Legal
Privacy Policy
Last updated: 21 October 2026
This Privacy Policy explains how Kenjin Labs合同会社 (“Kenjin Labs,” “we,” “us,” or “our”), the owner and operator of the Keisho X website, newsletter, and related services (the “Service”), handles personal information. We handle personal information in accordance with Japan’s Act on the Protection of Personal Information (個人情報の保護に関する法律, “APPI”), related guidelines of the Personal Information Protection Commission, and this Policy.
1. Business operator
- Name: Kenjin Labs合同会社
- Address: 23-7 Umezu Nishiurachō, Ukyo Ward, Kyoto 615-0917, Japan
- Representative: provided without delay on request to [email protected]
- Contact for personal information: [email protected]
2. Personal information we collect
- Inquiry forms: your name, email address, organization, whether you are a buyer or partner, budget range, sectors of interest, timeline, experience, and your message.
- Newsletter: your email address, where you signed up, confirmation and unsubscribe tokens, subscription and unsubscribe dates, and records of which issues were sent to you.
- Buyer register: your name and email address; your buyer type, deal size range, and the sectors and regions of Japan you are interested in; any optional details you add (country of residence, timeline, Japanese ability, and a note); whether you consented to us sharing your profile with advisers, when, and to which version of the consent wording; when you confirmed your email; and our review status and internal notes about your profile.
- Email you send us: your address and the content of your message.
- Technical data: IP address, browser and device information, pages viewed, referring pages, and timestamps, recorded in server logs and by the tools described in Section 7. Form submissions are rate-limited using your IP address or email address; those records are deleted after about 48 hours.
You can read the Service without giving us any personal information. The newsletter, buyer register, and inquiry forms cannot work without the information they ask for.
3. Purposes of use
We use personal information for the following purposes:
- To reply to inquiries and, where you ask for it, to consider and follow up on introductions or engagements;
- To confirm newsletter subscriptions, send the newsletter, and process unsubscribes;
- To run the buyer register: to review (vet) buyer profiles and, only if you have given your separate consent, to share your profile with Japanese M&A advisers we have vetted so that they can contact you about businesses for sale;
- To operate, maintain, secure, and improve the Service, including measuring how it is used;
- To detect and prevent spam, fraud, abuse, and breaches of our Terms of Service;
- To comply with laws and respond to lawful requests from public authorities;
- To create statistical information that does not identify individuals.
We will not use personal information beyond these purposes without your consent, except as permitted by law. If we change the purposes, we will do so only within a scope reasonably related to the original purposes and will announce the change on this page.
4. Provision to third parties
We do not provide personal data to third parties without your prior consent, except where permitted by the APPI, for example:
- where required by law, or needed to protect a person’s life, body, or property and your consent is difficult to obtain;
- where needed to cooperate with a national or local government body performing duties prescribed by law;
- where we entrust the handling of personal data to a service provider within the scope needed for the purposes in Section 3 (see Section 5);
- where personal data is transferred with a business as a result of a merger, business transfer, or other business succession.
We do not sell personal information. If you ask us to introduce you to a partner or advisor, we will share your inquiry with them only with your consent.
Sharing your buyer register profile with advisers
When you join the buyer register you can tick a separate box to consent to us sharing your profile. If you do, we provide your profile (your name, email address, buyer type, deal size range, sectors, regions, and any optional details you added) to Japanese M&A advisers and intermediaries that we have vetted, so that they can contact you about businesses for sale. We share a profile only after we have reviewed and approved it and you have confirmed your email address, and we never share our internal notes. If you leave the box unticked, we do not share your profile with anyone and you simply receive the newsletter. We keep a record of the consent you gave (when, and to which wording) and of which advisers received your profile and when.
Advisers who receive your profile are located in Japan and handle it under the APPI and their own privacy policies. You can withdraw your consent, change your answers, or delete your profile at any time using the private link in your confirmation email, or by contacting us. Once you withdraw, we stop sharing your profile; for advisers who have already received it, we will ask them to stop using it if you request this.
5. Service providers and transfers outside Japan
We use the following service providers to run the Service. Some are located outside Japan, so personal data may be handled in the countries listed:
- DigitalOcean, LLC (United States): server hosting for the website, database, and server logs.
- Cloudflare, Inc. (United States): content delivery and security for all website traffic, Turnstile bot checks on forms, and routing of email sent to our addresses.
- Brevo (France, European Union): sending the newsletter, subscription confirmations, and inquiry notifications.
- Google LLC (United States): Google Analytics (usage measurement), Google Fonts (web fonts), and Google Maps (the regional map on the For Buyers page).
- Tailwind Labs (United States): the Tailwind CSS stylesheet library, loaded from cdn.tailwindcss.com.
The European Union is recognized by Japan’s Personal Information Protection Commission as having a personal information protection system equivalent to Japan’s. The United States has no single comprehensive federal privacy law; personal information there is protected by sector-specific federal laws and state laws. For each provider, we rely on its contractual data protection terms, which we consider to be measures equivalent to those required of a business operator under the APPI. You can ask us for more information about these measures using the contact details in Section 1. Information on other countries’ systems is published by the Personal Information Protection Commission.
6. Security measures
We take the following measures to keep personal data secure:
- Basic policy and rules: we have adopted this Policy and decide who may handle personal data and how.
- Organizational and personnel: access to personal data is limited to the people who need it to operate the Service, and anyone handling it is bound by confidentiality.
- Physical: our servers are in professionally managed data centers operated by our hosting provider.
- Technical: the Service is served over HTTPS; the database is not publicly accessible; the administration area is password-protected; and forms are protected against automated abuse (bot checks, signed time limits, and rate limits).
- Understanding the external environment: where personal data is handled outside Japan, we take into account the personal information protection system of the country concerned (see Section 5).
No method of transmission or storage is completely secure. If you believe your information has been compromised, please contact us.
7. Cookies, analytics, and external transmission
The Service uses cookies and similar technologies. When you view pages, your browser sends information directly to the following services:
- Google Analytics (Google LLC): pages viewed, referring page, scroll depth and similar events, browser and device information, IP address, and a cookie identifier, to measure and improve use of the Service. You can opt out with the Google Analytics opt-out browser add-on. See how Google uses this information.
- Google Fonts (Google LLC): IP address, browser information, and the requesting page, to deliver web fonts.
- Google Maps (Google LLC), on the For Buyers page only: IP address, browser information, and map interactions, to display the map.
- Cloudflare Turnstile (Cloudflare, Inc.), on pages with forms: browser and device signals and IP address, to tell people from automated traffic.
- Tailwind CSS CDN (Tailwind Labs): IP address and browser information, to deliver the page stylesheet.
You can block or delete cookies in your browser settings; some features may then not work properly.
8. Newsletter and unsubscribing
We send the newsletter only to addresses that have subscribed. Every issue contains an unsubscribe link that works with one click, and you can also unsubscribe by emailing [email protected]. After you unsubscribe we keep your address and the unsubscribe date so that we do not email you again. Our email provider may record whether messages were delivered, opened, or clicked.
Joining the buyer register also subscribes you to the newsletter once you confirm your email address. Unsubscribing from the newsletter stops only the newsletter. If you consented to sharing your buyer profile with advisers, that consent stays in place until you withdraw it. To withdraw your consent, change your answers, or delete your profile, use your private profile link or contact us.
9. Your requests (disclosure, correction, suspension of use)
Under the APPI, you may ask us to:
- notify you of the purposes of use of your retained personal data;
- disclose your retained personal data, including in electronic form, and records of its provision to third parties;
- correct, add to, or delete your retained personal data if it is inaccurate;
- stop using or delete your retained personal data, or stop providing it to third parties, where the APPI allows it (for example, if it was used beyond the purposes of use, obtained improperly, or is no longer needed by us).
To make a request, email [email protected] or use the contact form, describing what you are asking for. We will confirm your identity in a reasonable way (normally by replying to the email address we hold) and respond without undue delay. If we cannot meet a request in whole or in part, we will tell you why, as required by law.
10. Retention
We keep personal data only as long as needed for the purposes in Section 3: inquiry information for as long as needed to respond and keep appropriate business records; newsletter data while you are subscribed and, after you unsubscribe, the minimum needed to honor the unsubscribe; buyer register profiles until you delete your profile, ask us to delete it, or we close the register, and records of your consent and of provision to advisers for as long as the law requires; and technical data for limited periods needed for security and troubleshooting. We delete or anonymize personal data when it is no longer needed, unless law requires us to keep it.
11. Visitors from outside Japan
The Service is operated from Japan. If you are in another country, your information is handled in Japan and in the countries listed in Section 5. If the EU General Data Protection Regulation (GDPR) or UK GDPR applies to you, we rely on your consent (newsletter, and sharing your buyer profile with advisers), on taking steps at your request (inquiries), and on our legitimate interests in operating and securing the Service; you may have rights of access, rectification, erasure, restriction, portability, and objection, and the right to complain to your supervisory authority. Contact us to exercise them.
12. Children
The Service is intended for business and professional readers and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe we have, please contact us and we will delete it.
13. Changes to this Policy
We may update this Policy to reflect changes in law or in how the Service works. We will post the updated Policy on this page with a new “last updated” date, and announce material changes on the Service in advance where reasonably possible.
14. Contact
For questions, requests, or complaints about how we handle personal information, contact [email protected] or use the contact form.
Operator: Kenjin Labs合同会社, 23-7 Umezu Nishiurachō, Ukyo Ward, Kyoto 615-0917, Japan.