The law this policy follows. India is in the middle of a change of regime. The Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025 are being brought into force in stages, and the substantive obligations on companies such as ours apply from 13 May 2027. Until then the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules) continue to apply.
We have written this policy to meet both. Where the DPDP Act gives you a right that is not yet enforceable, we will still act on your request.
So Japan India Pvt. Ltd. ("SoJapan India", "we", "us") is a company registered in India with its office in Gurugram, Haryana. We sell Japanese anime goods and original oripa, and we help Japanese food, beverage, apparel and textile companies work with businesses in India. Under the DPDP Act we are the Data Fiduciary for the personal data described here. Under the SPDI Rules we are the body corporate holding that information.
You can reach us at info@sojpn.com with any question about this policy or about how we handle your data.
It covers personal data we collect through this website, including the inquiry form, and the personal data we collect when you contact us by email or messaging, meet us at an event, or work with us as a customer, supplier or partner. It does not cover websites we link to, such as india-marketing.jp, which have their own policies.
| What | Where it comes from |
|---|---|
| Name, company name, email address, phone or WhatsApp number, city, type of business, the areas you are interested in, and whatever you write in the message field | The inquiry form on this website, submitted by you |
| Name, contact details and the content of your messages | Email, WhatsApp and other messages you send us, and business cards you give us |
| Business contact details, order and shipping details, and tax registration numbers such as GSTIN where a transaction requires them | You or your company, in the course of doing business with us |
| IP address, browser and device information, the pages you request and the time of the request | Automatically recorded in our web server logs when you visit this website |
We do not ask you for passwords, financial account details, card details, biometric information, health information or any of the other categories that the SPDI Rules treat as sensitive personal data. Please do not send them to us through the inquiry form.
This website does not set advertising cookies and does not run third-party analytics or tracking. WordPress, which this site runs on, may set cookies if you log in to it as an administrator, which does not apply to ordinary visitors. If we add analytics later, we will update this policy before we do.
We rely on your consent for the first purpose. For the others we rely on the performance of our dealings with you and on our legal obligations. We do not sell your personal data, and we do not use it for advertising.
We do not give your personal data to anyone else for their own marketing.
This website is hosted in Japan, our email runs on a global provider whose servers may be located outside India, and our group company in Japan takes part in handling inquiries. Your personal data is therefore stored in and accessed from outside India. Section 16 of the DPDP Act permits transfer of personal data outside India except to countries the Central Government restricts by notification; no such restriction applies to Japan. Where a sectoral rule imposes a stricter requirement on particular data, we follow that rule.
We keep inquiry data for as long as we are in contact with you about it, and for up to three years after our last exchange, so that we can pick up a conversation you started. Records tied to a transaction are kept for the period Indian tax, customs and company law requires, which is generally eight years. Server logs are kept for up to twelve months. When a period ends, we delete the data or remove what identifies you.
This website is served over HTTPS. Access to inquiry data and to our mail accounts is limited to the people in our team who need it, and each of them uses their own account. We keep the website software and its plugins updated. These are the reasonable security practices and procedures required by Rule 8 of the SPDI Rules, and we review them as our work changes. No system is perfectly secure, and we will tell you and the Data Protection Board of India if a breach affects your personal data, in the manner the DPDP Rules require once that obligation is in force.
Under the DPDP Act you may:
Write to info@sojpn.com to exercise any of these. So that we do not disclose your data to the wrong person, we may ask you to confirm your identity — usually by replying from the email address you used with us, and where that is not possible, by producing identification. Under the SPDI Rules we may charge a fee for the work of providing information, and if we do, we will tell you the amount before we start.
If you are unhappy with how we have handled your personal data, contact our Grievance Officer:
We will acknowledge your grievance and respond within 30 days of receiving it. This is within the one month set by Rule 5(9) of the SPDI Rules and within the maximum period the DPDP Rules allow. If you are not satisfied with our response, you may take the matter to the Data Protection Board of India.
This website is meant for businesses, and we do not direct it at children. We do not knowingly collect the personal data of anyone under 18, and we do not profile children or send them advertising. If you believe a child has sent us personal data, write to us and we will delete it.
We will update this policy as our business and Indian law change, and the date at the top will always show when we last did. Where a change affects how we use personal data you have already given us, we will tell you before it takes effect.