: for site analytics, security, and service improvement
In addition to the rights above, you have the right to data portability, the right to object to processing based on legitimate interests, and the right to lodge a complaint with your local data protection authority.
11. California users
We do not sell or share personal information as those terms are defined in the California Consumer Privacy Act (CCPA), as amended. The categories of information we collect, our purposes, and how long we keep it are described above. You may request to know, correct, or delete your personal information by contacting us. We will not treat you differently for exercising these rights.
12. Children
du-o is a business service and is not directed at children under 16. We do not knowingly collect personal information from children.
13. Changes to this policy
We may update this policy when laws or our services change. We will post the updated policy on this page with a new effective date. If we make material changes, we will announce them on du-o.
14. Contact us
For questions or requests about personal information, please contact:
| Contact | du-o Privacy Desk |
|---|---|
| Online | Contact form (please write "Privacy request" in your message) |
| The address listed on the Operator information page |
We can respond in English or Japanese.