Your privacy matters to us

1. Data we collect

• —Contact form data: When you submit our contact form, we collect your name, email address, optional subject line, and the message you write.
• —Usage data: If you consent to analytics cookies, anonymised browsing data is collected — including pages visited, time on site, and general device type. This data cannot identify you personally.
• —Cookie preferences: Your cookie consent choices are stored locally in your browser via localStorage.
• —Project correspondence: If you engage us for a service, any communications and project materials exchanged are retained for the duration of the engagement.

2. How we use your data

• —To respond to enquiries submitted through our contact form.
• —To deliver services you have engaged us for, and to communicate about those services.
• —To improve the website experience using aggregated, anonymised analytics data (with your consent).
• —To comply with legal obligations where applicable.
• —We do not use your data for unsolicited marketing communications.

3. Legal basis for processing

• —Consent: Analytics and advertising cookies are processed only with your explicit consent.
• —Legitimate interest: Responding to enquiries and managing service engagements.
• —Legal obligation: Retaining records where required by Japanese or applicable international law.

4. Data sharing

Cedar Garden Trail does not sell personal data. Data may be shared only in the following limited circumstances:

• —With analytics or advertising service providers (Google Analytics) where you have consented to such cookies.
• —Where required by law or a valid legal process.
• —With subcontractors involved in delivering a service, under confidentiality agreements.

5. Data retention

• —Contact form submissions are retained for up to 24 months or until the purpose for which they were submitted has been fulfilled.
• —Project-related correspondence is retained for the duration of the engagement plus a reasonable period thereafter.
• —Cookie consent records are held in your browser until you clear them or change your preferences.

6. Data protection measures

• —All data is handled with appropriate technical and organisational measures to prevent unauthorised access or disclosure.
• —Access to personal data is restricted to those who need it to carry out legitimate tasks.
• —In the event of a data breach that affects your rights, we will notify you as required by applicable law.

7. Your rights

• —Access: You may request a copy of the personal data we hold about you.
• —Rectification: You may ask us to correct inaccurate or incomplete data.
• —Erasure: You may request deletion of your personal data, subject to legal retention requirements.
• —Portability: You may request your data in a structured, machine-readable format.
• —Objection: You may object to processing based on legitimate interest.
• —Withdraw consent: Where processing is based on consent, you may withdraw it at any time by updating your cookie preferences.

To exercise any of these rights, please use our contact page. We will respond within a reasonable timeframe.