Privacy Policy

JapanMedGate ("JapanMedGate", "we", "us", or "our") operates the website japanmedgate.com (the "Site") and provides a curated matchmaking service connecting healthcare, pharmaceutical, medical device, diagnostics, and life-science companies with Japan market-entry consultants and specialists (the "Service").

JapanMedGate is operated by [The Matcha Company, KK — to be updated to JapanMedGate KK upon completion of corporate name change], a company registered in Japan with its registered office at Kanegasaku 341-6, Matsudo City, Chiba Prefecture, Japan (the "Operator", "data controller").

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have over it.

We are not a law firm and this document is provided for transparency. If you have questions about how your data is handled, contact us at contact@japanmedgate.com.

1. What data we collect

We collect personal data that you provide directly to us, primarily when you submit a brief through the form on our Site. This may include:

• Your name
• Your business email address
• Your company name and role
• Information about your company's needs, objectives, and market-entry requirements that you choose to include in your brief
• Any other information you voluntarily provide in communications with us (for example, during a qualification call or by email)

We do not intentionally collect special categories of personal data (such as health data about individuals). Please do not include sensitive personal information in your brief.

Technical data

When you visit the Site, certain technical information may be collected automatically by our hosting and infrastructure providers, such as IP address, browser type, and basic usage information. This is described further in the "Cookies" section below.

2. How we use your data

We use your personal data to:

• Review and qualify the brief you submit
• Contact you to discuss your needs (including by email or phone)
• Match you with suitable consultants or specialists
• Communicate with you about our Service
• Operate, maintain, and improve the Site and Service
• Comply with legal and regulatory obligations

We do not sell any of the data we collect.

3. Legal basis for processing (EU / UK visitors)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data on the following legal bases under the GDPR / UK GDPR:

• Performance of a contract or steps prior to a contract — to respond to and act on the brief you submit.
• Legitimate interests — to operate our matchmaking Service, contact relevant business prospects, and improve our Service, balanced against your rights.
• Consent — where required, for example for any optional communications. You may withdraw consent at any time.
• Legal obligation — where we are required to retain or disclose data by law.

4. Sharing your data

To deliver our Service, we share personal data with:

• Consultants and specialists we match you with — but only where relevant to your brief, and governed by confidentiality arrangements.
• Service providers ("data processors") who operate our infrastructure on our behalf, including:
  • Supabase — database and storage of submitted briefs
  • Lovable — website hosting and platform
  • Resend — transactional email delivery
  • Google (Gmail / Google Workspace) — receiving and managing notifications and correspondence

These providers process data only on our instructions. Some of them may process data outside Japan, the EEA, or the UK (see "International transfers").

We may also disclose data where required by law, regulation, or legal process.

5. International transfers

JapanMedGate is operated from Japan, and some of our service providers are located in other countries, including the United States. Where personal data of EEA or UK individuals is transferred outside those regions, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an applicable adequacy decision. Japan benefits from an EU adequacy decision for transfers from the EEA.

6. Data retention

We retain submitted briefs and related personal data for up to 24 months from the date of your last interaction with us, after which it is deleted or anonymised, unless a longer period is required by law or to resolve a dispute. If a match leads to an ongoing relationship, relevant data may be retained for the duration of that relationship and a reasonable period afterward.

7. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Request portability of your data
• Withdraw consent where processing is based on consent
• Lodge a complaint with a supervisory authority (in the EEA/UK) or the Personal Information Protection Commission (in Japan)

To exercise any of these rights, contact us at contact@japanmedgate.com. We will respond within the timeframe required by applicable law.

8. Cookies and tracking

The Site currently uses only essential and functional cookies that may be set by our hosting and infrastructure providers (Lovable, Supabase) to allow the Site to operate correctly. We do not currently run advertising or third-party analytics cookies.

We may in future introduce analytics tools (for example, to understand Site usage). If we do, we will update this Policy and, where required, request your consent beforehand.

9. Data security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children

The Service is intended for business professionals and is not directed at individuals under the age of 18. We do not knowingly collect data from minors.

11. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest version. Material changes will be communicated where appropriate.

12. Contact

For any questions or requests regarding this Privacy Policy or your personal data:

Email: contact@japanmedgate.com
Operator: [The Matcha Company, KK — to be updated to JapanMedGate KK]
Address: Kanegasaku 341-6, Matsudo City, Chiba Prefecture, Japan