Last updated 2026-04-18

Data Protection

1. Controller

Zonex Brainy Synap controls personal data collected through this site and related intake processes for participants based in Japan and abroad.

2. Categories of data

We may process identity data (name, company), contact data (email, phone), professional context (role, team size), technical data (IP address, device type), and message content submitted through forms.

3. Purposes

Purposes include responding to inquiries, delivering lab information, improving site usability, securing infrastructure, and meeting record-keeping aligned with Act on the Protection of Personal Information (APPI) in Japan.

4. Legal bases (EEA visitors)

For visitors in the European Economic Area, we rely on contract preparation, legitimate interests (site security, analytics where permitted), and consent when required for non-essential cookies.

5. Retention

Contact records are retained up to thirty-six months unless a longer period is required for active engagements. Technical logs rotate after ninety days unless needed for incident investigation.

6. Processors and recipients

We use hosting, email delivery, and analytics subprocessors under written agreements. A current list is available on request and includes categories such as infrastructure and communications.

7. International transfers

Data may be processed outside Japan including in the EEA or United States. Where GDPR applies, we implement Standard Contractual Clauses or equivalent safeguards. APPI-aligned disclosures are available in Japanese upon request.

8. Security measures

We apply access controls, encrypted transport, segmented environments, and periodic reviews. No online service is perfectly secure; report suspected incidents promptly.

9. Your rights

Depending on jurisdiction you may request access, correction, deletion, restriction, portability, or objection. Japanese residents may request disclosure or correction under APPI. Contact us using the email above.

10. Children

The site is not directed to children under sixteen. If you believe we collected a child’s data, contact us for deletion.

11. Policy updates

We revise this statement when practices change. Material changes will be noted with a new last updated date and, where appropriate, a banner on the site.