Privacy Policy (Global Data Protection)
International Privacy Policy for Non-Resident Foreign & Global Investors (Compliant with APPI, GDPR, and LinkedIn Sign-In Terms)
Our Commitment to Safeguarding Global Investors' Privacy
Japan Real Estate LLC ('we', 'us', or 'our') is a fully licensed real estate brokerage in Tokyo, Japan, registered with the Ministry of Land, Infrastructure, Transport and Tourism (MLIT), and operates an in-house Family Legal Office to deliver premier real estate investment services to non-resident foreign investors and global wealth elites. We are strictly committed to complying with Japan's Act on the Protection of Personal Information (APPI), the European Union's General Data Protection Regulation (GDPR), and international data protection standards.
1. Data Controller & Company Information
Corporate identity and data governance structure
Japan Real Estate LLC is a licensed real estate brokerage agency headquartered in Akishima-shi, Tokyo, operating under the license of the Governor of Tokyo and registered with MLIT.
Our designated Data Protection Officer (DPO) and Privacy Office oversee all data collection, processing, and storage across our digital platform and brokerage operations.
For legal, visa, and corporate formation advisory services, we collaborate closely with our partnered Family Legal Office under strict confidentiality agreements and secure data protocols.
- •Data Controller: Japan Real Estate (Tokyo Governor License / MLIT)
- •Scope: Non-resident foreign investors, global property buyers, and platform users
- •Compliance: Japan APPI, EU/EEA GDPR, UK GDPR, and international privacy standards
2. LinkedIn Login Data Acquisition & Newsletter Special Clause
Terms regarding LinkedIn OAuth sign-in and automated real estate newsletter delivery
Our web application features single sign-on (SSO) authentication via LinkedIn OAuth 2.0. When you sign in using your LinkedIn account, we acquire and securely store the following personal and professional profile information in our Firebase (Google Cloud) backend database.
Acquired Data: Full name, email address, profile picture, professional headline, employment/company details, LinkedIn public profile URL, and LinkedIn User ID.
Use of LinkedIn Data: Your email address and professional profile details are utilized for account verification and to automatically deliver tailored newsletters, Tokyo-area luxury property listings matching your registered investment criteria (budget, yield, preferred prefectures), and Japanese real estate market insights.
Right to Unsubscribe: Every newsletter and notification email contains a clear 1-click 'Unsubscribe' link. You may opt out of automated newsletters or promotional communications at any time.
- •Data Acquired from LinkedIn: Name, Email, Profile Picture, Headline, Employment info, LinkedIn ID
- •Purpose: Authentication, customized property matching, and automated investment newsletters
- •Opt-out: Easy 1-click unsubscribe available in all newsletters and profile settings
3. Categories of Personal Data Collected
Data categories collected through platform interactions and brokerage inquiries
We collect the following categories of personal data:
[Account & Authentication Data] Full name, email address, and professional title obtained via LinkedIn Sign-In or contact forms.
[Investment Preferences & Criteria] Your target budget (in JPY/USD/EUR), preferred prefectures (Tokyo, Kanagawa, Saitama, Chiba), property types (commercial building, hotel, retail, residential), and target net yield (CAP rate).
[Interaction & Activity Data] Viewing history of 3D virtual walkthroughs, chat transcripts with our Geminilà AI Concierge, saved properties, and property inquiry logs.
[Technical & Usage Data] IP address, browser type, device specifications, language preference, timestamps, and cookie identifiers.
- •Data Minimization: The information we collect is limited to what is necessary for property proposals and transactions; we do not collect unnecessary sensitive financial data.
- •Walkthrough and search history are used solely to personalize your investment feed.
4. Purposes of Data Processing
Explicit specification of how your personal data is utilized
Your personal data is processed exclusively for the following purposes:
1. Providing real estate investment brokerage services across Greater Tokyo (Tokyo, Kanagawa, Saitama, Chiba).
2. Matching your investment criteria with exclusive off-market properties and delivering automated personalized newsletters.
3. Delivering intelligent real estate consultations and advisory analysis through our interactive AI Concierge.
4. Coordinating legal, visa, and corporate establishment consultations through our partnered Family Legal Office.
5. Maintaining platform security, authentication integrity, and fraud prevention.
- •We never use your personal data beyond these specified purposes without your explicit consent.
5. Legal Basis for Processing Under GDPR Article 6
Lawful grounds for data processing for EU/EEA and UK residents
In accordance with GDPR Article 6, we rely on the following legal bases for processing personal data:
[Consent] For LinkedIn login authentication, marketing newsletters, and non-essential cookies (you may withdraw consent at any time).
[Performance of a Contract] For fulfilling brokerage services, Letters of Intent (LOI), viewing bookings, and purchase agreements.
[Legitimate Interest] For securing our web application, preventing fraudulent activity, and enhancing user experience.
[Legal Obligation] For compliance with Japanese real estate licensing laws, anti-money laundering regulations (eKYC), and tax record-keeping requirements.
- •EU/EEA data subjects have the right to withdraw consent for marketing communications at any time.
6. International Cross-Border Data Transfers
Secure data transfer standards between overseas jurisdictions and Japan / Google Cloud
As a Japanese corporation, your personal data is stored on secure servers in Japan and globally hosted on Google Cloud Platform / Firebase infrastructure.
Transfers of personal data from the EU/EEA to Japan are conducted lawfully pursuant to the European Commission's Adequacy Decision for Japan (GDPR Article 45).
Where international transfers occur outside jurisdictions with adequacy decisions, we implement Standard Contractual Clauses (SCCs) and robust technical safeguards.
- •Japan is recognized by the European Commission as providing an adequate level of data protection.
- •All data transmissions are protected by high-standard TLS/SSL encryption.
7. Security Safeguards & Third-Party Disclosure Restrictions
Advanced cloud security via Firebase Secret Manager and strict non-disclosure rules
We implement rigorous technical and organizational security measures, including Firebase Security Rules, Firebase Secret Manager, encryption in transit and at rest, and strict role-based access control.
[Third-Party Disclosure Restrictions] We will never sell, trade, or rent your personal data to third-party data brokers. Disclosure is limited to:
1. Certified professionals with your prior consent (e.g., judicial scriveners for property registration, Family Legal Office for visa advisory).
2. Competent administrative or judicial authorities when strictly required by applicable law.
3. Emergency situations to protect vital human interests or property.
[Entrustment to Contracted Agents] We may allow contracted agents (individuals or companies) who introduce clients or guide property viewings to handle your information to the extent necessary to perform those services. Agents are bound by confidentiality obligations and are contractually required to comply with this Privacy Policy, and we supervise them as necessary and appropriate. In the agent-facing screens, clients are shown only as name initials together with the transaction stage; email addresses, identity verification data and asset information are not displayed.
- •Zero selling or unauthorized trading of investor data to third parties.
- •All API credentials and database keys are protected via enterprise secret management.
9. Data Retention & Disposal
Retention schedules and secure deletion protocols
We retain your personal data only for as long as necessary to fulfill the stated purposes or as required by Japanese real estate transaction laws (typically 5 to 10 years for official transaction logs).
Upon account deletion or newsletter unsubscribe requests, promotional and profile data is promptly anonymized or deleted from our active production servers.
- •Transaction records required by Japanese law are archived securely and purged upon expiration.
10. Your Data Subject Rights (Access, Rectification, Erasure)
Rights granted under Japan APPI, GDPR, and global data protection laws
You are entitled to exercise the following rights regarding your personal data free of charge:
1. Right of Access: Request a copy of your personal data and details of processing.
2. Right to Rectification: Correct inaccurate or outdated profile or investment criteria data.
3. Right to Erasure ('Right to be Forgotten'): Request deletion of your personal account and data.
4. Right to Restriction: Restrict how your personal data is processed.
5. Right to Data Portability: Receive your data in a structured, machine-readable format.
6. Right to Object & Withdraw Consent: Object to automated newsletters or withdraw consent at any time.
- •Use the interactive 'Data Rights Request' button on this page to submit a request directly.
11. Privacy Office & Contact Information
Direct contact information for privacy inquiries and DPO communication
If you have any questions regarding this Privacy Policy, your personal data, or wish to exercise your data subject rights, please contact our Privacy Office:
Company: Japan Real Estate LLC (Japan Real Estate Godo Kaisha)
Office: Privacy & Compliance Office
Address: 2-11-18 Mokusei-no-Mori, Akishima-shi, Tokyo, Japan
Email: info@japan-real-estate.com
Support Hours: Mon-Fri 10:00 - 18:00 (Japan Standard Time - JST)
- •We commit to acknowledging and initiating review of all privacy inquiries within 5 business days.
