GTB / PRIVACY

Privacy

Privacy Policy

GTB Holdings is the controller responsible for personal data, limits use to stated purposes and protects individual rights and data security.

Effective: 27 July 2026 · Version 1.0

This policy is based on Japan’s Act on the Protection of Personal Information (APPI) and applies international data-protection principles, including the GDPR, where those rules govern a specific activity.

1. Data controller

Controller: GTB Holdings株式会社 / GTB Holdings Co., Ltd., Kohara Building 307, 1-11-10 Uchikanda, Chiyoda-ku, Tokyo 101-0047, Japan. Privacy contact: info@onebusiness.jp.

2. Information we collect

We may collect names, organizations, roles, email addresses, telephone numbers, inquiry content, documents voluntarily supplied, interaction history, and limited technical data such as IP address, access logs, browser type and cookie preferences.

We do not intentionally request sensitive data unless necessary for a service. Please do not submit My Number, health data or other special-category information through a public form.

3. Purposes of processing

  • Receiving and responding to consultations, inquiries and Business Unit applications.
  • Identity checks, needs assessment and defining a possible engagement.
  • Managing contracts, records, finance, compliance and operational communications.
  • Operating, securing, measuring and improving the website, services and internal processes.
  • Meeting legal duties, handling complaints and protecting legitimate rights.

We do not use data for an incompatible purpose without notice and an appropriate legal basis.

4. Retention

Personal data is retained for up to seven years from the latest interaction, contract end or completion of the processing purpose, whichever is later. Where law requires longer retention, or records are needed for a dispute, we keep only what is necessary for the required period. Data is then securely deleted or anonymized.

5. No sale or advertising disclosure

GTB does not sell, rent or disclose personal data to third parties for advertising or marketing. Necessary technical providers—such as website hosting, email, backup and security services—may process data only under GTB instructions, confidentiality duties and oversight. Other disclosure occurs only with consent or where permitted by law, including protection of life or vital rights, cooperation with public authorities, or a lawful merger or business succession.

6. International processing

If a technical provider processes data outside Japan, GTB reviews the processing location and safeguards, uses appropriate contractual and security measures, and provides information or obtains consent when required by applicable law.

7. Individual rights

Individuals may request confirmation of processing, access or a copy, correction, suspension of use, deletion or restriction, and may withdraw consent where processing relies on consent. GTB may verify identity and may refuse or limit a request where the law allows, with an explanation.

Send requests to info@onebusiness.jp. We respond without undue delay and within applicable legal deadlines.

8. Security and incidents

GTB uses role-based access, appropriate authentication, system updates, backups, logging, limited authorized personnel, confidentiality obligations and provider review. If an incident may harm individual rights or interests, GTB investigates, contains and records it, and notifies Japan’s Personal Information Protection Commission and affected people when legally required.

9. Cookies, minors and external links

The site may use essential cookies and minimal analytics data for functionality, security and content improvement. Browser settings provide control. The service is not directed to children; minors should obtain guardian consent where required. External sites apply their own privacy practices.

10. Complaints and updates

Privacy questions and complaints are accepted at info@onebusiness.jp. Individuals may also contact the competent supervisory authority. We may update this policy as operations or law change and will publish the new effective date on this page.

Advisory contact