Privacy policy
How Reflerd Inc. (レフレード株式会社, "we") handles personal and confidential information in providing our services. Last updated: Sep. 2026.
Operator
Our name, representative, and location are shown on the Company page. The full address, corporate number, and other details are provided without delay on request.
1. Information collected
We collect your name, your organisation (optional), the type of enquiry, your e-mail address, and the content of your enquiry when you contact us, request a consultation, or enter into an engagement. Beyond that, business and system information about your organisation may be shared with us under explicit agreement.
2. How information is used
Information collected is used only to reply to and stay in touch with you (replies, quotes, progress updates), to review your enquiry and make proposals, to conclude and perform contracts, and to meet legal obligations. It is never reused for marketing or sold to any third party.
3. Confidentiality
All conversations are treated as confidential from the first message. Except where required by law, neither the content of an enquiry nor the organisation's name is disclosed. An NDA can be signed before any contract; its form, term, and scope are agreed individually.
4. Disclosure to third parties
No information is shared with third parties except as required by law or with the organisation's explicit consent. If outside specialists (lawyers, accountants) need to be involved, that is agreed with the organisation in advance and limited to the minimum needed.
Services we rely on and handling abroad
This site and its contact form run on services of Cloudflare, Inc., a US company, to which we entrust the handling of personal data. Traffic information such as your IP address is handled in Cloudflare's data centres in the United States and Europe, and form submissions are handled on Cloudflare's infrastructure, including outside Japan, before they reach a mail server we operate in Japan. Cloudflare's Data Processing Addendum, part of its customer agreement, limits its handling of personal data to our instructions and sets out security measures and the management of sub-processors; on that basis we consider that Cloudflare maintains a system meeting the standards of Japan's Act on the Protection of Personal Information. At least once a year we review Cloudflare's measures and the data protection laws of the United States and Europe, and we act if a problem arises. Information on these points is available on request. Web fonts are loaded from Google Fonts, which sends your IP address to Google. The contact page uses Cloudflare Turnstile to prevent automated spam. When you open that page, your IP address and information about your browser (such as its TLS fingerprint and User-Agent) are sent to Cloudflare and used to detect bots. Cloudflare also uses this information for its own purpose of improving Turnstile's detection. For this check, information may also be stored in your browser under Cloudflare's domain. When you send an enquiry, we ask Cloudflare's DNS service whether the domain of the address you entered can receive mail. Only the domain is sent: never the rest of the address, and never your message. The site sets one cookie, which stores your language preference. We use no analytics. No other external service handles personal information.
5. Retention and deletion
Information is kept only as long as its purpose requires. An enquiry that does not lead to an engagement is deleted one year after the last exchange. Engagement information is deleted promptly after the contract ends, in agreement with the organisation, unless the law requires it to be kept. Digital data is deleted so that it cannot be recovered. On request, we delete information before these times.
6. Safeguards
To prevent leakage, loss, and tampering we keep information in encrypted storage on managed devices and in the cloud; limit access to what the work requires; use only managed work devices with disk encryption and screen lock; encrypt backups; keep software up to date; manage credentials properly; delete or return documents at the end of an engagement; and work inside the client's environment where required. We review these measures periodically. Should an incident occur, we notify the organisation promptly, investigate its scope, and take corrective action.
7. Requests and complaints
To request notification of the purpose of use, disclosure, correction, addition, deletion, suspension of use, erasure, or suspension of third-party provision of personal data we hold about you, use the contact form. We will explain how we confirm your identity and any other steps, according to the request. There is no fee. Complaints and questions about how we handle personal information are also accepted through the contact form.
8. Updates to this policy
This policy may be revised when laws change or our services change. Material updates will be announced on this site. If the Japanese and English versions of this policy differ, the Japanese version prevails.
Contact
Questions about this policy can be sent through the contact form.