Privacy Policy
Effective date: October 1st, 2025
Controller: Global KA Holdings Inc. ("we", "us", "our")
1. Scope and introduction
This Privacy Policy explains how Global KA Holdings Inc. collects, uses, shares, and protects personal information when you visit our website (www.globalka.com) or contact us using the site form. The policy covers information collected via the site, including through cookies and analytics, and describes your rights and choices. We operate the site from Japan and comply with the Act on the Protection of Personal Information (APPI).
2. Personal data we collect
We collect the following categories of personal data:
Contact form and communications - name, email address, organization, message, and any attachments you send.
Job applications - CV, work history, references, and other information you provide for recruitment.
Technical and usage data - IP address or pseudonymous identifier, browser and device information, pages visited, timestamps, and cookies or similar technologies.
Marketing data - where you opt in, preferences and communication history.
3. How we collect data
Directly from you when you submit a form, email us, or apply for a job.
Automatically via cookies, analytics, and server logs when you browse the site.
From third parties where you have provided consent or where permitted by law (for example, recruitment platforms).
4. Purposes of processing and lawful bases
We process personal data to:
Respond to enquiries and manage communications (legal basis - our legitimate interests to provide information to users).
Operate, maintain, and improve the website, including analytics and security (legal basis - legitimate interests).
Manage job applications and recruitment (legal basis - performance of a contract or legitimate interests).
Comply with legal obligations (legal basis - legal obligation).
Where required, rely on your consent for cookies, marketing messages, and other optional processing. If you are an EU resident, we will identify the specific lawful basis applicable to your data in records. See the GDPR for further detail.
5. Cookies, tracking and analytics
We use cookies and similar technologies, including Google Analytics 4 (GA4), to analyse site traffic and performance and to improve the site. Essential cookies required for site function do not require consent. For non-essential cookies, we obtain consent and allow you to opt out. You can change cookie preferences through the cookie banner or browser settings. See ICO guidance on cookies for best practice.
6. Third parties and processors
We use third-party processors including hosting providers, analytics providers, email platforms, and recruitment platforms. Where required, we enter into Data Processing Agreements (DPAs) with processors and require appropriate security commitments.
7. Cross-border transfers
Personal data may be transferred to and processed in countries outside Japan, including on servers operated by our processors. Where transfers occur, we will rely on appropriate safeguards such as contractual clauses, consent, or other legal mechanisms required by applicable law. APPI requires communicating cross-border transfers where necessary.
8. Retention periods
We retain data according to the following guidelines unless a different period is required by law:
Contact form enquiries - up to 2 years after last meaningful contact.
Job applications - up to 1 year after the application process, unless the applicant consents to longer retention.
Analytics and logs - GA4 configured retention, typically up to 26 months unless shortened.
Backups and logs - up to 2 years depending on system needs.
9. Your rights and how to exercise them
Depending on applicable law, you have rights including access, correction, deletion, restriction, portability, objection to processing, and the right to withdraw consent. For EU or UK residents, consult the GDPR. For California residents, additional rights apply under the CCPA/CPRA. To exercise any right, contact contact@globalka.com and provide information to verify your identity. We will respond in accordance with applicable law.
10. Children’s data
Our site is not intended for children under the applicable age threshold. We do not knowingly collect personal data from children under that age. If we learn we have collected a child’s data unlawfully, we will delete it promptly.
11. Security measures
We maintain reasonable organizational, technical, and administrative safeguards such as TLS/HTTPS, access controls, and limited data access to protect personal data. In the event of a breach that creates a risk to rights and freedoms, we will notify affected individuals and authorities as required by law.
12. Links to third-party websites
The site may link to external websites. This Policy does not apply to third-party sites. We recommend reviewing privacy policies of any external site you visit.
13. Changes to this Policy
We may update this Policy. Material changes will be posted with a new effective date.
14. Contact and complaints
For privacy requests or complaints, email contact@globalka.com. You may also contact Japan’s Personal Information Protection Commission or relevant supervisory authorities in your jurisdiction.