Privacy Policy
Last updated: September 16, 2026
This policy explains how personal data is handled when you visit this website or contact 427 by email or WhatsApp. The website presents business services and has no contact forms, user accounts, newsletter, analytics or advertising tools.
Who is responsible
The controller responsible for personal data processed in connection with this website is 427. You can reach us at:
- +81 80 8836 9213
Visiting the website
You can browse this website without providing any personal data. There are no contact forms, user accounts, newsletter sign-ups, comment fields or file uploads.
When you open a page, your browser automatically sends technical information to the server that delivers it, such as your IP address, the date and time of the request, the page requested, and your browser and operating system. This information is processed by Vercel, the hosting provider of this website to deliver the website and keep it secure and working, and may be recorded in server logs. We do not use it to identify you or to build profiles.
Fonts and images are served from the website itself. Loading a page does not send requests to Google Fonts or other third-party content services.
Contacting us by email or WhatsApp
The website contains email and WhatsApp links. Selecting one opens your email program or WhatsApp with a suggested message; nothing is sent to us unless you choose to send it. Visiting the website does not give 427 access to your email address, phone number or WhatsApp profile.
If you contact us, we process the information you choose to provide, typically your name, company, email address or phone number, WhatsApp profile name, the content of your messages and any documents you share. We use it to:
- respond to your enquiry
- discuss a potential project
- prepare a scope and quotation
- manage a resulting business relationship
WhatsApp is a third-party service that 427 does not control. When you follow a WhatsApp link or message us on WhatsApp, WhatsApp also processes your data under its own terms and privacy policy.
Please do not include sensitive personal data, or unnecessary personal data about other people, in a first enquiry. If example documents are needed for scoping, we can agree how to share them.
Purposes and legal bases
We process personal data only where the EU General Data Protection Regulation (GDPR) allows it:
- Answering enquiries, preparing quotations and carrying out an agreed project: steps taken at your request before entering into a contract, and performance of that contract (Art. 6(1)(b) GDPR). Where you contact us on behalf of an organization, our legitimate interest in handling business enquiries and relationships (Art. 6(1)(f) GDPR).
- Delivering the website securely: our legitimate interest in operating a secure and working website (Art. 6(1)(f) GDPR).
- Keeping records required by law, such as tax and accounting records: compliance with a legal obligation (Art. 6(1)(c) GDPR).
- Establishing, exercising or defending legal claims: our legitimate interests (Art. 6(1)(f) GDPR).
We do not use personal data for automated decision-making or profiling, and we do not sell it or share it for advertising.
Service providers and other recipients
Personal data is shared only where needed for the purposes above:
- Email: messages sent to atsystem427@gmail.com are handled by Google (Gmail), our email service provider.
- WhatsApp: messages are transmitted and stored by WhatsApp under its own privacy policy.
- Hosting: the technical request data described above is processed by Vercel, the hosting provider of this website.
- Professional advisers (such as accountants or lawyers) and public authorities, where necessary for a business relationship or required by law.
International transfers
Some of these providers process data in countries outside the European Economic Area (EEA), including the United States. Where personal data is transferred outside the EEA, the transfer relies on safeguards recognized under the GDPR, such as a European Commission adequacy decision (including the EU–U.S. Data Privacy Framework for certified companies) or Standard Contractual Clauses.
How long data is kept
We keep personal data only for as long as it is needed:
- Enquiries that do not lead to a project are kept only as long as reasonably necessary to handle the enquiry and any follow-up.
- Correspondence and records relating to a project or business relationship are kept for the duration of that relationship and afterwards for as long as required by tax, accounting or other legal obligations, or as needed to establish or defend legal claims.
- Server logs are kept by the hosting provider for a limited period under its own retention settings.
Your rights
Under the GDPR, you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data erased
- restrict how your data is processed
- receive your data in a portable format
- object to processing based on our legitimate interests
To exercise these rights, email atsystem427@gmail.com. We may need to confirm your identity before responding.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU or EEA country where you live, work, or where you believe an infringement took place.
Changes to this policy
We will update this policy when the website or the way we handle personal data changes. The date at the top shows when it was last updated.
Questions about privacy
For any question about this policy or your personal data, email atsystem427@gmail.com.
