Privacy Policy
English / 日本語
Eponym Inc. ("we," "us," or "our") respects your privacy and is committed to handling personal information appropriately on the website we operate (the "Site"). This Privacy Policy (the "Policy") sets out how we handle personal information. We comply with Japan's Act on the Protection of Personal Information (the "APPI") and other applicable laws and regulations.
This English version is a translation provided for the convenience of our users. In the event of any inconsistency between this English version and the Japanese version, the Japanese version shall prevail.
1. Business Operator Information
- Name: Eponym Inc. (株式会社Eponym)
- Representative: Kairi Yamazaki, Representative Director
- Address: Nishi-Shinjuku Mizuma Bldg. 2F, 3-3-13 Nishi-Shinjuku, Shinjuku-ku, Tokyo 160-0023, Japan
- Contact: info@eponym.jp
2. Personal Information We Collect
We collect the following personal information through the Site.
(1) Information collected via the contact form
- Name
- Email address
- Company name
- Inquiry details (message)
The contact form does not collect any items other than the above (such as phone number or address).
(2) Information collected automatically through use
To ensure delivery and security of the Site, we may collect and process information such as IP address, browser type/version, OS, referrer, and access date/time, via our server and the external services described below. These are used to prevent misuse such as impersonation and spam, and to operate the Site stably. The information our server directly collects and processes for abuse prevention is primarily the IP address; other information (browser type, OS, access date/time, etc.) may be technically recorded within the infrastructure services (Cloudflare, Google) described below.
3. Purpose of Use
We use the personal information we collect within the scope of the following purposes.
- To respond to and contact you regarding inquiries, consultations, and requests
- To confirm and record inquiries and to improve the quality of our responses
- To keep internal records of and manage inquiries (using Google Sheets)
- To prevent misuse of the Site, ensure security, and operate the Site stably
- To comply with laws and regulations
We will not use personal information beyond the scope of the stated purposes without your consent.
4. Provision to Third Parties
We will not provide personal information to third parties without obtaining your prior consent, except in the following cases:
- Where required by law
- Where necessary to protect a person's life, body, or property, and obtaining consent is difficult
- Where it is necessary to cooperate with a government body performing duties prescribed by law
5. Outsourcing / Use of External Services (Provision to Third Parties in Foreign Countries)
We outsource the handling of personal information to external services (contractors) to the extent necessary to achieve the purposes of use. While these constitute outsourcing of the handling of personal information (APPI Art. 27, para. 5, item 1), because all contractors are located outside Japan (in the United States), we treat this as provision to a third party in a foreign country (APPI Art. 28) and provide the information after obtaining your consent via the consent checkbox on the confirmation screen prior to submitting the contact form. The main contractors are as follows.
| Contractor (Country) | Outsourced Work | Information Handled |
|---|---|---|
| Cloudflare, Inc. (USA) | Hosting and delivery of the Site, contact form processing, anti-abuse / bot protection (Turnstile), CDN and security | Form input, IP address, browser information, etc. |
| Resend, Inc. (USA) | Sending inquiry emails and acknowledgement emails | Name, email address, company name, inquiry details |
| Google LLC (USA) | ① Storage and management of emails we receive (Google Workspace), and recording and management of inquiry details (Google Sheets) ② Web font delivery (Google Fonts) |
① Name, email address, company name, inquiry details, and timestamp of record (Japan Standard Time) ② IP address, browser information, referrer |
Regarding the data protection regime in the destination country (United States): The United States does not have a comprehensive, cross-sectoral data protection law equivalent to Japan's APPI; it is instead regulated by sector-specific federal laws and state laws (e.g., the California Consumer Privacy Act (CCPA/CPRA)). There is no general framework between Japan and the United States equivalent to an adequacy decision under the APPI.
Regarding the measures taken by contractors: Each of the above companies bears data-protection obligations based on standard contractual clauses (SCCs) and similar mechanisms, and implements safeguards such as encryption in transit and access controls. We have entered into data processing agreements (DPAs) with, or agreed to the standard data processing terms of, each company. For details on each company's handling of personal information, please see their privacy policies (Resend: https://resend.com/legal/privacy-policy, Cloudflare: https://www.cloudflare.com/privacypolicy/, Google: https://policies.google.com/privacy).
If you need additional information regarding provision to third parties in foreign countries, please contact our window above. General information on data protection regimes in various countries, including the United States, is also available on the website of the Personal Information Protection Commission of Japan (https://www.ppc.go.jp/en/).
6. External Transmission (Disclosure under the Telecommunications Business Act)
On the Site, information is transmitted from the user's device to the following external operators — on all pages for web font display, and on the contact form (confirmation screen) for anti-bot protection (disclosure under Article 27-12 of the Telecommunications Business Act).
| Recipient (Operator) | Information Transmitted | Purpose |
|---|---|---|
| Cloudflare Turnstile (Cloudflare, Inc. / USA) | IP address, browser/device information, interaction data, identifiers via cookies and similar technologies | Anti-bot (automated submission) protection on the contact form (confirmation screen) |
| Google Fonts (Google LLC / USA) | IP address, browser/device information, referrer | Web font delivery and display on all pages |
For each operator's handling of information, please see their privacy policies (Cloudflare: https://www.cloudflare.com/privacypolicy/, Google: https://policies.google.com/privacy). These external transmissions are all necessary for the display and secure operation of the Site, and we do not provide an individual opt-out mechanism for them. If you do not wish to allow these transmissions, you can restrict them via your browser's cookie/JavaScript settings; however, some functions such as the contact form may not work properly.
7. Cookies and Similar Technologies
We may use cookies or similar technologies such as local storage to the extent necessary to provide functions such as the bot protection (Turnstile) described above. We do not use cookies for advertising or analytics purposes.
8. Security Measures
We take necessary and appropriate measures to prevent the leakage, loss, or damage of personal information, including TLS encryption, access control, and minimization of collected items. In the contact submission process, we securely manage credentials as environment variables, do not record directly identifying information (such as email addresses) in logs, and implement anti-abuse measures (bot/spam prevention). However, we cannot guarantee complete security of transmission over the Internet or of electronic storage.
9. Retention Period
We retain personal information only for the period necessary to achieve the purposes of use. After the period necessary for responding to inquiries and for reasonable record-keeping (such as handling repeat inquiries and ongoing consultations) has elapsed, we will delete it without delay, except where retention is required by law. Specific retention periods may be established in future revisions.
10. Requests for Disclosure, Correction, Suspension of Use, etc.
You may request the disclosure, correction/addition/deletion, suspension of use/erasure, or suspension of third-party provision of your own personal information held by us. Please direct such requests to our contact window above (info@eponym.jp). We will respond in accordance with the law after verifying your identity.
11. Consent
On our contact form, we ask you to check the consent checkbox for this Policy on the confirmation screen before submission; submission is not possible without checking it. By submitting after checking the box, you are deemed to have consented to this Policy (including provision to third parties in foreign countries).
12. Changes to this Policy
We may change this Policy in response to amendments to laws or changes to our services. The revised Policy takes effect when posted on the Site.
13. Governing Law
The interpretation and application of this Policy shall be governed by the laws of Japan.
14. Contact
For inquiries regarding this Policy and the handling of personal information, please contact:
- Eponym Inc.
- Email: info@eponym.jp
Effective date: June 22, 2026