Last updated 2025-04-18
Data Protection
1. Controller
Surge Core Academy ("we", "us") is the data controller for personal data collected through surge-core.one and related enrollment flows. Contact: trust@surge-core.one, postal address 3丁目4番1号, 北英樹町, 宮崎県 805-4764, Japan.
2. Data Categories
We may process identity and contact data, employment or affiliation details you choose to share, billing references (processed by payment partners), technical logs (IP, device, browser), communications content you send us, and learning activity metadata such as attendance timestamps.
3. Purposes
Data is used to deliver courses, schedule mentors, improve materials, secure our platforms, comply with accounting obligations, and respond to lawful requests. Marketing messages are sent only with a separate opt-in where required.
4. Legal Bases
Processing rests on contract performance for enrolled learners, legitimate interests for security and product improvement (balanced against your rights), consent where required (e.g., certain cookies or newsletters), and legal obligations for tax and corporate records.
5. Retention
Enrollment records are retained for the period required by Japanese commercial and tax law, typically seven years for transactional records. Support emails may be retained for twenty-four months unless a longer period is needed for disputes. Telemetry logs rotate on a ninety-day cycle unless security investigations require longer holds.
6. Processors and Sharing
We use infrastructure, email, and analytics subprocessors bound by data processing terms. We do not sell personal data. Data may be disclosed to regulators or courts when lawfully required.
7. International Transfers
Some subprocessors operate outside Japan. Where transfers occur, we rely on contractual safeguards consistent with APPI expectations and vendor certifications appropriate to the service.
8. Security
We implement administrative, technical, and organizational measures including access controls, encryption in transit for modern browsers, and staff training. No method of transmission is perfectly secure; please report suspected compromises promptly.
9. Your Rights
Japanese residents may request access, correction, deletion where applicable, restriction, or explanation of processing. You may withdraw consent where processing is consent-based without affecting prior lawful processing. Contact trust@surge-core.one to exercise rights; we respond within reasonable timelines dictated by law.
10. Children and Policy Changes
Services are directed to adults in professional roles. We do not knowingly collect data from children under sixteen without parental authorization. We will post material changes to this Data Protection notice with an updated effective date and, where required, provide additional notice.
Questions? Email trust@surge-core.one or write to 3丁目4番1号, 北英樹町, 宮崎県 805-4764, Japan.