Privacy Policy

Our Commitment to Privacy

At Green Path, we are committed to protecting your personal information and respecting your privacy rights. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We comply with applicable data protection laws, including Japan's Act on the Protection of Personal Information (APPI) and, where applicable, the General Data Protection Regulation (GDPR). By using our website, you acknowledge that you have read and understood this Privacy Policy.

Effective Date: October 2025

Information We Collect

Personal Information You Provide

We collect information that you voluntarily provide to us when you:

• Contact us through forms on our website (name, email address, company name, phone number, message content)
• Request information about our sustainability consulting services
• Subscribe to our newsletter or updates
• Engage with us for consulting projects (business information, organizational data)

Information Collected Automatically

When you visit our website, we automatically collect certain information about your device and browsing activity:

• Log data (IP address, browser type, operating system, pages visited)
• Device information (device type, unique device identifiers)
• Usage data (time spent on pages, links clicked, search queries)
• Cookie data (see our Cookie Policy for details)

Information from Third Parties

We may receive information about you from third-party analytics providers, advertising networks, or business partners who help us improve our services and understand our audience better.

How We Use Your Information

We use the information we collect for the following purposes:

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you have given explicit consent for specific processing activities (e.g., marketing communications)
• Contract Performance: When processing is necessary to fulfill our contractual obligations to you
• Legitimate Interests: When processing is necessary for our legitimate business interests, such as improving our services and protecting against fraud
• Legal Obligation: When processing is required to comply with applicable laws and regulations

How We Share Your Information

We may share your information with the following categories of recipients:

• Service Providers: Third-party vendors who help us operate our website, conduct business, or provide services (e.g., hosting providers, analytics services, email service providers)
• Business Partners: Organizations with whom we collaborate to deliver joint services or programs, subject to confidentiality agreements
• Legal Authorities: Law enforcement, regulatory authorities, or other parties when required by law or to protect our legal rights
• Business Transfers: In connection with any merger, sale of assets, financing, or acquisition of all or part of our business

We ensure that all third parties who process your data on our behalf maintain appropriate security measures and comply with applicable data protection laws.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The retention period depends on:

• The nature of the information and the purposes for which it was collected
• Legal, regulatory, or contractual obligations that require us to retain data
• Whether you have requested deletion of your data

When we no longer need your information, we will securely delete or anonymize it.

Data Security Measures

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: We use SSL/TLS encryption to protect data transmitted between your browser and our servers
• Access Controls: We limit access to personal information to authorized personnel who need it for legitimate business purposes
• Regular Monitoring: We continuously monitor our systems for potential security vulnerabilities and attacks
• Incident Response: We have procedures in place to detect, respond to, and notify affected parties of data breaches when required by law

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Right to Access: You can request a copy of the personal information we hold about you
• Right to Rectification: You can request that we correct inaccurate or incomplete information
• Right to Erasure: You can request deletion of your personal information under certain circumstances
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format
• Right to Object: You can object to certain types of processing, including direct marketing
• Right to Restrict Processing: You can request that we limit how we use your information
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us using the information provided below. We will respond to your request within the timeframe required by applicable law.

Your Rights and Opt-Out Instructions

You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:

• Avoid filling out contact forms, account registrations, or any data-submitting features
• Disable cookies through your browser settings (see our Cookie Policy for more details)
• Contact us directly to request the deletion of any previously shared personal data

We respect your privacy choices. If you would like us to delete your data, please reach out to us using the contact details provided below. We will process your request promptly in accordance with applicable law.

International Data Transfers

Your information may be transferred to and processed in countries other than Japan. These countries may have different data protection laws than your jurisdiction. When we transfer your data internationally, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by relevant authorities
• Adequacy decisions recognizing equivalent levels of data protection
• Your explicit consent for the transfer

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will notify you by:

• Updating the "Effective Date" at the top of this policy
• Posting a prominent notice on our website
• Sending you an email notification (if we have your email address)

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

We aim to respond to all privacy-related inquiries within 30 days.