GDPR information

1) Applicability

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, GDPR-style rights may apply depending on the context of the interaction. Even where GDPR does not apply, we aim to follow similar principles (data minimization, transparency, and user control).

2) Controller

The data controller for the Website and communications is: VexoMax Smart Living G.K., 1-15-6 Nakameguro, Meguro-ku, Tokyo 153-0061, Japan.

3) Principles we follow

• Lawfulness, fairness, transparency: explain what we do with data in plain language.
• Purpose limitation: use data only for stated purposes (e.g., replying to your request).
• Data minimization: request only what is needed for the task.
• Accuracy: keep records reasonably accurate and correct mistakes on request.
• Storage limitation: avoid keeping data longer than needed.
• Integrity and confidentiality: use reasonable safeguards against unauthorized access.

4) Data categories

• Contact details (name, email; optional phone)
• Message content (subject and details you provide)
• Technical data (basic logs needed for security and operations)
• Cookie preference / performance cookies (as described in Privacy Policy)

5) Purposes

• Responding to inquiries and managing communications
• Providing requested service information and scope clarification
• Website performance, security, and abuse prevention
• Record-keeping for operational reasons

6) Legal bases (where applicable)

When GDPR applies, we rely on one or more of the following legal bases depending on the interaction:

• Consent: for optional communications or when you explicitly agree.
• Contract / pre-contract steps: responding to a request and preparing service scope.
• Legitimate interests: maintaining site security, preventing abuse, and keeping operational records (balanced against your rights).
• Legal obligations: if required by applicable law.

7) Data subject rights

Where GDPR applies, you may have the right to:

• Access — obtain confirmation and a copy of personal data.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion in certain cases.
• Restriction — limit processing in certain cases.
• Portability — receive data in a structured format where applicable.
• Objection — object to processing based on legitimate interests in certain cases.
• Withdraw consent — when processing is based on consent.

To exercise rights, contact us using the details below. We may request verification to protect your data.

8) Processors and DPA approach

We may use vendors for hosting and email delivery. When GDPR applies, we aim to apply a data-processing approach with appropriate contractual terms, limited access, and reasonable vendor review.

9) Retention

We retain inquiry records for as long as needed to respond and maintain reasonable operational history. Retention periods vary by context and may be adjusted based on legal or operational obligations.