ABYSS Inc. ("we", "us") respects the privacy of the people we work with and handles personal information in accordance with the Act on the Protection of Personal Information of Japan (APPI) and other applicable laws.
For individuals in the European Economic Area (EEA), the United Kingdom and Switzerland, we process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the UK GDPR.
- 01
Who we are
- Company: ABYSS Inc.
- Representative: Hiroki Fujigami, CEO
- Address: EX Ebisu-Nishi Bldg. 5F, 2-8-4 Ebisu-Nishi, Shibuya-ku, Tokyo, Japan
We act as the controller of your personal data under the GDPR.
- 02
Information we collect
We collect the following information.
- Your name, email address and message when you use our contact form
- Contact details such as company name, department and phone number that you provide during inquiries or business
- Name, contact details and booking and treatment history when you use our nail salon
- Information sent automatically when you visit this website, such as IP address, browser type, pages viewed, referrer and cookie identifiers
- 03
How we use your information
We use the information we collect for the following purposes.
- To respond to your inquiries and contact you
- To enter into and perform contracts and deliver our services
- To manage nail salon bookings and provide treatments
- To prevent spam and abuse and keep this website secure
- To analyse how this website is used and improve it (only with your consent)
- To comply with legal obligations
- 04
Legal bases under the GDPR
For individuals in the European Economic Area (EEA), the United Kingdom and Switzerland, we rely on the following legal bases.
- Responding to inquiries and performing contracts: performance of a contract or steps prior to entering into a contract (Art. 6(1)(b))
- Preventing abuse and keeping the website secure: our legitimate interests (Art. 6(1)(f))
- Analytics cookies: your consent (Art. 6(1)(a))
- Legal compliance: compliance with a legal obligation (Art. 6(1)(c))
- 05
Sharing with third parties
We do not share your personal information with third parties without your consent, except in the following cases.
- Where required by law
- Where necessary to protect life, health or property and it is difficult to obtain your consent
- Where necessary to cooperate with public authorities performing duties prescribed by law
We do not sell personal information.
- 06
Service providers
We use the following service providers to the extent necessary for the purposes above. We enter into appropriate agreements with them and supervise them as required.
- Google Workspace (Google LLC): receiving and storing inquiry emails
- Cloudflare Turnstile (Cloudflare, Inc.): preventing spam on our forms
- Google Tag Manager and Google Analytics (Google LLC): website analytics (only with your consent)
- Server and hosting providers: hosting this website
- 07
International transfers
Some of our service providers are located outside Japan, including in the United States, and your information may be processed on servers outside Japan.
When we transfer personal data of individuals in the European Economic Area (EEA), the United Kingdom and Switzerland to Japan or other countries, we rely on appropriate safeguards under the GDPR, such as adequacy decisions (Japan has an EU adequacy decision), the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.
- 08
Cookies
This website uses cookies that are necessary for it to work, and cookies for analytics.
We only use analytics cookies if you consent. You can change your choice at any time from "Cookie settings" at the bottom of each page. Declining does not affect your use of this website.
For details on how Google Analytics handles data, please refer to Google's privacy policy.
- 09
How long we keep your information
We keep personal information only as long as necessary for the purposes above, then delete or anonymise it. As a guide:
- Inquiry messages: 3 years from our last contact
- Contract records: for the period required by law after the contract ends
- Analytics data: 2 months, according to the data retention setting in Google Analytics
- 10
Security
We take appropriate measures to prevent leaks, loss or damage of personal information, including access control, encrypted communication and limiting who can handle the data.
- 11
Your rights
You may ask us to notify you of the purposes of use, or to disclose, correct, add to, delete, stop using or stop sharing the personal information we hold about you.
If you are one of the individuals in the European Economic Area (EEA), the United Kingdom and Switzerland, you have the right to access, rectify and erase your data, to restrict processing, to data portability and to object. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
You also have the right to lodge a complaint with the supervisory authority in your country.
To exercise these rights, please contact us using the details below. We will verify your identity and respond without undue delay in accordance with the law. There is no charge for these requests.
- 12
Contact
For questions about this policy or to exercise your rights, please use the contact form on this website or write to us at the address below. Please mention "Privacy request" in your message.
- ABYSS Inc., Privacy Inquiries
- Address: EX Ebisu-Nishi Bldg. 5F, 2-8-4 Ebisu-Nishi, Shibuya-ku, Tokyo 150-0021, Japan
- Contact form: https://abyss-inc.jp/en/contact
- 13
Changes to this policy
We may update this policy to reflect changes in law or in our business. We will announce significant changes on this website.
Effective date: October 3, 2026