Privacy Policy

CoDigital, inc. ("we", "us") operates the Japan M&A Gateway website. This policy explains what information we collect through this website and how it is handled.

Information we collect

We collect the information you provide through our enquiry form, which may include your name, company, job title, email address, country or region, company website, buyer type, acquisition criteria and the content of your message. We may also collect standard technical information such as browser type, device type and pages viewed. This website is intended for use in a business context and we do not knowingly collect information from children.

How we use information

Information is used to respond to your enquiry, to assess how we may be able to assist you, to communicate with you about acquisition or sale opportunities, and to improve this website. We do not sell personal information.

Legal basis for processing

Where the EU or UK General Data Protection Regulation applies, we process the information you provide on the basis of steps taken at your request before entering into a contract, and our legitimate interests in responding to enquiries, assessing potential transactions and operating this website. Where we rely on consent — for example for optional analytics cookies — you may withdraw that consent at any time.

Confidentiality

Enquiries relating to acquisitions and business sales are treated as confidential. Information about a specific transaction or company is shared with third parties only where necessary to progress a matter and, where appropriate, under a confidentiality agreement.

Cookies and analytics

This website uses a strictly necessary session cookie to protect the enquiry form against cross-site request forgery. It contains no personal information and is removed when you close your browser. We also use Google Analytics 4 (measurement ID G-GQ3FL20K34) to understand how the site is used. Google Consent Mode is enabled: for visitors in the EU, the EEA, the United Kingdom and Switzerland, analytics runs without cookies and only aggregated signals that do not identify you are collected. For visitors elsewhere, Google Analytics sets the _ga and _ga_* cookies, which expire after two years and are used to distinguish repeat visits. You can control or delete cookies through your browser settings, and Google provides a browser add-on that allows you to opt out of Google Analytics entirely.

Third-party services

We may use third-party service providers for hosting, email delivery and analytics. These providers process information on our behalf and are subject to their own terms and security measures.

International data transfers

We are based in Japan and the information you send us is processed in Japan, which is the subject of an adequacy decision by the European Commission and equivalent recognition in the United Kingdom. Where information is shared with service providers located in other countries, we take steps to ensure an appropriate level of protection, such as standard contractual clauses or equivalent safeguards. Where the Japanese Act on the Protection of Personal Information applies, we provide the information it requires before transferring personal data to a third party located in a foreign country.

Security of information

We apply organisational and technical measures appropriate to the sensitivity of the information we hold, including encrypted transmission of this website over HTTPS, access controls that limit enquiry data to the personnel who need it, and confidentiality obligations for the individuals involved. No method of transmission or storage is completely secure, and we ask that you do not send highly sensitive documents through the enquiry form before a confidentiality agreement is in place.

Data retention

We retain enquiry information for as long as necessary for the purposes described above. Where an enquiry does not lead to an engagement, we ordinarily delete or anonymise it within five years of our last contact with you, unless a longer period is required by applicable law or in order to establish, exercise or defend a legal claim.

Your rights

Subject to the law that applies to you, you may request access to the personal information we hold about you, and its correction, deletion, restriction of processing, or a copy in a portable format. You may also object to processing carried out on the basis of our legitimate interests, and withdraw any consent you have given. In Japan, you may in addition request that we cease using your personal information or providing it to third parties in the cases set out in the Act on the Protection of Personal Information. We do not take decisions producing legal or similarly significant effects about you by automated means alone. Requests can be made through the enquiry form on this website, and we will respond within the period required by applicable law.

Complaints

If you are located in the EU or the United Kingdom, you have the right to lodge a complaint with your local data protection supervisory authority. In Japan, enquiries may be directed to the Personal Information Protection Commission. We would welcome the opportunity to address your concerns directly first.

Changes to this policy

We may update this policy from time to time. The current version is always published on this page.

Contact

CoDigital, inc. is the controller of the personal information described in this policy. For questions about this policy, or to exercise any of the rights described above, please contact us through the enquiry form on this website.