Legal

Privacy notice

This notice explains how Software Hub Audit Co. handles personal data collected through smart-softwarehub.digital and during an audit of applications engagement.

Data controller

Software Hub Audit Co., 49777 W Broadway, 昭三町, 宮城県, Japan, is the data controller. Contact: hello@smart-softwarehub.digital, +81-6-940-5323.

Data we collect

From contact forms: name, email address, selected audit type, preferred timing, and message content. During engagements we may process business contact details of client staff and, where necessary for access sampling, identifiers present in client-provided exports. We do not seek special-category data through the website form.

Purposes and legal bases

We process enquiry data to respond to scoping requests and to prepare proposals (legitimate interests and, where applicable, steps prior to contract). Engagement data is processed to perform the contract and to meet professional record-keeping duties.

Retention

Unsuccessful enquiries are retained up to twenty-four months. Engagement files, including findings packs and working-paper indexes, are retained for seven years unless a longer period is required by the client contract or law. Cookie retention periods are described on the cookies page.

User rights

Depending on applicable law, you may request access, correction, deletion, restriction, or portability of personal data we hold, and you may object to certain processing. To exercise rights, email hello@smart-softwarehub.digital. You may also lodge a complaint with a competent Japanese supervisory authority.

International transfers

Our primary processing occurs in Japan. If a client requires collaboration with overseas group auditors, personal data in engagement files may be shared under contractual confidentiality and only as instructed by the client. Website hosting or email providers may process limited technical data on servers outside Japan; we select providers with appropriate safeguards.

Security

We apply access controls to engagement folders, limit staff access to need-to-know, and prefer encrypted transfer of evidence exports. No method of transmission is perfectly secure; please avoid sending password files through the public contact form.

Updates

We may update this notice periodically. The version published on this page is the current one.