Effective date
Effective date: 2026-02-10. If we update this policy, we will revise the effective date and provide additional notice where required.
Definitions
- “Company”, “we”, “us”, “our” refers to XyroMax.
- “Website” refers to the website at xyromax.top and its pages.
- “Personal Data” means information that identifies or can reasonably be linked to an individual (e.g., name, email).
- “Processing” means any operation performed on Personal Data (collection, storage, use, disclosure, deletion).
- “Cookies” are small text files stored on your device; similar technologies include local storage and pixels.
Scope & who we are
This Privacy Policy applies to our Website and related communications (e.g., messages you send through our forms). It covers how we process Personal Data when you:
- Browse our Website pages,
- Send an inquiry, request information, or submit a form,
- Communicate with us by email or other channels we provide,
- Use cookie preferences or opt-out options.
Data we collect
1) Information you provide directly
- Contact form data: full name, email, phone , subject, and message content.
- Communications: information you include when you email us or reply to our messages.
2) Information collected automatically
- Device and usage data: basic technical data (e.g., browser type, approximate time of visit, pages viewed).
- Log data: server logs may include IP address, request timestamps, and error diagnostics.
- Cookie preferences: your consent choice for optional cookie categories where applicable.
3) Information we do not intend to collect
We do not ask for sensitive categories of data (e.g., medical/health information, government IDs, payment card details on this website). Please avoid sending sensitive details in free-text fields.
How we use Personal Data
We use Personal Data for the following purposes:
We do not use Google Analytics or Google-based tracking scripts on this Website.
Legal bases
Our legal basis depends on your location and applicable laws. Where a “legal basis” is required (e.g., for EEA/UK visitors), we may rely on:
- Consent (e.g., optional cookies, when you voluntarily submit a form).
- Contract / steps before contract (e.g., responding to service inquiries and coordinating service delivery).
- Legitimate interests (e.g., security, preventing abuse, improving website experience) where not overridden by your rights.
- Legal obligation (e.g., compliance and lawful requests).
For Japan-based processing, we aim to align our practices with applicable privacy principles, including those under Japan’s APPI, where relevant to our operations.
International transfers
Depending on where our service providers are located, your information may be processed outside your country/region. When required, we take steps intended to support lawful transfers (e.g., contractual protections and access controls).
Retention
We retain Personal Data only for as long as reasonably necessary for the purposes described in this policy, including:
- Responding to your inquiry and maintaining a reasonable record of communications,
- Security and incident prevention,
- Legal, accounting, or compliance obligations where applicable.
Retention periods vary by context. If you request deletion, we will evaluate the request subject to legal requirements and legitimate needs.
Security
We use reasonable administrative, technical, and organizational measures intended to protect Personal Data. No method of transmission or storage is completely secure; therefore we cannot guarantee absolute security.
- Access controls and least-privilege practices where applicable,
- Monitoring for errors and suspicious activity,
- Data minimization principles for forms and communications.
Your rights and choices
Your rights depend on your location and applicable laws. Where provided by law, you may have rights to:
- Request access to Personal Data we hold about you,
- Request correction of inaccurate data,
- Request deletion (subject to legal exceptions),
- Object to or restrict certain processing,
- Withdraw consent where processing is based on consent (does not affect prior lawful processing),
- Opt-out of marketing communications (see Opt-out).
How to exercise rights
Contact us using the details on the Contact page. We may request information to verify your identity before responding.
Children
Our Website and programs are intended for adults. We do not knowingly collect Personal Data from children. If you believe a child has provided Personal Data, contact us and we will take reasonable steps to address the issue.
Changes to this policy
We may update this policy to reflect changes in our practices, technology, or legal requirements. We will post the updated version on this page and revise the effective date.
Contact
For privacy questions or requests, contact us using verified details listed here:
- Contact page: contact.php
- Email: [email protected]
- Address: 8-1-4 Meguro, Meguro-ku, Tokyo 153-0063, Japan
Important
Please do not include sensitive personal details in messages or forms. Use minimal information needed for scheduling and logistics.