Privacy Policy

Last Updated: December 1, 2025

Nozaki CPA & Tax Firm (hereinafter “the Firm”, “We”, “Us”, or “Our”) is committed to protecting your privacy. This Privacy Policy explains how We collect, use, disclose, store, and protect the personal data (as defined by applicable laws) of visitors to Our websites nozakicpas.jp (the “Site”) and clients of Our services.

This Policy is prepared in accordance with Japan’s Act on the Protection of Personal Information (APPI) and also incorporates key principles of the EU’s General Data Protection Regulation (GDPR) for visitors from the EU/EEA.

1. Data Controller (Who We Are)

  • Data Controller: Nozaki CPA & Tax Firm
  • Attention: Privacy Contact
  • Address: 8F, JPR Yokohama Bdgs., Kitasaiwai, Nishi Word, Yokohama, Kanagawa, 2200004 JP
  • Contact: privacy@nozakicpas.jp (replace “[at]” with “@” when sending)

2. What Data We Collect and Why (Purpose of Use)

We collect and process personal data for the following purposes:

(A) For Website Visitors:

  • Browsing Data: We may (subject to your consent) collect data via Google Analytics (e.g., your IP address (anonymized), device type, pages visited) to understand traffic and improve Our Site.
  • Google Fonts: Our Site may load Google Fonts, which could transmit your IP address to Google. We are working to mitigate this privacy risk by self-hosting these fonts.
  • Contact Forms: When you contact Us via a form, We collect your name, email, and inquiry details to respond to your request. (Legal Basis: Legitimate Interest)

(B) For Clients and Potential Clients:

  • Know Your Customer (KYC) Data: As a prerequisite to engagement, We collect highly sensitive identification data (e.g., passport copies, address verification) to comply with Our professional due diligence and risk management obligations.
  • Tax Service Data: To perform Our services (e.g., Tax Agent, Tax Filing, Bookkeeping), We collect all necessary financial and personal information (e.g., income, expenses, family details, tax numbers). (Legal Basis: Performance of a Contract, Legal Obligation)

3. Legal Basis for Processing

We process personal data based on the following legal bases:

  • Performance of a Contract: To fulfill Our obligations under an Engagement Letter.
  • Legal Obligation: To comply with Japanese laws (e.g., Tax Accountant Act’s secrecy duty, KYC requirements) and tax regulations.
  • Legitimate Interest: To respond to your inquiries or improve Our Site.
  • Consent: Where required (e.g., for non-essential cookies), We will ask for your explicit consent.

4. Data Disclosure to Third Parties

We do not sell your personal data. We will only disclose your data in the following limited circumstances:

  • Tax Authorities: To file your tax documents (e.g., the Japanese National Tax Agency) as required by law.
  • Legal Compliance: If required by a court order or other binding legal process.
  • Service Providers: To IT and cloud service providers (e.g., cloud storage, email) who process data on Our behalf under strict confidentiality agreements.

5. Data Retention

We retain personal data only for as long as necessary.

  • Client Data (KYC, Tax Records): Retained for seven (7) years following the end of the business year, as required under the Japanese Company Act, Corporation Tax Act, and Certified Public Tax Accountant Act.
  • Inquiry Data: Retained for a reasonable period to manage correspondence.

6. Cookies and Analytics

Our Site uses cookies. Essential cookies are necessary for the Site to function. Non-essential cookies (like Google Analytics) are used only with your consent, which is managed via Our cookie consent banner.

7. Addendum for Residents of the EU/EEA (GDPR)

If you are a resident of the European Union (EU) or European Economic Area (EEA), you have specific rights under the GDPR:

  • Data Transfer: Your data will be transferred to and processed in Japan. We rely on the European Commission’s Adequacy Decision for Japan (adopted on January 23, 2019), which confirms that Japan provides a level of data protection equivalent to that in the EU.
  • Your Rights: You have the right to access, rectify, erase (“right to be forgotten”), restrict processing of, and request data portability of your personal data. You also have the right to object to processing.

8. Your Rights (All Users)

You have the right to request access to, correction, or deletion of your personal data held by Us. To exercise any of your rights (including GDPR rights), please contact Us at the address in Section 1.

9. Governing Law

This Privacy Policy and all matters related to your data shall be governed by the laws of Japan.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top of this policy indicates when it was last revised.