How Tsukumogami Protects Your Personal Information
We are committed to handling your data responsibly and transparently. This policy explains what information we collect, how we use it, and the rights available to you.
Tsukumogami K.K., located at 6-1-10 Higashiyama, Chikusa-ku, Nagoya 464-0807, Japan, is committed to protecting the privacy and personal information of all individuals who interact with our website and services. This privacy policy describes our practices regarding the collection, use, storage, and disclosure of personal data. It applies to information gathered through our website at domain.com, through direct communications, and in the course of providing our customer behavior analytics services.
We process personal data in accordance with Japan's Act on the Protection of Personal Information and other applicable data protection regulations. Our commitment to data privacy extends beyond mere compliance; we consider responsible data handling to be a foundational principle of our business operations. We regularly review and update our privacy practices to reflect changes in law, technology, and our own service offerings, ensuring that your information is always treated with the care it deserves.
This policy was last updated on February 1, 2026. We encourage you to read this document carefully and to contact us at info@seasidewalkstories.com if you have any questions about how your information is handled. By using our website or engaging our services, you acknowledge that you have read and understood this policy. If we make significant changes to our privacy practices, we will notify affected individuals through appropriate channels before such changes take effect.
Regulatory Compliance Framework
Tsukumogami operates in compliance with Japan's Act on the Protection of Personal Information, commonly referred to as APPI, as well as relevant guidelines issued by the Personal Information Protection Commission. For clients and contacts located in the European Economic Area, we also adhere to the principles established by the General Data Protection Regulation where applicable. Our compliance framework includes regular internal audits, staff training on data handling procedures, and documented processes for responding to data subject requests. We maintain appropriate records of processing activities and have designated a privacy officer responsible for overseeing compliance and addressing inquiries from individuals regarding their personal data.
Data We Collect
Categories of Information
Contact Information
We collect names, email addresses, phone numbers, company names, and job titles that you provide when completing contact forms, requesting consultations, or corresponding with our team through any communication channel.
Provided directly by you through forms, email, phone, and in-person meetings.
Technical Data
When you visit our website, we automatically collect certain technical information including your IP address, browser type, operating system, referring pages, pages visited, and the dates and times of your visits through server logs and analytics tools.
Collected automatically through server logs, cookies, and web analytics platforms.
Service Engagement Data
For clients using our analytics services, we process information related to project scope, communication records, service preferences, and feedback provided during the course of our professional engagement to ensure effective delivery.
Generated through service agreements, project communications, and ongoing client interactions.
Usage Analytics
We gather aggregated information about how visitors interact with our website content, including which pages are viewed, how long visitors spend on each page, navigation paths, and interactions with site features and downloadable resources.
Collected through analytics cookies and third-party measurement tools on our website.
Collection Methods
1
Directly from you when you complete a contact form, send an email, make a phone inquiry, or provide information during a consultation session or service engagement with our team.
2
Automatically through cookies and similar tracking technologies when you browse our website, as described in our separate Cookie Policy available at domain.com/cookies.
3
From third-party sources in limited circumstances, such as publicly available business directories, professional networking platforms, or referral partners, always in compliance with applicable data protection laws.
Legal Basis for Processing
Tsukumogami processes personal data on several legal bases depending on the context and purpose of the processing activity. When you submit a contact form or consultation request, we process your information based on your consent and our legitimate interest in responding to your inquiry. For existing clients, data processing is necessary for the performance of our service agreement and to fulfill our contractual obligations. Technical data collected through cookies is processed based on your consent, which you provide through our cookie preference controls. We may also process data where necessary to comply with legal obligations under Japanese law, including regulatory reporting requirements and record-keeping mandates. In all cases, we strive to collect only the minimum amount of personal data required for the specified purpose and to retain it only for as long as necessary to fulfill that purpose.
How We Use Data
We use the personal data we collect for specific, defined purposes that support our business operations and service delivery. Each category of data is processed only for the purposes described below, and we do not use personal information in ways that are incompatible with these stated purposes without providing notice and obtaining consent.
Service Delivery
We use contact and engagement data to provide our customer behavior analytics services, including communicating about project milestones, delivering analytical outputs, coordinating integration activities, and providing ongoing support. This processing is essential to fulfilling our service commitments and maintaining effective working relationships with clients.
Communication Management
Contact information is used to respond to inquiries, schedule consultations, send service-related updates, and share relevant industry insights when you have opted to receive them. We respect communication preferences and provide clear mechanisms for adjusting or withdrawing consent for non-essential communications at any time.
Website Improvement
Technical and usage analytics data helps us understand how visitors interact with our website, identify areas for improvement, and optimize content presentation. This information is processed in aggregate form and does not typically involve the identification of individual visitors, contributing to a continually improved browsing experience for all users.
Legal Compliance
In certain circumstances, we process personal data to comply with legal obligations, respond to lawful requests from authorities, enforce our terms of service, or protect our rights and the rights of others. Such processing is conducted in accordance with applicable legal requirements and is limited to the minimum information necessary to fulfill the obligation.
Third-Party Data Sharing
Tsukumogami does not sell personal data to third parties. We share information only in limited circumstances and with entities that are bound by appropriate confidentiality and data protection obligations. The categories of third parties are described below.
Technology infrastructure and hosting providers
Web analytics and performance measurement services
Professional advisors including legal and accounting firms
Regulatory authorities when required by law
Data Security Measures
Tsukumogami implements comprehensive technical and organizational security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. Our security framework is regularly reviewed and updated to address emerging threats and align with industry standards for data protection.
Encryption Protocols
All data transmitted between your browser and our servers is protected using TLS encryption. Sensitive data stored in our systems is encrypted at rest using industry-standard algorithms, ensuring that information remains protected even in the unlikely event of unauthorized physical access to storage media.
Access Control Systems
Access to personal data is restricted to authorized personnel who require it for their specific job functions. We employ role-based access controls, multi-factor authentication, and regular access reviews to ensure that only appropriate individuals can view or process personal information within our systems.
Monitoring and Auditing
Our systems are continuously monitored for suspicious activity and potential security incidents. We maintain detailed audit logs of data access and processing activities, and conduct regular security assessments to identify and address vulnerabilities before they can be exploited by unauthorized parties.
Incident Response Procedures
We maintain a documented incident response plan that defines procedures for detecting, containing, and remediating data security incidents. In the event of a breach affecting personal data, we will notify affected individuals and relevant authorities within the timeframes required by applicable law and take all necessary corrective measures.
Your Privacy Rights
Under applicable data protection laws, you have specific rights regarding the personal information that Tsukumogami holds about you. We are committed to honoring these rights and providing timely responses to all valid requests.
Right of Access
You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed, the purposes of processing, and any third parties with whom it has been shared. We will provide this information in a commonly used electronic format within a reasonable timeframe.
Right to Correction
If you believe that any personal data we hold about you is inaccurate, incomplete, or outdated, you have the right to request correction. We will update the relevant records promptly upon verification of the correction request and notify any third parties who received the original data.
Right to Deletion
You may request that we delete your personal data when it is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when there is no other legal basis for continued processing. Some data may be retained where required by law or legitimate business needs.
Right to Restrict Processing
In certain circumstances, you have the right to request that we restrict the processing of your personal data, for example while we verify the accuracy of contested information or evaluate whether our legitimate interests override your rights. During restriction, your data will be stored but not actively processed.
Right to Data Portability
Where technically feasible and applicable under law, you have the right to receive your personal data in a structured, commonly used, and machine-readable format. You may also request that we transmit this data directly to another organization where such transfer is technically practicable.
Right to Object
You have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis. Upon receiving your objection, we will cease processing unless we can demonstrate compelling grounds that override your interests, rights, and freedoms.
Exercising Your Privacy Rights
To exercise any of the rights described above, please contact our privacy team at info@seasidewalkstories.com or by post at our registered address: 6-1-10 Higashiyama, Chikusa-ku, Nagoya 464-0807, Japan. We will acknowledge your request within five business days and provide a substantive response within thirty days. In complex cases, we may extend this period by an additional thirty days, in which case we will inform you of the extension and the reasons for it. We may ask you to verify your identity before processing certain requests to protect against unauthorized access to personal data.
Updates to This Policy
Tsukumogami may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will post a prominent notice on our website and update the effective date shown at the beginning of this document. For significant changes that affect how we process personal data, we will make reasonable efforts to notify affected individuals directly through email or other appropriate communication channels before the changes take effect.
