Privacy Policy

Effective date: November 1, 2026

kabayama base LLC (カバ山ベース合同会社; "we", "us") handles personal information obtained through visits to our website about.kabayama-base.com (the "Site"), email inquiries, business dealings, and job applications in accordance with Japan's Act on the Protection of Personal Information (the "APPI") and other applicable laws and guidelines, as set out below.
Personal information processed in our Segment Builder service is covered by the separate "Segment Builder Privacy Policy".

1. Who we are

• Name: kabayama base LLC (カバ山ベース合同会社)
• Address: Shibuya Dogenzaka Tokyu Bldg. 2F-C, 1-10-8 Dogenzaka, Shibuya-ku, Tokyo 150-0043, Japan
• Representative: Junya Anaguchi, Representative Member
• Corporate Number: 5011003025631

2. Information we collect

The Site has no contact form. We accept inquiries by email only.

1. Email inquiries: name, company, department/title, email address, phone number, the content of your message, and anything else you include in your email.
2. Business dealings: names and contact details of business contacts, business card information, and information about negotiations, contracts and billing.
3. Job applications: name, contact details, date of birth, education and work history, application documents such as résumés/CVs and portfolios, and interview notes.
4. Site visits: cookie and similar identifiers, IP address, browser/device type, pages viewed, referrer, date/time, and ad impression/click data ("Access Data"). We treat Access Data as information that does not by itself identify an individual (personally referable information).

3. How we use it

1. To respond to and contact you about inquiries
2. To introduce our services, negotiate, conclude and perform contracts, and handle billing and payment
3. To send information about our services and events (you can ask us to stop at any time)
4. Recruitment (applicants' personal data is used only for selection and related communications)
5. To analyze and improve the Site
6. To deliver and measure advertising, including retargeting (remarketing) ads
7. To prevent unauthorized access and keep things secure
8. To comply with the law

We will not use personal information beyond these purposes without your prior consent unless permitted by law.

4. Cookies and advertising tags

The Site may use advertising tags provided by Google LLC, Meta Platforms, Inc. and X Corp. (the Google Ads tag, the Meta Pixel and the X Pixel). These tags use cookies and similar technologies to send Access Data to those companies. We use this to deliver ads — including showing our ads on other websites and social media to people who visited the Site (retargeting) — and to measure ad performance. Each company handles the data under its own privacy policy. If we use an analytics tool such as Google Analytics, Access Data is likewise sent to its provider and used to analyze how the Site is used.

• You can stop this by disabling or deleting cookies in your browser; the Site still works.
• You can also use industry opt-out pages such as https://optout.aboutads.info/ and https://www.youronlinechoices.eu/.
• We do not link Access Data with names, email addresses or other personal data we hold. If we start doing so, we will update this policy first and obtain any required consent.
• The Site is served by GitHub, Inc.'s (USA) GitHub Pages, which processes access logs (such as IP addresses) to deliver the Site.

5. Disclosure to third parties

We do not provide personal data to third parties without your consent, except: (1) as required by law; (2) where necessary to protect a person's life, body or property and it is difficult to obtain consent; (3) where especially necessary for public health or the healthy development of children and it is difficult to obtain consent; (4) where necessary to cooperate with government bodies performing legal duties and obtaining consent could interfere with those duties; or (5) as otherwise permitted by law. Outsourcing within the scope of our purposes and business succession are not third-party provision.

6. Service providers

We may outsource the handling of personal data to service providers to the extent needed for the purposes above (e.g., email and cloud storage, payments, accounting and tax, and website hosting (GitHub Pages)). We choose them carefully and supervise them appropriately.

7. Transfers outside Japan

1. We use services of US companies (such as Google LLC), so personal data may be stored and processed on servers in the US and other countries.
2. When we provide personal data to a third party outside Japan, we will, as required by the APPI, either (a) obtain your prior consent after informing you of the country, its data protection system and the recipient's measures, or (b) put in place a framework (e.g., by contract) ensuring the recipient continuously takes measures equivalent to those required by the APPI, and provide information on those measures on request.
3. The US has no comprehensive federal privacy law; personal information is protected by sector-specific federal laws and state laws (e.g., California's CCPA/CPRA). See the Personal Information Protection Commission's survey of foreign data protection systems (https://www.ppc.go.jp/personalinfo/legal/kaiseihogohou/#gaikoku).

8. Security measures

• Policies and rules: this policy and internal rules for collection, use, storage and deletion.
• Organizational: the Representative Member is responsible for personal data handling and reviews it regularly; we have an incident response and reporting procedure.
• Human: any staff or contractors are bound by confidentiality and trained as needed.
• Physical: screen locks and disk encryption on devices; protection against theft or loss of documents and equipment.
• Technical: least-privilege access, two-factor authentication, encryption in transit, software updates and protection against unauthorized access.
• Understanding foreign environments: where data is stored abroad (mainly the US), we take measures based on an understanding of that country's data protection system.

9. Your rights

1. You may request notification of the purposes of use, disclosure (including records of third-party provision), correction, addition or deletion, suspension of use or erasure, and suspension of third-party provision of your retained personal data.
2. Please email the contact in Section 13. After verifying your identity (or your agent's authority), we will respond without delay as required by law.
3. We disclose by email (electronic records) or in writing, as you choose.
4. We do not charge a fee for these requests.
5. If we cannot comply under the law, we will tell you why.

10. Retention

We keep personal data only as long as needed for the purposes and then delete it without delay. If an applicant is not hired, we delete their data within 6 months after the selection ends (application documents are not returned). Data of hired applicants is kept as employee information.

11. Changes

We may update this policy due to legal or service changes. The updated policy takes effect when posted on the Site. We will announce material changes on the Site.

12. Language

The Japanese version is the official version. This English version is a reference translation; if they differ, the Japanese version prevails.

13. Contact

kabayama base LLC — Privacy Inquiries
Address: Shibuya Dogenzaka Tokyu Bldg. 2F-C, 1-10-8 Dogenzaka, Shibuya-ku, Tokyo 150-0043, Japan
Email: info@kabayama-base.com
(We accept inquiries by email only.)