Privacy Policy
Effective date: 2025-11-04
Who we are (Controller)
Head Spring Co., Ltd. (“we”, “us”, “our”), registered in Japan. Address: Intec 88 Bldg. 6F, 20-21 Araki-cho, Shinjuku-ku, Tokyo 160-0007, Japan. Contact: info@head-spring.co.jp / +81-3-6709-8183.
Personal data we collect
We collect personal data that you provide (e.g., name, email, phone number, country/region, inquiry contents) and limited technical data generated when you use our sites (e.g., device, browser, IP address, pages viewed, basic logs). When you submit a form, we use HubSpot to process your submission.
How we use personal data
We use personal data to respond to inquiries and provide non-marketing communications; to operate, secure, and improve our sites and services; for corporate governance; and to comply with laws. We use personal data for marketing only where you give consent (e.g., newsletter opt-in). We do not sell personal information.
Cookies and similar technologies (no consent banner yet)
We currently use only essential cookies required to operate and secure our sites. Features provided by third parties—such as HubSpot forms and Google reCAPTCHA (used to protect forms)—may set their own cookies or use similar technologies when you interact with those features. You can manage or block cookies via your browser settings; doing so may affect certain functions. Analytics or advertising cookies will not be used unless and until we implement consent and you choose to allow them.
Sharing and processors
We share personal data only with service providers acting on our instructions, including hosting and security providers and HubSpot (for forms/CRM and email delivery). Where necessary to protect rights or comply with law, we may disclose information to authorities. We may also share within our corporate group and in connection with a business reorganization. We require appropriate safeguards and limit access to those who need it.
International transfers
Your personal data may be processed in Japan and other countries. Where required, we use appropriate safeguards (such as contractual protections/standard clauses) or rely on your consent.
Retention
We retain inquiry records for up to 12 months after resolution, and technical logs/diagnostics for up to 14 months, unless a longer period is required by law. We then delete or anonymize the data.
Your rights
Depending on your location, you may have the right to request access, correction, deletion, restriction or objection to processing, and data portability, and to withdraw consent at any time (this does not affect processing before withdrawal). To exercise your rights, contact: info@head-spring.co.jp.
Thailand (PDPA) notice
If you are in Thailand, you may exercise the rights above under the PDPA. Where consent is required, you can withdraw it at any time by contacting us.
Security
We use organizational, technical, and physical safeguards to protect personal data against loss, theft, and unauthorized access or use; this includes access controls, encryption in transit where appropriate, staff training, and vendor due diligence.
Updates to this Notice
We may update this Notice from time to time. We will post the revised version with a new “Effective date.”