Privacy Policy

1. Introduction

Japan Market Gateway Co., Ltd. (“JMG,” “we,” “us,” or “our”) operates the website jmgateway.com (the “Site”) and provides cross-border commerce enablement services, including Importer of Record (“IOR”) services, customs clearance, warehousing, domestic fulfillment, and marketing localization for the Japanese market (collectively, the “Services”).

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information obtained through the Site, through inquiries, and in the course of providing the Services. We handle personal information in accordance with the Act on the Protection of Personal Information of Japan (Act No. 57 of 2003, as amended) (“APPI”) and, where applicable, the EU General Data Protection Regulation (“GDPR”), the UK GDPR, the California Consumer Privacy Act as amended by the CPRA (“CCPA/CPRA”), and other applicable data protection laws.

By accessing the Site or using the Services, you acknowledge that you have read and understood this Privacy Policy.

2. Business Operator / Data Controller

Business Name: Japan Market Gateway Co., Ltd.

Registered Address: Suwa, Nagano, Japan

Contact Email: inquiry@jmgateway.com

For matters relating to personal information (including access, correction, or deletion requests), please contact us using the details above, with the subject line “Privacy Inquiry.”

3. Personal Information We Collect

We collect the following categories of personal information:

3.1 Information You Provide Directly

• Identity and contact information: full name, company name, job title, business email address, phone number, country and city of operation.
• Business and product information: product category, target SKUs, anticipated shipment volumes, HS codes, ingredient lists, certifications, and compliance documentation you submit for feasibility assessment or onboarding.
• Commercial information: billing name, billing address, tax identification numbers, and payment details (processed through third-party payment processors; we do not store full card numbers on our servers).
• Communications: the content of emails, contact-form submissions, consultation bookings, feasibility report requests, and any other correspondence with us.

3.2 Information Collected Automatically

• Log data: IP address, browser type and version, operating system, referring URL, pages visited, date and time of access, and clickstream data.
• Device identifiers and approximate geolocation derived from IP address.
• Cookies, pixel tags, and similar technologies — see Section 7 (Cookies and Tracking Technologies).
• Analytics data collected through Google Analytics 4, Google Tag Manager, and similar tools.

3.3 Information from Third Parties

• Information from customs authorities, freight forwarders, carriers, and regulatory bodies as necessary to perform Importer of Record and clearance functions.
• Business information from publicly available sources (e.g., company registries, LinkedIn) used for due diligence and onboarding.
• Referral information from marketing partners and referral sources.

4. Purposes of Use

We use personal information for the following purposes:

• To respond to inquiries, provide consultations, and deliver requested materials such as the Japan Import Feasibility Report.
• To provide, operate, maintain, and improve the Services, including IOR, customs clearance, warehousing, fulfillment, and marketing localization.
• To fulfill our legal obligations as Importer of Record, including declarations to Japan Customs, submissions to the Ministry of Health, Labour and Welfare, the Ministry of Economy, Trade and Industry, and other competent authorities.
• To process payments, issue invoices and receipts, and manage accounts receivable.
• To prevent fraud, enforce our Terms of Service, and protect the rights, property, and safety of JMG, our clients, and third parties.
• To send service-related notices, updates, and, where you have opted in, marketing communications (which you may unsubscribe from at any time).
• To comply with applicable laws, regulations, court orders, and lawful requests from public authorities.
• To analyze usage of the Site and Services in order to improve user experience and develop new offerings.

5. Legal Bases for Processing (EEA / UK Users)

If you are located in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR or UK GDPR:

• Performance of a contract — to provide the Services you or your organization have contracted for.
• Legitimate interests — to operate, secure, and improve our business (balanced against your rights and freedoms).
• Legal obligation — to comply with import, customs, tax, and other regulatory requirements.
• Consent — for optional cookies, analytics, and marketing communications, where required.

6. Disclosure of Personal Information to Third Parties

We do not sell personal information. We disclose personal information only in the following circumstances:

6.1 Service Providers and Subcontractors

We share information with carefully selected third parties that process data on our behalf under written agreements with confidentiality and security obligations, including:

• Licensed customs brokers and freight forwarders.
• Warehousing operators and last-mile delivery providers in Japan.
• Payment processors, accounting and invoicing providers.
• Cloud hosting and infrastructure providers.
• Analytics, marketing, and communication platforms (e.g., Google LLC for Analytics and Tag Manager; email delivery providers).
• Professional advisors such as lawyers, accountants, and auditors.

6.2 Regulatory and Governmental Authorities

As Importer of Record, we are required to disclose product, consignor, and consignee information to Japan Customs and other competent regulatory authorities.

6.3 Legal Requirements

We may disclose personal information to comply with applicable laws, respond to lawful requests, enforce our agreements, or protect rights, property, and safety.

6.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, personal information may be transferred to the acquiring entity, subject to equivalent protections.

7. Cookies and Tracking Technologies

The Site uses cookies and similar technologies to operate reliably, remember preferences, and analyze traffic. We use:

• Strictly necessary cookies — required for Site functionality; these do not require consent.
• Analytics cookies — Google Analytics 4 via Google Tag Manager, to understand how visitors use the Site.
• Marketing cookies — where applicable, to measure campaign effectiveness.

You may disable cookies through your browser settings or, where offered, through our cookie consent banner. Disabling cookies may affect Site functionality.

For more information on how Google processes data, please refer to Google's privacy policy at policies.google.com/privacy and Google Analytics' data practices at policies.google.com/technologies/partner-sites.

8. International Data Transfers

JMG is based in Japan. Personal information we collect may be transferred to, stored in, and processed in Japan and in other jurisdictions where our service providers operate (including the United States and the European Union). Japan has been recognized by the European Commission as providing an adequate level of protection for personal data transferred from the EEA under an adequacy decision.

Where transfers occur to jurisdictions without an adequacy decision, we implement appropriate safeguards, such as Standard Contractual Clauses or equivalent measures.

9. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Policy, to comply with legal obligations (including import, tax, and accounting record retention requirements under Japanese law, generally seven to ten years), to resolve disputes, and to enforce our agreements. Where information is no longer needed, we will delete or anonymize it.

10. Your Rights

Subject to applicable law, you have the following rights regarding your personal information:

• Access — to request disclosure of the personal information we hold about you.
• Correction — to request correction of inaccurate or incomplete information.
• Deletion / Erasure — to request deletion, subject to retention obligations.
• Suspension of use or restriction of processing.
• Portability — to receive your information in a structured, commonly used format (where applicable).
• Objection — to object to processing based on legitimate interests or for direct marketing.
• Withdrawal of consent — where processing is based on consent.
• Complaint — to lodge a complaint with the Personal Information Protection Commission of Japan (PPC) or your local data protection authority.

To exercise your rights, please contact us at inquiry@jmgateway.com. We will respond within the time periods required by applicable law.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights, including the right to know, delete, correct, and limit the use of sensitive personal information, and to opt out of the “sale” or “sharing” of personal information. We do not sell personal information. To exercise these rights, contact us at inquiry@jmgateway.com.

12. Security

We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, and destruction. These include access controls, encryption in transit (TLS), secure data centers, and employee confidentiality obligations. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

13. Children's Privacy

The Services are directed at businesses and professionals. We do not knowingly collect personal information from individuals under the age of 16. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

14. Third-Party Links

The Site may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top reflects the most recent revision. Material changes will be communicated through the Site or by other reasonable means. Your continued use of the Services after the effective date constitutes acceptance of the revised Policy.

16. Contact

If you have any questions, comments, or requests regarding this Privacy Policy, please contact: