Data Protection

Last updated: 2025-11-18

1. Data Controller

Energyx Surge Academy, reachable at the Japan address listed on our contact page, acts as controller for personal data described here.

2. Data We Collect

We collect account details (name, email), optional company name, billing references where applicable, communications you send us, technical logs (IP, device, browser), and cookie data as described in Cookie Preferences.

3. Purposes of Processing

Data is used to deliver courses, provide mentor feedback, improve platforms, secure services, comply with law, and communicate administrative updates.

4. Legal Bases

Processing rests on contract performance, legitimate interests (security, analytics where consented), and consent where required (e.g., non-essential cookies).

5. Retention

We retain learner records while accounts are active and for a period afterward to meet legal, tax, and dispute resolution needs, typically not longer than necessary for each purpose.

6. Processors and Transfers

We use vetted subprocessors (hosting, email, analytics if allowed). Where data leaves Japan, we implement appropriate safeguards such as standard contractual clauses or adequacy decisions when applicable.

7. Your Rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or objection. Japanese consumers may exercise rights under the Act on the Protection of Personal Information (APPI) where applicable.

8. Security

We apply administrative, technical, and organizational measures appropriate to risk. No method of transmission is 100% secure.

9. Children's Privacy

Services are directed at adults and professionals. We do not knowingly collect data from children under 16 without parental authority.

10. Policy Updates

We will post changes here and adjust the last updated date. Material changes may be emailed where appropriate.

Contact: privacy@energyx-surge.digital