Privacy Policy

Yakumo Productions, of Nanpeidai 21-20, Matsue, Shimane 690-0854, Japan, respects your privacy. This policy explains what personal information we collect when you visit this website or contact us, why we collect it, who it reaches, and what you can ask us to do about it.

We are the data controller for this information under the EU and UK General Data Protection Regulation, and the personal information handling business operator under Japan’s Act on the Protection of Personal Information (APPI).

Information we collect

We only collect what you choose to give us, and what a web server unavoidably records in order to serve a page.

• Details you submit through our contact form: your name, your email address, the enquiry type you select, and the content of your message.
• Technical data recorded automatically in server and security logs: IP address, browser and operating system, the page requested, and the date and time.

We do not run advertising, we do not use tracking pixels, and we do not build profiles of visitors. Web fonts are served from our own server rather than a third party, so simply reading this site does not disclose your visit to a font provider.

Why we use it, and our legal basis

Under the GDPR we must state a lawful basis for each purpose. Under APPI we must announce our purpose of use. Both are set out here.

• To read and answer your enquiry, and to carry on the conversation that follows. Lawful basis: your consent, given when you submit the form, and our legitimate interest in responding to people who contact us.
• To discuss, quote for and carry out work you ask us about. Lawful basis: taking steps at your request before entering into a contract.
• To keep the site available and secure, including blocking abusive traffic and limiting automated form submissions. Lawful basis: our legitimate interest in protecting the service.

We will not use your details for anything else without asking you first. We do not sell personal information, and we do not make decisions about you by automated means.

Cookies

This site sets only the cookies it needs to function, such as those required for security and for the site to be delivered correctly. We do not currently use analytics or advertising cookies. If that changes we will update this policy and ask for your consent first, where consent is required.

You can block or delete cookies in your browser settings at any time. Blocking essential cookies may stop parts of the site working.

Who else sees your information

We do not share your personal information with third parties for their own purposes. A small number of service providers process it on our behalf, under contract and on our instructions only:

• Our web hosting provider, which stores the site and its server logs.
• Cloudflare, Inc., which delivers this site and filters malicious traffic, and in doing so processes your IP address and request details.
• Our email provider, which carries and stores messages sent through the contact form so that we can read and reply to them.

We may also disclose information where the law requires it, or where it is necessary to establish, exercise or defend legal claims.

Where your information is held

Yakumo Productions is based in Japan, so information you send us is handled in Japan. Our service providers may also process it in other countries, including the United States.

For visitors in the European Economic Area and the United Kingdom: the European Commission has decided that Japan provides an adequate level of protection for personal data, so transfers to us do not require additional safeguards. Where a provider processes your data outside the EEA or the UK without an adequacy decision, that transfer is covered by Standard Contractual Clauses or an equivalent approved mechanism.

For visitors in Japan: some of the providers listed above are located outside Japan, and your information may therefore be provided to a third party in a foreign country as described in the APPI.

How long we keep it

• Enquiries that do not lead to work: kept for up to two years from our last exchange, then deleted.
• Correspondence connected to work we carried out: kept for as long as we need it for the project and for any legal, tax or accounting period that applies afterwards.
• Server and security logs: kept for a short period, normally no more than 90 days.

How we look after it

We take organisational and technical measures to keep personal information safe. The site is served only over an encrypted connection, administrative access is restricted and protected by strong authentication, software is kept up to date, and access to enquiries is limited to the people who need it to reply to you. No system is perfectly secure, but we do not collect more than we need, which is the most effective protection available.

Your rights

Wherever you are, you can ask us to tell you what personal information we hold about you, to correct it if it is wrong, or to delete it.

If you are in the European Economic Area or the United Kingdom, you also have the right to ask us to restrict how we use your information, to object to processing carried out on the basis of our legitimate interests, to receive your information in a portable format, and to withdraw consent at any time without affecting anything done before you withdrew it.

If you are in Japan, you may request disclosure, correction, addition, deletion, a halt to use, or a halt to provision to third parties, in respect of the retained personal data we hold about you, in accordance with the APPI.

To exercise any of these rights, or to make a complaint, write to us through the contact form. We answer as quickly as we can, and we may need to ask you something that confirms who you are before we act on a request.

If you are not satisfied with our answer, you may complain to your national data protection authority in the EEA, to the Information Commissioner’s Office in the United Kingdom, or to the Personal Information Protection Commission in Japan.

Children

This site is aimed at businesses and adults, and we do not knowingly collect personal information from children. If you believe a child has sent us their details, contact us and we will delete them.

Changes to this policy

If we change how we handle personal information we will update this page and change the date at the top. Where a change materially affects you, we will say so clearly rather than quietly editing the text.

Contact

Questions about this policy? Send us a message through the contact form and it will reach us directly.