GDPR-style Notice

1) Controller

For purposes of this website and direct communications, AxenLab G.K. acts as the controller of personal data as described here. If another arrangement applies for a specific engagement, it will be described in written documentation.

2) Principles

We aim to follow widely recognized privacy principles:

• Lawfulness, fairness, transparency: explain what we do and why.
• Purpose limitation: use data only for defined purposes.
• Data minimization: collect what is needed and avoid excess.
• Accuracy: keep data reasonably accurate when used.
• Storage limitation: keep data only as long as needed.
• Integrity and confidentiality: apply reasonable security measures.

3) Categories of data

• Contact data: name, email, optional phone.
• Message data: subject and message contents you provide.
• Technical data: basic logs for security and performance.
• Cookie preferences and essential cookie data where applicable.

4) Purposes of processing

• Responding to inquiries and communicating about requests.
• Operating and securing the website.
• Handling privacy requests and compliance obligations.

5) Lawful bases (where applicable)

If GDPR applies, we typically rely on one or more of the following bases:

• Consent: for certain non-essential cookies where required.
• Legitimate interests: responding to inquiries and securing the site.
• Performance of a contract: when processing is necessary to provide requested services.
• Legal obligation: where required by applicable law.

6) Data subject rights (where applicable)

If GDPR applies, you may have rights including:

• Right of access.
• Right to rectification (correction).
• Right to erasure (deletion), in certain circumstances.
• Right to restriction of processing, in certain circumstances.
• Right to data portability, in certain circumstances.
• Right to object, in certain circumstances.
• Right to withdraw consent (for consent-based processing), without affecting prior processing.

We may request reasonable verification to protect your account and prevent unauthorized access.

7) Retention

We keep data only as long as needed for the purposes described in our Privacy Policy, and as required by applicable law. Retention can vary based on the type of request and the nature of communications.

8) International transfers

AxenLab is located in Japan. If GDPR applies and a transfer occurs, we take reasonable measures intended to protect data, including contractual and security safeguards where appropriate. Details depend on the specific service providers used.

9) Processors and DPA approach

Where we use service providers (processors) to support hosting or communications, we aim to select providers with appropriate security practices. If a specific engagement requires processor terms, they are handled in the engagement documentation.

10) How to submit a GDPR-style request

To submit a request, email us and include:

• Your name and the email address used to contact us.
• Your country/region (optional but helpful for routing).
• The type of request (access, deletion, correction, etc.).
• Any context needed to locate the data (e.g., approximate date of contact).

11) Contact details

AxenLab G.K.

• Address: 2-24-12 Shibuya, Shibuya-ku, Tokyo 150-0002, Japan
• Phone: +81 3-6416-2047
• Email: hello@axenlab.link
• Business ID: JP-AXL-2026-0214
• Working hours: Mon–Fri 10:00–19:00 (JST)

Effective date: 2026-02-14