Privacy Policy

Personal data is only collected when you actively provide it. The types of data we may receive include:

• Contact form submissions: your name, email address, subject line, and the content of your message. This is provided at your discretion when you use the contact form on this website.
• Cookies and analytics data: if you consent, we may collect anonymised information about how visitors interact with the site — pages visited, session duration, browser type. This data is not linked to your identity without your explicit input.
• Technical log data: IP addresses, access timestamps and referral sources may be recorded automatically by hosting infrastructure for security and uptime monitoring purposes.

Retention: Contact form data is retained for a maximum of 24 months from the date of initial contact, or until the matter it relates to is closed. Analytics data is retained for up to 14 months. Technical logs are typically retained for 90 days.

• Responding to enquiries: Information you submit through the contact form is used solely to respond to your question and, where appropriate, to provide the legal advisory service you have requested.
• Website improvement: Aggregated, anonymised analytics data helps us understand which parts of the site are useful and where navigation can be improved. No individual profiles are built from this data.
• Third-party sharing: We do not sell, rent or otherwise transfer your personal data to third parties for marketing purposes. Data may be shared with service providers acting as processors on our behalf (such as hosting or analytics providers), under contractual obligations of confidentiality.
• Marketing: We do not send unsolicited marketing communications. If you receive a reply to your enquiry, it relates to the matter you raised.

• Encryption in transit: All data transmitted between your browser and this website is encrypted via TLS (HTTPS). Data is not transmitted in plain text.
• Access controls: Access to personal data is limited to individuals who need it for the purposes described in this policy. Credentials are managed and reviewed on a regular basis.
• Breach procedures: In the event of a data breach affecting your personal information, Yuzuriha will notify affected individuals and relevant authorities within the timeframes required by applicable law.
• Storage: Data is stored on servers located in jurisdictions with adequate data protection frameworks. We do not store personal data on personal devices or uncontrolled environments.

You have a number of rights in relation to the personal data Yuzuriha holds about you. These include:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: If any information we hold is inaccurate or incomplete, you may request that it be corrected.
• Right to erasure: You may ask us to delete personal data we hold about you, subject to any retention obligations required by law or professional regulation.
• Right to data portability: Where technically feasible, you may request your data in a structured, machine-readable format.
• Right to object: You may object to certain types of processing, including processing based on legitimate interest. We will assess each objection on its individual merits.

To exercise any of these rights, contact us via the Contact page. We will respond within 30 days in the ordinary case.

This policy may be updated from time to time. The date at the top of this page indicates when it was last revised. Continued use of the website after a revision constitutes acceptance of the updated policy. Material changes will be communicated where reasonably practicable.