PRIVACY POLICY

Kreston ProWorks Corp. (hereinafter referred to as “the Company,” “we,” “us,” or “our”) is committed to protecting the privacy and personal data of our clients, website visitors, and business partners globally. This Privacy Policy outlines how we collect, process, and protect your information in compliance with Japan’s Act on the Protection of Personal Information (APPI) and, where applicable, international regulations such as the European Union General Data Protection Regulation (GDPR).

Business Operator Information

Entity Name: Kreston ProWorks Corp.
Address: Daiwa Akasaka Building 4F, 2-14-5 Akasaka, Minato-ku, Tokyo 107-0052, Japan
Representative Director: Marek Lehocky, Group CEO

Scope & Applicable Law

Because we provide cross-border business support, accounting, and advisory services:

Primary Governing Law: Japanese APPI applies to all processing conducted by our Tokyo headquarters.
Extraterritorial Scope: Where we offer services to, or monitor the behavior of, individuals located in the EU/EEA or the UK, the provisions of the GDPR (or UK GDPR) apply concurrently.

Purpose of Use & Legal Bases for Processing

We process personal data provided via our website or service engagements strictly within the scope of the following specified purposes and legal grounds:

Purpose of Use	Legal Grounds (APPI / GDPR)
Providing international business setup, tax, accounting, and advisory services	Contract Performance / Legitimate Business Interests
Responding to public inquiries, consultation requests, and proposals	Contract Pre-execution / Legitimate Interests
Distributing newsletters, regulatory updates, and event invitations	Consent (where required) / Legitimate Marketing Interests
Website optimization, system security, and analytics	Legitimate Interests / Cookie Consent
Fulfilling regulatory, statutory tax, and anti-money laundering (AML) duties	Legal Obligation

Cross-Border Transfers & International Network Data Sharing

To deliver international services and operate within the global Kreston Global network:

Global Network Transfers: We may transfer data to member firms or cloud service providers outside Japan.
Safeguards for Foreign Transfers: Transfers to foreign jurisdictions are executed under adequate statutory frameworks, including:
- Transfers to countries recognized by the Japanese Personal Information Protection Commission (PPC) and the European Commission as offering adequate protection (e.g., EU-Japan Mutual Adequacy Agreement).
- Execution of Standard Contractual Clauses (SCCs) or contractual equivalents binding overseas recipients to APPI and GDPR standards.
- Explicit consent obtained where required by law.

Third-Party Sharing & Joint Use Framework

We do not sell personal data. We only share personal data with third parties under the following conditions:

Outsourced Vendors: Trusted IT providers, secure hosting services, and payment processors bound by strict confidentiality agreements.
Legal Mandates: When required by courts, tax authorities, or government agencies under valid statutory orders.
APPI Joint Use: When sharing data within the Kreston ProWorks group structure, we maintain public disclosures detailing shared items, joint entity scopes, shared purposes, and the designated responsible party (Kreston ProWorks Corp., Tokyo).

Data Subject Rights

Depending on your jurisdiction, you have the following rights regarding your personal data:

Under Japan’s APPI:

Right to request notification of the purpose of use.
Right to disclosure of retained personal data or records of third-party transfers.
Right to correction, addition, or deletion of inaccurate data.
Right to suspension of use or erasure if data is handled beyond specified purposes or unlawfully acquired.

Under GDPR (for EU/EEA & UK Residents):

Right to access, rectification, and erasure (“Right to be Forgotten”).
Right to restriction of processing and data portability.
Right to object to processing based on legitimate interests or direct marketing.
Right to lodge a complaint with an EU Supervisory Authority.

Security Management Measures

We implement robust organizational, technical, physical, and human safeguards to protect against unauthorized access, loss, or leakage:

Technical: End-to-end encryption, multi-factor authentication, firewalls, and access controls.
Organizational: Designated Data Protection Officers, internal compliance protocols, and regular audits.
Human: NDA execution and privacy compliance training for all staff.

Cookies & Web Analytics

Our website uses cookies and tracking tools to improve functional navigation and analyze site traffic. You can manage or disable cookies at any time via your browser settings.

Privacy Contact Desk

For questions, consultations, or to exercise your statutory privacy rights, contact our primary compliance officer:

Data Protection Desk: Kreston ProWorks Privacy Office
Address: Daiwa Akasaka Bldg 4F, 2-14-5 Akasaka, Minato-ku, Tokyo 107-0052, Japan
Email: privacy@krestonproworks.com
Business Hours: Monday – Friday, 10:00–16:00 JST (Excluding Japanese public holidays)

Updates to this Policy

We review and update this policy periodically to reflect evolving legal standards in Japan and internationally.

Effective Date: September 8, 2026
Last Revised: September 8, 2026