Privacy Policy
Nouma, Inc. (the “Company”) treats the personal information entrusted to us by clients, business partners, and job applicants as a significant responsibility of our business activities. This Policy sets out the basic principles under which the Company handles personal information appropriately, in compliance with the Act on the Protection of Personal Information (the APPI) and other applicable laws, regulations, and guidelines.
1. Business Operator
The business operator that handles personal information under this Policy is as follows.
| Company name | Nouma, Inc. (Japanese: 株式会社Nouma) |
| Representative | Hokuto Aoi, Representative Director |
| Address | Prime Square 10F, 5-6-36 Toyosu, Koto-ku, Tokyo 135-0061, Japan |
| Founded | November 10, 2023 |
2. Categories of Personal Information Collected
Through our contact form and by other methods, the Company collects the following personal information by lawful and fair means. We do not collect information beyond what is necessary.
| When you contact us | Type of inquiry, company or organization name, name, email address, telephone number (optional), area of interest (optional), and the content of the inquiry |
| Information collected incidentally | Information provided in the course of the above exchanges, and contact details and similar information provided in connection with the delivery of our services or the performance of a contract |
Telephone number and area of interest are optional; we accept inquiries even when they are left blank. Simply browsing this Site does not provide us with information that identifies you, such as your name (for cookies and communication with external servers, please see Section 7).
3. Purposes of Use
The Company uses the personal information it collects within the scope of the following purposes. Use beyond the scope of these purposes is made only with the prior consent of the individual or where based on laws and regulations.
- To respond to and handle inquiries, consultations, and requests
- To provide information about, propose, and deliver our services, and to perform contracts
- To communicate with business partners, manage contracts, and conduct other business communications
- To improve the quality of our services and to consider and develop new services
- To respond as required by laws and regulations, and otherwise to exercise legitimate rights or perform obligations
4. Provision to Third Parties
Except in any of the following cases, the Company does not provide personal information to third parties without the prior consent of the individual.
- Where based on laws and regulations
- Where necessary to protect a person’s life, body, or property, and it is difficult to obtain the consent of the individual
- Where particularly necessary to improve public health or promote the sound development of children, and it is difficult to obtain the consent of the individual
- Where it is necessary to cooperate with a national government body, a local government, or a party commissioned by either of them in carrying out affairs prescribed by laws and regulations, and obtaining the consent of the individual is likely to impede the performance of those affairs
5. Outsourcing
Within the scope necessary to achieve the purposes of use, the Company may outsource all or part of the handling of personal information to external contractors. In such cases, the Company selects contractors after conducting the necessary and appropriate review, and exercises appropriate supervision through outsourcing agreements and similar arrangements.
6. Use of Cloud Services and Provision to Third Parties Located Overseas
The Company uses external cloud services to operate this Site. This Site is hosted on Vercel, a hosting service provided by a company incorporated in the United States, and as a result, information submitted through the contact form and similar data may be handled on servers located outside Japan.
The way these services are delivered may change in line with the providers’ policies, and data may be stored or processed outside Japan. As set out in Section 5 above, the use of Vercel and other overseas cloud services is treated as the outsourcing of the handling of personal information within the scope necessary to achieve the purposes of use, and the Company exercises appropriate supervision over its contractors.
Where the Company provides personal data to a third party located in a foreign country, it does so in accordance with Article 28 of the APPI and other applicable laws and regulations: in principle after obtaining the prior consent of the individual, or otherwise only to recipients that continuously maintain a system conforming to the standards prescribed by that Act. In such cases, at the request of the individual, the Company provides information on the name of the foreign country in which the third party is located, the personal information protection framework of that country, and the measures taken by that third party to protect personal information.
7. Cookies, Web Fonts, and Analytics
To improve display and usability, this Site uses the external services described below. Their use causes communication from your device to external servers, and information such as your IP address may be transmitted to those servers.
| Web fonts | Parts of this Site use Google Fonts, a web font service provided by Google LLC. Loading the fonts may cause communication from your device to Google’s servers. |
| Cookie | This Site uses cookies or similar technologies for the basic operation of the Site and for the analytics described below. You can refuse cookies through your browser settings, but in that case some functions of this Site may not work correctly. |
| Analytics | This Site uses Google Analytics, an analytics service provided by Google LLC. Cookies are used to collect information about how you use the Site (pages viewed, time spent, referral source, device and browser type, and similar data), which is transmitted to and stored on Google’s servers. The Company uses this information to understand and improve how the Site is used, and not for the purpose of identifying individuals. For how the data is handled, please refer to Google’s Privacy Policy. Cookies used for analytics can be refused through your browser settings, and can also be disabled using the Google Analytics Opt-out Browser Add-on provided by Google. |
8. Security Control Measures
The Company takes the following measures to prevent the leakage, loss, or damage of the personal information it handles and otherwise to keep it secure.
- Organizational security measures: We clarify where responsibility for the handling of personal information lies, and appropriately manage how it is handled.
- Personnel security measures: We provide those who handle personal information with the guidance necessary for its proper handling.
- Physical and technical security measures: To prevent unauthorized access to, loss of, or alteration of personal information, we take reasonable measures such as access control and the protection of communications.
- Understanding the external environment: Where we use cloud services or similar services provided by operators located in foreign countries, we take the necessary and appropriate measures after ascertaining the personal information protection framework of those countries.
9. Requests for Disclosure, Correction, or Suspension of Use of Retained Personal Data
Under applicable law, individuals or their representatives may request, with respect to the personal data retained by the Company, notification of the purpose of use, disclosure, correction, addition, or deletion of the content, suspension of use or erasure, and suspension of provision to third parties.
Such requests are accepted at the contact point set out in Section 10 below (contact form). When a request is made, we may confirm that you are the individual concerned or their authorized representative. Where we are unable to comply with a request under laws and regulations, we will respond and state the reason.
10. Contact Point
Questions about this Policy, inquiries about the handling of personal information, requests for disclosure and similar requests, and complaints or consultations may be submitted through the contact form. Communications to the manager responsible for the Company’s handling of personal information are also accepted through the same form.
11. Revisions to This Policy
The Company may revise this Policy in response to amendments to laws and regulations, changes to its business, changes to the external services it uses, and similar circumstances. The revised Policy takes effect from the time it is published on this Site. Where a significant change is made, we will give appropriate notice on this Site.
Established: June 28, 2026
Last revised: August 11, 2026
Note: The content of this Policy may be revised in response to amendments to laws and regulations, reviews of our practices, and similar circumstances.
Note: This page is intended to be put into operation following a final review by a qualified professional.
