Privacy Policy
Policy Overview
Mugen Flow Co., Ltd. is committed to protecting the privacy and security of personal information entrusted to us by clients, website visitors, and business partners. This Privacy Policy describes our practices regarding the collection, use, storage, and disclosure of personal data in connection with our website and compliance monitoring services.
This policy applies to all individuals who visit our website, submit inquiries through our contact forms, subscribe to our communications, or engage with our professional services. By accessing our website or using our services, you acknowledge the data practices described in this document.
We operate in accordance with the Act on the Protection of Personal Information (APPI) of Japan and applicable international data protection regulations. Our data handling procedures are reviewed regularly to ensure continued compliance with evolving legal requirements and industry standards.
Information We Collect
Categories of Data
Contact Information
Names, email addresses, phone numbers, company names, and job titles provided through contact forms, consultations, and service agreements.
Usage Data
Information about how you interact with our website, including pages visited, time spent, browser type, and referring URLs collected through analytics tools.
Technical Data
IP addresses, device identifiers, operating system information, and connection data collected automatically when you access our website.
Service Data
Information provided during service engagements, including organizational details, compliance documentation, and communications related to active projects.
Collection Methods
Directly from you when you complete contact forms, request assessments, or engage with our team during consultations and service delivery.
Automatically through cookies and similar technologies as you navigate our website, as described in our Cookie Policy.
From third-party sources including business directories, referral partners, and publicly available professional profiles relevant to service inquiries.
Legal Basis for Processing
We process personal information only when we have a lawful basis to do so. The legal grounds for our data processing activities include the following, each of which applies to specific categories of data and processing purposes.
- Performance of a contract or pre-contractual steps taken at your request in connection with our compliance services.
- Your explicit consent, provided when you submit inquiries, subscribe to communications, or accept cookies on our website.
- Legitimate business interests, including improving our services, maintaining security, and communicating relevant information to existing clients.
How We Use Data
Personal information we collect is used for specific, defined purposes that support our business operations and service delivery. We do not use personal data in ways that are incompatible with these stated purposes without obtaining additional consent.
Service Delivery
We use contact and service data to fulfill our obligations under client agreements, including conducting compliance assessments, deploying monitoring systems, generating reports, and providing ongoing support throughout the engagement lifecycle.
Communication Management
We use contact information to respond to inquiries, send service updates, deliver newsletters to subscribers, and communicate important changes to our terms, policies, or service offerings that may affect your engagement.
Website Improvement
Usage and technical data help us understand how visitors interact with our website, identify areas for improvement, and optimize content and functionality to provide a more relevant and efficient browsing experience for all users.
Legal Compliance
We may process personal information when necessary to comply with applicable laws, respond to lawful requests from public authorities, enforce our terms of service, or protect the rights, property, and safety of our organization and our clients.
Data Sharing Practices
Mugen Flow does not sell personal information to third parties. We may share data with the following categories of recipients when necessary to support our services and meet our legal obligations.
Data Security Measures
We implement comprehensive technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. Our security practices are regularly reviewed and updated to address emerging threats and evolving standards.
Encryption Protocols
All data transmissions between your browser and our servers are protected using TLS encryption. Sensitive data at rest is encrypted using industry-recognized standards to prevent unauthorized access.
Access Control Systems
Access to personal data is restricted to authorized personnel who require it for specific business purposes. Multi-factor authentication and role-based permissions are enforced across all internal systems.
Regular Security Assessments
We conduct periodic security audits and vulnerability assessments to identify and address potential weaknesses in our systems and processes before they can be exploited.
Incident Response Procedures
We maintain documented incident response procedures that enable rapid identification, containment, and remediation of security events, with notification protocols that comply with applicable legal requirements.
Your Data Rights
Under applicable data protection laws, you have specific rights regarding your personal information. We are committed to facilitating the exercise of these rights in a timely and transparent manner.
Right of Access
You may request confirmation of whether we process your personal data and, if so, obtain a copy of that data along with details about the purposes and methods of processing.
Right to Correction
You may request that we correct inaccurate or incomplete personal information. We will make reasonable efforts to update records promptly upon receiving a verified correction request.
Right to Deletion
You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Right to Restrict Processing
You may request that we limit the processing of your personal information under certain circumstances, such as when you contest the accuracy of data or object to processing activities.
Right to Data Portability
Where technically feasible, you may request to receive your personal data in a structured, commonly used, and machine-readable format for transfer to another service provider.
Right to Object
You may object to the processing of your personal data for direct marketing purposes or when processing is based on legitimate interests, and we will cease processing unless compelling grounds exist.
Privacy Contact Information
If you have questions about this Privacy Policy or wish to exercise any of your data rights, please contact our privacy team at info@desertskyjourney.com or by mail at 5-2-8 Nishi-Shinjuku, Shinjuku-ku, Tokyo 160-0023, Japan.
We aim to respond to all privacy-related inquiries within thirty business days of receipt. For complex requests, we may require additional time and will notify you of any extension along with the reasons for the delay.
Last updated February 2026