Privacy Policy

Effective: 20 October 2026

1. Controller

• Global Bridge Inc. (the "Company")
• Head office: Hulic JP Akasaka Bldg, 2-5-8 Akasaka, Minato-ku, Tokyo 107-0052, Japan
• EU offices: Rambla de Catalunya 125, 08008 Barcelona, Spain / De Ruijterkade 112, 1011AB Amsterdam, Netherlands
• US office: 4700 Millenia Blvd Ste 175, Orlando, FL 32839, United States
• Privacy contact: info@global-bridge.tokyo

The Company is the controller under the EU GDPR and a business operator handling personal information under Japan's Act on the Protection of Personal Information (APPI).

2. Scope

This policy covers this website (Global Bridge Licensing, https://finance.global-bridge.tokyo/), its contact form, consultations by email, video or in person, and our consulting on financial licences, acquisitions of licensed companies and corporate bank accounts.

3. Information we collect

• Name, email, phone, company, country of residence, enquiry details and timing
• Business plans, constitutional documents, ID and source-of-funds documents of shareholders, UBOs and officers, and other information required for licence applications, acquisitions or bank onboarding (only as needed for the service you request)
• Access logs (IP address, browser, referrer, time) and usage data from analytics tools

4. Purposes

• Answering enquiries and free consultations
• Quotes, contracts and invoicing
• Delivering the requested services and coordinating with local law firms, registered agents, auditors, banks and EMIs
• Improving and securing the website and services
• Meeting legal obligations including accounting, tax and AML
• Sending news if you have agreed (you can opt out at any time)

5. Legal bases (GDPR)

• Consent (Art. 6(1)(a))
• Contract or pre-contractual steps (Art. 6(1)(b))
• Legal obligation (Art. 6(1)(c))
• Legitimate interests (Art. 6(1)(f)), where not overridden by your rights

6. Sharing and processors

• With your consent: local law firms, registered agents, auditors, licence agents, banks and EMIs, limited to what the service requires; we explain recipients in advance.
• Processors: Netlify, Inc. (hosting and forms, US), Google LLC (email, documents, Google Analytics), and video, e-signature and billing tools.
• Where required by law, to protect life or property, or on a business transfer.

We never sell personal information or share it for advertising.

7. International transfers

We operate in Japan, Spain, the Netherlands and the US. Transfers from the EEA to Japan rely on the adequacy decision; transfers to other countries rely on Standard Contractual Clauses or other Chapter V GDPR mechanisms. For residents of Japan, this policy provides the information required under Article 28 APPI, and consent is obtained when you submit the form.

8. Retention

• Enquiries that do not lead to a contract: deleted within 2 years of last contact
• Client records: kept for the period required by law (accounting records generally 7 years; AML records as required locally), then deleted or anonymised
• Access logs: up to 12 months

9. Cookies and analytics

We may use Google Analytics with IP anonymisation to understand site usage. We do not use advertising cookies. You can block analytics through your browser settings or Google's opt-out tool.

10. Security

• TLS encryption, least-privilege access and two-factor authentication
• Confidentiality obligations for staff
• Oversight of processors and partners
• Prompt deletion of data no longer needed

In case of a breach we notify authorities (within 72 hours under the GDPR) and affected individuals as required.

11. Confidentiality (NDA)

• We keep your business plans, ownership and financial information confidential and do not disclose them without your consent.
• We use confidential information only to deliver the service.
• Staff, processors and partners are bound by equivalent confidentiality obligations.
• These obligations continue after the engagement ends.

For a written NDA, contact info@global-bridge.tokyo.

12. Your rights

• Access, rectification, erasure, restriction, portability (where the GDPR applies), objection and withdrawal of consent

Contact info@global-bridge.tokyo. We respond within one month after verifying your identity. You may also complain to a supervisory authority such as Japan's PPC, Spain's AEPD or the Dutch Autoriteit Persoonsgegevens.

13. Changes

We may update this policy; the updated version applies from publication on this website.