PRIVACY POLICY

Privacy Policy

This Policy explains the personal information we handle, the purposes of use, our safeguards, and the rights available to you.

01

Policy and data controller

GOKU TECHNOLOGY JAPAN (the “Company”) acquires, uses, and manages personal information appropriately in accordance with Japan’s Act on the Protection of Personal Information (the “APPI”), other applicable laws, and guidance issued by the Personal Information Protection Commission of Japan.

This Policy applies to the handling of personal information through the websites operated by the Company and the inquiry services provided through those websites.

  • Controller: GOKU TECHNOLOGY JAPAN
  • Address: 71-2 Nakao-dai, Naka-ku, Yokohama, Kanagawa 231-0839, Japan
  • Representative Director: 蔡肖羽

02

Information we collect

We acquire or process the following information by lawful and fair means. Please do not include sensitive personal information, Japanese Individual Numbers, payment information, or other information unnecessary for responding to your inquiry.

For the initial short-drama review, do not submit business licenses, identity documents, bank-account details, or other sensitive materials through this form. If they become necessary, we will provide a secure method after the initial review.

  • Inquiry data: name, company name, email address, telephone number, inquiry category, message, display language, consent status for this Policy, and submission date and time.
  • Access and security data: IP address, access time, pages viewed, referrer, browser, operating system, device information, form-submission status, and other technical data needed to prevent misuse or investigate faults.
  • External-service data: information sent by the user’s browser to Google when Google Maps is displayed, such as IP address and browser or device information.
  • Initial short-drama review applicant data: legal company name, country and city, company role, contact name and title, business email address, telephone number or WeChat ID, and any optional company name, website, profile, corporate identifier, and representative works supplied by the applicant.
  • Initial short-drama review title data: Chinese title, HTTPS sample or materials URL, access code, backup URL, status of rights for Japan, and any optional genre, production status, episode count, episode duration, synopsis, original platform, released territories, viewing or payment performance, and notes supplied by the applicant.
  • Initial-review management data: the WK receipt number, preferred cooperation and contact methods, declarations and consent status, submission language and time, review status, assigned reviewer, and update history.

03

Purposes of use

We use personal information and related data for the purposes below. Any change to these purposes will remain reasonably related to the original purposes and will be announced on this page or by another appropriate method.

  • Responding to inquiries, making necessary contact, verifying identity where appropriate, and managing response history.
  • Reviewing consultations and proposals, conducting business discussions and meetings, preparing contracts, and making related communications.
  • Conducting the initial review for possible distribution of short dramas in Japan, reviewing title and rights status, and evaluating fit with current cooperation requirements.
  • Identifying duplicate submissions, issuing receipt numbers, managing review status, assigned reviewers and response history, and requesting necessary supplementary information.
  • Communicating initial-review results and possible next steps, conducting business discussions, preparing contracts, and making related communications.
  • Operating, maintaining, and improving the website and inquiry functions; investigating faults; and preventing misuse.
  • Complying with legal obligations, addressing disputes or rights infringements, and protecting the rights and safety of the Company or third parties.

04

Disclosure to third parties

We do not disclose personal data to a third party without prior consent unless permitted by the APPI or other applicable law. We do not sell personal data.

We may disclose data to the extent necessary where required by law, where consent is difficult to obtain and disclosure is necessary to protect life, body, or property, or in another circumstance permitted by law. Processing by contractors, business succession, and other handling not legally treated as third-party disclosure are limited to what is necessary for the relevant purpose.

05

Service providers and overseas handling

We may entrust all or part of the handling of personal information to external service providers to the extent necessary for website operations, server and database administration, data storage, email delivery, and maintenance. We select providers appropriately, establish handling conditions by contract or equivalent means, and exercise necessary and appropriate oversight.

Where personal data is provided to an overseas provider or handled outside Japan, we review the relevant privacy framework and safeguards and take the steps required under the APPI, which may include providing information, obtaining consent, or conducting ongoing oversight.

Google Maps is embedded on the Company Profile page. When the map is displayed, Google may process technical information about the user under its own policies. We do not send inquiry-form contents to Google Maps.

06

Security safeguards

To prevent leakage, loss, or damage and otherwise manage personal data appropriately, we apply necessary and appropriate safeguards proportionate to the nature and risks of the data. Upon request, we will provide further information without delay to the extent that doing so does not compromise security.

  • Organizational measures: defined responsibilities and procedures, review of handling status, and incident reporting and response arrangements.
  • Personnel measures: limiting authorized personnel, confidentiality obligations, and privacy awareness and training. Initial short-drama review data is accessible only to personnel who need it for the relevant review or distribution work.
  • Physical measures: appropriate management of devices, documents, and storage media, including protection against theft or loss.
  • Technical measures: access controls, credential management, encrypted communications, vulnerability management, log review, and protection against unauthorized access.
  • External-link handling: we do not automatically open, retrieve, crawl, or preview submitted sample URLs, backup URLs, or access codes. We do not place or send them in public pages, URL parameters, or analytics systems.
  • Provider oversight: appropriate provider selection, review of handling practices, and necessary supervision.

07

Retention

Inquiry data is retained while a response is in progress and for appropriate response-history management and, as a general rule, is deleted or anonymized one year after the inquiry has been resolved. Data may be retained longer where necessary for a contract, a legal retention obligation, dispute handling, or another legitimate reason.

Initial short-drama review data for a case that does not lead to a contract or cooperation is, as a general rule, deleted or anonymized 12 months after the initial review is completed or the case is closed. Data for a case that proceeds to a contract or cooperation may be retained for as long as necessary for that purpose, a legal retention obligation, dispute handling, or another legitimate reason.

Access logs and technical data used to prevent misuse are retained only for a reasonable period necessary for security and fault investigation, then deleted or anonymized when no longer needed.

08

Cookies, analytics, and external services

The display language is determined by the language-specific page URL. We do not use cookies or localStorage to retain a language preference, and we currently do not use Company-controlled cookies for advertising or audience analytics.

When external content such as Google Maps is displayed, the provider may use cookies or similar technologies. Users can manage cookies and stored data through browser settings, although restricting them may prevent some features from displaying correctly.

If we introduce analytics, advertising, or another new service, we will update this Policy and provide any notice or obtain any consent required by law.

09

Data-subject request procedure

A data subject or legal representative may request, to the extent provided by the APPI, notice of purposes, disclosure (including records of third-party provision), correction, addition or deletion, suspension of use, erasure, or cessation of third-party provision of retained personal data concerning that person.

Send a request to contact@gkt.co.jp with the subject “Personal Information Request.” For an inquiry, state its approximate submission date, the name and email address used, and the action requested. For an initial short-drama review submission, state the WK receipt number, the name and email address used for the submission, and the action requested.

We will verify identity to the extent reasonably necessary, investigate without delay in accordance with law, and notify the requester of the result. A representative may be asked to provide evidence of authority. Where the law permits us not to comply, we will explain the outcome and the reason to the extent possible.

We do not charge a request fee in principle. If actual costs arise from postal delivery or another requested method, we will explain the amount and payment method in advance.

10

Privacy and complaints contact

For questions, complaints, or data-subject requests, contact the Privacy Desk of GOKU TECHNOLOGY JAPAN at contact@gkt.co.jp. Postal address: 71-2 Nakao-dai, Naka-ku, Yokohama, Kanagawa 231-0839, Japan.

11

Changes and effective date

We may revise this Policy to reflect changes in law, services, or personal-information practices. Material changes will be announced clearly on this website.

Effective date: September 17, 2026