Privacy Policy

This policy explains how Nakao Holdings (“we”) handles personal data on nakaoholdings.com. It follows the principles of the EU and UK General Data Protection Regulations (GDPR) and applies to visitors from any country; local law may give you additional rights.

Who is responsible

Nakao Holdings, a founder-led digital studio working between Brazil and Japan, is the controller of the personal data described here. Contact for anything about privacy: contact@nakaoholdings.com (or contato@nakaoholdings.com in Portuguese).

What we collect

Nothing you type is sent: the project form currently prepares your message on your device so that you can copy or download it. We measure how the site is used with Cloudflare Web Analytics, without cookies (see “Site statistics” below). We do not use advertising, tracking pixels, social-media embeds or other third-party scripts, and we never sell or share personal information.

Why, and on what legal basis

• To answer your enquiry and, if you want, prepare a written scope: steps taken at your request before a possible contract (GDPR Art. 6(1)(b)).
• To keep the site and the form safe from abuse (for example limiting repeated sends): our legitimate interest in security (Art. 6(1)(f)).
• To count visits and measure loading speed in aggregate (Cloudflare Web Analytics): our legitimate interest in running and improving the site (Art. 6(1)(f)).
• To remember your preferences between visits (language and animation): only with your consent (Art. 6(1)(a)), which you can withdraw at any time in “Cookie settings”.

Who receives it

Your form message is delivered by e-mail to our mailbox — contact@nakaoholdings.com from the English and Japanese pages, contato@nakaoholdings.com from the Portuguese pages — and is not stored on the website.

Our hosting and e-mail delivery provider, Cloudflare, Inc., processes technical data (such as your IP address and browser type) to deliver the pages and protect them, and transmits the form e-mail on our behalf. Cloudflare acts as our processor. We do not give your data to anyone else, except where the law requires it.

Site statistics

We use Cloudflare Web Analytics to see, in aggregate, which pages are visited and how fast they load. When a page opens, a script from Cloudflare (static.cloudflareinsights.com) reports the page address, the referring page, the browser and device type, the country (derived from the connection) and loading-performance measurements to Cloudflare, through this site’s own address.

It uses no cookies or other browser storage and does not build a profile of you across websites; we only see totals and averages. Cloudflare, Inc. processes this data as our provider. Legal basis: our legitimate interest (Art. 6(1)(f)); you can object by writing to contact@nakaoholdings.com, or block it with a content blocker in your browser.

International transfers

We work from Brazil and Japan, and Cloudflare operates worldwide, including in the United States. When data leaves the European Economic Area or the United Kingdom, it is protected by the safeguards our provider offers for such transfers, such as the European Commission's Standard Contractual Clauses.

How long we keep it

Form e-mails are kept for up to 12 months after our last exchange, unless the conversation becomes a project, in which case they are kept as long as needed for that project and our legal obligations. Preferences stored in your browser stay there until you clear them or decline in “Cookie settings”.

Your rights

Depending on where you live, you can ask us to access, correct, delete or export your data, to restrict or object to its use, and to withdraw consent at any time without affecting earlier processing. Write to contact@nakaoholdings.com; we answer within one month. You can also complain to your data protection authority. We do not sell or “share” personal information as defined by California law, and we do not use it for automated decisions or profiling.

Security

The site is served only over HTTPS, with a strict Content-Security-Policy and no third-party code. The form endpoint accepts requests only from this site, checks every field, and stores nothing.

Children

This site is for businesses and adults. It is not directed at children under 16, and we do not knowingly collect their data.

Changes

If this policy changes, the new version will be published here with a new date. Significant changes will be highlighted on the site.