Privacy policy

This policy explains how Gokaizen processes personal data on the public website at internal.gokaizen.cloud (which web.internal.gokaizen.cloud redirects to).

The short version: the site has no accounts, no forms and no tracking. The only personal data it processes is what any web server must record to deliver a page, plus whatever you choose to tell us if you email us.

Who is responsible

Personal information controller	Gokaizen
Data Protection Officer	admin@gokaizen.online
Privacy questions and requests	admin@gokaizen.online

What we process

Category	Data	Where it comes from
Technical access data	IP address, date and time of the request, the page or file requested, the response status and size, the referring page, and the browser’s user-agent string	Recorded automatically by the web server when your browser requests a page
Enquiry correspondence	Your email address, your name if you give it, and anything you choose to write — typically the site, systems and requirements you want to discuss	You, when you email us

We do not collect anything else. There are no cookies, no analytics, no tracking pixels, no fingerprinting and no third-party scripts. See the cookie notice.

Why we use it

Purpose	Data	Legal basis
Delivering the site to your browser	Technical access data	Legitimate interest: a web server cannot answer a request without the address to answer to
Keeping the site available and secure — diagnosing faults, and detecting abuse such as scanning or denial-of-service attempts	Technical access data	Legitimate interest in the security and availability of our systems
Answering your enquiry and, if it leads somewhere, discussing the work	Enquiry correspondence	Steps taken at your request prior to entering a contract; otherwise our legitimate interest in responding to people who contact us
Keeping records of business correspondence	Enquiry correspondence	Legitimate interest, and compliance with record-keeping obligations where they apply

We do not use your data for advertising, we do not profile you, and we make no automated decisions about you.

Who receives your data

• Our hosting and network providers, who operate the infrastructure the site runs on and process technical access data on our instructions.
• Our email provider, which carries and stores enquiry correspondence on our instructions.
• Authorities, where we are legally required to disclose data, or where disclosure is necessary to establish, exercise or defend legal claims.

We do not sell personal data and we do not share it with advertisers or data brokers.

How long we keep it

Data	Retention
Technical access data	A short period sufficient for security monitoring and fault diagnosis, after which logs are rotated and deleted
Enquiry correspondence that does not lead to an engagement	Kept while there is a reasonable prospect of further discussion, then deleted
Enquiry correspondence connected to an engagement	Kept with the rest of the records for that engagement, for as long as those records are required

International transfers

Our providers may process data outside the Philippines. Where that happens, we rely on the safeguards those providers are contractually required to maintain, and process no more data than the service requires.

Your rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the right to:

• Be informed whether and how your personal data is processed.
• Access your personal data and obtain a copy of it.
• Correct inaccurate or incomplete personal data.
• Object to processing, including processing based on legitimate interest.
• Erasure or blocking of personal data that is incomplete, outdated, false, unlawfully obtained, or no longer needed, subject to records we are required by law to keep.
• Data portability: receive your personal data in a commonly used electronic format.
• Damages for inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of your personal data.
• File a complaint with the National Privacy Commission (privacy.gov.ph).

To exercise any of these rights, contact our Data Protection Officer at the address above. We may ask you to verify your identity first. We will respond within thirty (30) days of receiving your request.

Links to other sites

Some pages link to our LinkedIn page and to gokaizen.ai. Those sites are operated by other organizations under their own privacy policies, and this one does not apply to them.

Children

This site is aimed at businesses and is not directed at children. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy. The effective date at the top shows the current version, and we will inform people of significant changes before the new version takes effect.

Contact

Privacy questions, or to exercise any of the rights above: admin@gokaizen.online