Privacy Policy
Version 2 · Last revised: November 2, 2026
Trade Tax West Japan Co., Ltd. ("we" or "the Company") handles personal information received through the First Consultation Booking Site ("this site") as follows, in accordance with Japan's Act on the Protection of Personal Information and other applicable laws.
1. Company name, address and representative
- Name: Trade Tax West Japan Co., Ltd.
- Address: Shin-Osaka No.27 Matsuya Bldg. 11F, 5-1-18 Miyahara, Yodogawa-ku, Osaka 532-0003, Japan
- Representative: Masaaki Chida, Representative Director
2. Personal information collected
This site collects the following personal information. Your application details, including your consultation details, are stored only in Stripe, our payment service provider, and are not saved in this site's database or records (this site has no database).
- Application information: name, name pronunciation, company or trading name, email address, telephone number, whether you live in or outside Japan, country or region, occupation, whether you apply as an individual or a business, consultation topics and additional details.
- Consent records: date and time of consent, versions of the hourly billing notice, cancellation policy and personal information terms you agreed to, and display language.
- Payment information: payment status, amount, date and time, and identifiers used by the payment provider. We do not collect or store card information such as credit card numbers.
- Booking information: booking date and time, your device's time zone, and the online meeting URL.
- Information to prevent fraudulent submissions: source IP address (used to check how many submissions come from the same source; it also remains for a certain period in the communication logs of the servers that run this site) and the result of reCAPTCHA checks that a submission was not made by a robot.
3. Purposes of use
- Receiving first consultation applications and assessing whether we can handle the matter.
- Providing fee information, confirming payments and issuing refunds.
- Booking consultation times, sending online meeting invitations and conducting the first consultation.
- Contacting you by email or telephone about your application or booking.
- Preventing fraudulent applications and responding as required by law.
4. Disclosure to third parties
We do not provide personal information to third parties without your consent, except:
- When required by law.
- When necessary to protect a person's life, body or property and it is difficult to obtain your consent.
- When it is necessary to cooperate with a national or local government body, or a person entrusted by one, in carrying out duties prescribed by law, and obtaining your consent may interfere with those duties.
- When providing information to service providers as described in the next section.
5. Service providers
We entrust the handling of personal information to the following providers to the extent necessary for the purposes above. They include a foreign entity, Google Asia Pacific Pte. Ltd. We enter into contracts covering the handling of personal information and exercise necessary and appropriate supervision to ensure the providers handle it properly.
| Provider | Services entrusted | Main information provided |
|---|---|---|
| Stripe Japan, Inc. (Stripe's Japanese entity) | Storing customer information (not stored on this site), providing payment pages, processing card and bank transfer payments, and emailing receipts | Name, name pronunciation, company name, email address, telephone number, occupation, country of residence, consultation details, payment amount and application identifier |
| Google Asia Pacific Pte. Ltd. (Singapore / Google Workspace) | Sending email, creating calendar bookings and providing online meetings via Google Meet | Name, email address, booking date and time, and consultation category (detailed descriptions of the consultation are not included) |
6. Handling information outside Japan
As part of the services above, we provide personal information to Google Asia Pacific Pte. Ltd., located in Singapore. Information may also be stored or processed outside Japan because providers and their subprocessors use servers outside Japan. When providing personal data to providers outside Japan, we comply with applicable law by obtaining necessary consent or confirming arrangements permitted by law. We also review the personal information protection systems of the relevant countries and regions and the providers' safeguards, and take necessary security measures.
This site itself runs in the Tokyo region of Google Cloud (in Japan).
| Provider | Possible storage and processing countries or regions | Personal information protection systems | Provider safeguards |
|---|---|---|---|
| Stripe Japan, Inc. | The United States, India, Ireland and other countries or regions where Stripe affiliates or service providers operate. Stripe's Privacy Policy names transfers to the U.S. and India, and its affiliate and subprocessor list includes Irish entities. The entities and processing countries involved vary by service and payment method, so public materials do not identify every country where this site's information is stored or processed. The locations of listed entities do not establish where individual records are stored. | The U.S. has sector-specific federal laws and state laws, such as California's CCPA, rather than a comprehensive federal privacy law. Ireland has the EU GDPR and the Data Protection Act 2018, providing rights including access, correction and erasure. India's Digital Personal Data Protection Act 2023 and Rules 2025 are being phased in. See the Personal Information Protection Commission's U.S. report (PDF, Japanese), California's CCPA guidance, Irish legislation guidance and Indian government implementation guidance. | Under its Data Processing Agreement, Stripe uses encryption in transit and at rest, restricted access, multi-factor authentication, access logs and vulnerability testing. Applicable services have annual PCI DSS Level 1 certification and SOC 1 and SOC 2 reports. Subprocessors undergo security assessment and are bound by contractual safeguards. Transfers outside the country use mechanisms appropriate to applicable law; see the Stripe Privacy Center. |
| Google Asia Pacific Pte. Ltd. (Google Workspace) | The United States, Singapore, Taiwan and other countries or regions where Google or its subprocessors have facilities. We cannot completely identify the actual storage and processing countries because Google uses facilities across multiple countries and regions. See Google data center locations and the subprocessor list. | The United States has sector-specific federal laws and state laws; Singapore and Taiwan have comprehensive personal information protection laws. For details, see the Personal Information Protection Commission's research: United States, federal (PDF, Japanese), Singapore (PDF, Japanese) and Taiwan (PDF, Japanese). | Security measures under the Google Workspace terms and the Cloud Data Processing Addendum (CDPA), including encryption in transit and at rest and access controls. Services within the relevant audit scope are verified through ISO/IEC 27001 certification and SOC 2 and SOC 3 audit reports. |
7. Security measures
- Organizational measures: assigning responsibility for personal information and recording how it is handled.
- Personnel measures: informing staff of the rules for handling personal information.
- Physical measures: preventing theft or loss of documents and devices.
- Technical measures: storing customer information only in Stripe, not in this site's database or records. This site has no administrative login screen. Stripe's dashboard requires two-factor authentication and is used only by necessary staff. Communications are encrypted. Our systems do not handle card information.
- Understanding the external environment: reviewing the systems of the relevant countries and regions, as described above, when providers store or process information outside Japan.
8. Requests for disclosure, correction or suspension of use
When you request notification of the purposes of use; disclosure (including disclosure of records of provision to third parties); correction, addition or deletion; suspension of use or erasure; or suspension of provision to third parties of your retained personal data, we respond without delay and in accordance with law after verifying your identity.
- How to request: contact the desk in section 10 by telephone or email. We will explain how to submit the request, including any forms.
- Identity verification: we verify your identity using the email address, telephone number and other details registered with your application. For requests made by an agent, we ask for documents that confirm the agent's authority.
9. Cookies and similar technologies
This site currently has no web analytics tools and no advertising or behavioral tracking tags. We may introduce Google Analytics (GA4) in the future to understand how the site is used and improve it.
- If we introduce analytics: Google Analytics may use cookies and similar technologies to send information about visited pages and your browsing environment to Google. Before use begins, we will explain the information collected and transmitted, the purposes, the recipients, retention periods and how to stop its use in this policy or related notices, and obtain consent where required by law. See how Google uses information from sites and apps that use its services and Google's explanation of GA4 cookies.
- Temporary form storage: we keep incomplete entries in your browser's session storage to restore them when you go back or switch between Japanese and English. Unlike cookies, this storage is not automatically sent to the server. We delete the saved entries after successful submission, and they are normally cleared when you close the tab.
- Preventing automated submissions: the application form uses Google reCAPTCHA. Information such as your IP address, device and browser information, cookies and interactions with the page is sent to Google and used to detect automated submissions, improve reCAPTCHA and for general security purposes. Google's handling of this information is subject to the Google Privacy Policy and Terms of Service.
- External payment pages: on its payment pages, Stripe may use cookies and similar technologies for secure payment processing, fraud prevention and related purposes. See Stripe's Cookie Policy for purposes, retention periods and other details.
- Browser controls: you can delete or restrict cookies and browser storage in your browser settings. Disabling necessary storage or scripts may prevent some functions from working, including keeping your entries, submitting applications or making payments.
10. Contact
For inquiries, complaints and requests about the handling of personal information, contact:
- Desk: Trade Tax West Japan Co., Ltd., Personal Information Inquiry Desk
- Telephone: 06-6350-7100 (Weekdays 9:00–18:00 (JST))
- Email: support@cita110.com
11. Revisions
We may revise this Privacy Policy in response to legal amendments or changes to this site. Revisions are posted on this page with the date of the latest revision.
For the terms you agree to on the application form, see Handling of Personal Information.