Privacy Policy
Last Updated: September 28, 2025
Effective Date: September 28, 2025
Product Hub
2-chōme-12 Azabujūban, Minato City, Tokyo 106-0045, Japan
Japan
Phone: +81 570-010-363
Email: info@fynorbay.com
Our Commitment to Your Privacy
At Product Hub, we recognize that trust forms the foundation of successful professional relationships. This Privacy Policy outlines our practices regarding the collection, use, and protection of your personal information when you interact with our website and services.
We are committed to transparency in our data handling practices and compliance with applicable data protection regulations, including the General Data Protection Regulation (GDPR) and Japan's Act on the Protection of Personal Information (APPI). This policy explains your rights and how we safeguard the information you entrust to us.
By using our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy. We encourage you to review this document carefully and contact us with any questions.
Information We Collect
We collect different types of information to provide and improve our services. Understanding what we collect helps you make informed decisions about sharing your data.
Information You Provide Directly
When you interact with our services, you may voluntarily provide personal information including:
- Contact details such as name, email address, phone number, and company information when submitting inquiry forms
- Professional information including job title, industry sector, and organizational role when requesting service consultations
- Communication content when you contact us via email, phone, or contact forms
- Account credentials if you create a user profile for our services
- Payment information when engaging our consulting services (processed through secure third-party payment processors)
Information Collected Automatically
When you visit our website, we automatically collect certain technical information:
- Device information including IP address, browser type, operating system, and device identifiers
- Usage data such as pages viewed, time spent on pages, navigation paths, and click patterns
- Referral source indicating how you arrived at our website
- Location information derived from IP address (city and country level)
Information from Third-Party Sources
We may receive information about you from:
- Professional networking platforms when you connect with us through social media
- Business partners who refer you to our services
- Analytics providers who help us understand website performance
- Public databases and business directories for verification purposes
How We Use Your Information
We process your personal information for specific purposes based on legitimate business needs and legal grounds. Your data helps us deliver quality services and improve your experience.
Service Delivery and Client Communication
We use your contact information to respond to inquiries, provide requested services, send project updates, and maintain ongoing client relationships. This includes scheduling consultations and sharing relevant product management insights.
Website Improvement and Analytics
Usage data helps us understand how visitors navigate our website, which content resonates most, and where we can enhance user experience. We analyze traffic patterns to optimize site structure and content organization.
Marketing and Business Development
With your consent, we may send newsletters, case studies, and service updates that we believe align with your professional interests. You can unsubscribe from marketing communications at any time.
Security and Fraud Prevention
We process data to protect our systems from unauthorized access, detect suspicious activity, and ensure the security of both our business and client information.
Legal Compliance and Business Operations
We maintain records as required by applicable laws, respond to legal requests, enforce our terms of service, and conduct internal business operations including accounting and quality assurance.
Legal Basis for Processing
Under GDPR and other data protection regulations, we process your personal information based on the following legal grounds:
- Contractual Necessity: Processing required to deliver services you've requested or to enter into a service agreement
- Legitimate Interests: Processing necessary for our business operations, such as improving services, maintaining security, and conducting business development
- Consent: Processing based on your explicit permission, which you can withdraw at any time
- Legal Obligation: Processing required to comply with legal requirements and regulatory obligations
Data Sharing and Disclosure
We do not sell your personal information to third parties. We may share your data only in the following circumstances:
Service Providers and Partners
We engage trusted third-party service providers who assist with website hosting, analytics, email delivery, payment processing, and customer relationship management. These providers access data only as necessary to perform their functions and are contractually obligated to protect your information.
Professional Advisors
We may share information with legal counsel, accountants, and other professional advisors when necessary for business operations, legal compliance, or protection of our rights.
Legal Requirements
We disclose information when required by law, in response to legal processes, to protect our rights and property, or when necessary to prevent harm or illegal activity.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to this Privacy Policy's protections.
Data Security Measures
We implement comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:
Technical Safeguards
- • SSL/TLS encryption for data transmission
- • Encrypted data storage systems
- • Firewall protection and intrusion detection
- • Regular security audits and updates
Organizational Measures
- • Access controls and authentication protocols
- • Staff training on data protection
- • Confidentiality agreements with employees
- • Incident response procedures
While we strive to protect your information, no security system is completely impenetrable. We cannot guarantee absolute security but commit to promptly addressing any suspected security incidents.
Data Retention
We retain personal information only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements.
Specific retention periods include:
- Contact form submissions: 3 years from last contact
- Client service records: 7 years after project completion for accounting and legal compliance
- Marketing communications data: Until you unsubscribe or request deletion
- Website analytics data: 26 months in aggregated form
- Cookie data: As specified in our Cookie Policy
Your Privacy Rights
You have significant rights regarding your personal information. We respect these rights and provide mechanisms to exercise them:
Right to Access
You can request a copy of the personal information we hold about you, including details about how we use it and who we share it with.
Right to Rectification
If your personal information is inaccurate or incomplete, you have the right to request corrections or updates.
Right to Erasure
You can request deletion of your personal information when it's no longer necessary for the purposes it was collected, or if you withdraw consent.
Right to Object
You can object to processing of your personal information for direct marketing purposes or when processing is based on legitimate interests.
Right to Data Portability
You can receive your personal information in a structured, commonly used format and transmit it to another service provider.
Right to Restrict Processing
You can request that we limit how we use your personal information in certain circumstances, such as while we verify accuracy.
To exercise any of these rights, please contact us using the information provided at the end of this policy. We will respond to your request within 30 days.
Your Rights and Opt-Out Instructions
You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:
- Avoid filling out contact forms, account registrations, or any data-submitting features on our website
- Disable cookies through your browser settings (see our Cookie Policy for detailed instructions)
- Contact us directly to request the deletion of any previously shared personal data
- Unsubscribe from marketing emails using the link provided in each communication
- Browse our public content without creating an account or providing identification
We respect your privacy choices. If you would like us to delete your data, please reach out to us at the contact details provided on our Contact page. We will process your request promptly and confirm completion within 30 days.
International Data Transfers
While our primary operations are based in Tokyo, Japan, we may transfer your personal information to service providers located in other countries for processing and storage. When we transfer data internationally, we ensure appropriate safeguards are in place:
- Standard contractual clauses approved by relevant data protection authorities
- Adequacy decisions recognizing equivalent data protection standards
- Binding corporate rules for intra-group transfers
- Your explicit consent when required by applicable law
Children's Privacy
Our services are designed for business professionals and organizations. We do not knowingly collect personal information from individuals under 18 years of age. If we become aware that we have inadvertently collected information from a minor, we will take immediate steps to delete such information from our systems.
If you believe we have collected information from someone under 18, please contact us immediately so we can address the situation appropriately.
Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technologies, legal requirements, or business operations. When we make material changes, we will notify you by:
- Posting a prominent notice on our website
- Sending an email notification to registered users
- Updating the "Last Updated" date at the top of this policy
We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information. Your continued use of our services after changes take effect constitutes acceptance of the updated policy.
Contact Us About Privacy
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or need to report a privacy concern, please contact us:
Product Hub - Privacy Officer
2-chōme-12 Azabujūban, Minato City, Tokyo 106-0045, Japan
Phone: +81 570-010-363
Email: info@fynorbay.com
We aim to respond to all privacy inquiries within five business days. For urgent matters involving potential data breaches or security concerns, please indicate "Urgent" in your subject line.