Legal

Privacy Policy

This policy describes how Vault Zone Drift collects, uses, and protects personal information provided through this website. We handle personal data carefully and in accordance with applicable data protection law. Last reviewed: July 2025.

1. Data We Collect

Contact form data: When you use the contact form on this website, we collect the name, email address, and message content you provide. Subject line is optional. We use this information solely to respond to your enquiry.
Cookies and analytics: With your consent, we may collect anonymous usage data through analytics tools — pages visited, time on site, referral source. This data does not identify you individually. See our Cookie Policy for details.
Technical data: Standard server logs may include IP addresses and browser type. These are processed for security and troubleshooting purposes only and are not linked to personal identities.
Engagement correspondence: If an advisory engagement proceeds, written correspondence and documents shared during that process are handled under a separate confidentiality agreement, not under this policy.

2. How and Why We Use Your Data

Responding to enquiries: Contact form data is used to reply to the person who submitted it. We do not add enquirers to any mailing list or pass their details to third parties for marketing.
Improving the website: Anonymous analytics data, where consented to, helps us understand which parts of the site are useful and which may need revision.
Legal basis: Data submitted through the contact form is processed on the basis of legitimate interest in responding to your enquiry. Analytics cookies are processed only with your explicit consent.
Third-party sharing: We do not sell, rent, or trade personal data. Data may be processed by technical service providers (such as hosting providers) under appropriate data processing agreements.
Retention: Contact enquiry data is retained for as long as needed to respond and for a reasonable period thereafter in case of follow-up. Data is then deleted securely. If no engagement follows, we delete enquiry correspondence within 12 months.

3. Data Protection Measures

Encryption in transit: This website uses HTTPS. Data submitted through forms is encrypted during transmission.
Access controls: Access to stored contact data is restricted to those who need it to respond. We do not maintain large databases of user information.
Breach notification: In the unlikely event of a data breach affecting your personal information, we will notify affected individuals and relevant authorities as required by applicable law.

4. Your Rights

Right to access: You may request a copy of any personal data we hold about you.
Right to rectification: If information we hold is inaccurate, you may ask us to correct it.
Right to erasure: You may request deletion of personal data we hold about you, subject to any legal obligation to retain it.
Right to data portability: Where applicable, you may request your data in a structured, machine-readable format.
Right to object: You may object to certain types of processing, including direct marketing (which we do not carry out) and processing based on legitimate interest.
Exercising your rights: To exercise any of these rights, contact us via the Contact page. We will respond promptly and without unnecessary delay.

Your Rights and Opt-Out Instructions

You are not required to provide any personal information when using this website. If you prefer not to share your data, you may: avoid filling out contact forms, account registrations, or any data-submitting features; disable cookies through your browser settings (see our Cookie Policy for more details); or contact us directly to request the deletion of any previously shared personal data. We respect your privacy choices. If you would like us to delete your data, please reach out to us via our Contact page. We will process your request promptly.

Japan Act on Protection of Personal Information (APPI)

Vault Zonedrift operates in compliance with the Act on the Protection of Personal Information (個人情報の保護に関する法律), as amended in April 2022. As an entity providing business advisory services from our office at 〒600-8009 Kyoto, Kyoto-shi, Shimogyo-ku, Shijodori-Kawaramachi 4-3-21, we are classified as a personal information handling business operator under the Act.

When you submit a request through our contact form or arrange advisory consultations, we process only the categories of data described in this policy. We do not transfer personal information to third parties without your prior consent except where required by Japanese law, where necessary for the protection of human life, health or property, or where cooperating with national or local government authorities carrying out affairs prescribed by law.

Under the APPI, you have the right to request disclosure, correction, addition, deletion, cessation of use, or cessation of provision to third parties of your retained personal data. To exercise any of these rights, please contact us at +81 75-343-2159 or through our contact page. We will respond within a reasonable period, not exceeding two weeks from receipt of your request.

Records relating to strategy sessions are retained for 5 years following the conclusion of the consulting engagement, after which they are securely deleted. Cookie consent preferences are stored in your browser and may be cleared at any time through your browser settings.