Privacy Policy

Privacy Policy

Effective date: 13 October 2026

Preface

Third Scope Inc. (Japan), Third Scope Asia PTE. LTD. (Singapore), and Third Scope Europe Ltd. (United Kingdom) (individually or collectively, "we", "us", "our", or the "Company") operate our business across Japan, Singapore, and the United Kingdom under our shared vision: "Designing Intelligence — to design intelligence and open up market possibilities." We believe that handling the personal data of our customers, job applicants, business contacts and every visitor to our websites (third-scope.com, sg.third-scope.com, eu.third-scope.com, and their related pages; collectively, the "Site") responsibly is fundamental to earning your trust.

This Privacy Policy ("Policy") sets out our common approach to handling personal data collected through the Site and in the course of our business activities, together with jurisdiction-specific supplementary provisions for Japan, Singapore, and the United Kingdom/European Economic Area ("EEA"), set out as Annexes.

This Policy has been prepared with reference to:

  • Japan: the Act on the Protection of Personal Information ("APPI")
  • Singapore: the Personal Data Protection Act 2012 ("PDPA")
  • United Kingdom: the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018
  • European Economic Area: Regulation (EU) 2016/679 ("EU GDPR"), to the extent we process personal data of individuals located in the EU/EEA through eu.third-scope.com

Part 1: Common Provisions

Article 1 (Definitions)

  1. "Personal data" means information relating to a living individual by which that individual can be identified, in accordance with the applicable definitions under APPI, PDPA, UK GDPR, and EU GDPR respectively.

  2. "Group" means Third Scope Inc., Third Scope Asia PTE. LTD., Third Scope Europe Ltd., and Third Scope Marketing Co., Ltd., together with their affiliates.

  3. "Site Operator" means the entity operating the relevant domain of the Site, as set out below.

    DomainSite OperatorLocation
    third-scope.comThird Scope Inc.Japan
    sg.third-scope.comThird Scope Asia PTE. LTD.Singapore
    eu.third-scope.comThird Scope Europe Ltd.United Kingdom

Article 2 (Personal Data We Collect)

We principally collect the following personal data in connection with your use of the Site or our business activities:

  1. Information you submit through our contact form (name, company, department, job title, email address, phone number, and the content of your inquiry).
  2. Information you submit through our recruitment/application form (name, contact details, information contained in your CV/resume, and other information relating to the recruitment process).
  3. Information you submit to download whitepapers or other materials (name, company name, email address, industry, etc.).
  4. Information you submit to subscribe to our newsletter (name, email address, etc.).
  5. Information collected automatically through cookies and similar technologies (IP address, browser information, browsing history, access timestamps, etc. — see our separate Cookie Policy for details).
  6. Business contacts: name, job title, employer, work email address, work phone number, professional profile URL and work location of people whose role is relevant to our services. We obtain this from publicly available sources (such as company websites and press releases), professional networking sites (such as LinkedIn) and business contact data providers (such as Apollo.io). See Annex C, Section C-2.

Article 3 (Purposes of Use)

We use the personal data we collect for the following purposes:

  1. To respond to and manage inquiries and consultations.
  2. To conduct recruitment processes and communicate results to applicants.
  3. To provide whitepapers, materials, and related communications.
  4. To send newsletters.
  5. To operate, maintain, and improve the Site, including analytics.
  6. To provide information about our services, seminars, and events, and for marketing purposes (subject to your right to opt out under Article 10).
  7. To maintain the security of the Site and prevent misuse.
  8. To comply with legal obligations and to exercise or defend our rights under this Policy or related Terms of Use.
  9. To contact business contacts, by email or professional networking sites, about how our services may help their organisation, and to keep a record of their preferences, including any request not to be contacted.

Article 4 (Cookies and Tracking Technologies)

The Site uses cookies and similar technologies for analytics purposes (such as Google Analytics) and for remarketing/retargeted advertising (such as Google Ads and Meta Ads). Please refer to our separate Cookie Policy for details on the categories of cookies used, their purposes, and how to manage or disable them. For users located in the UK and EU/EEA, we obtain prior consent for non-essential cookies through the cookie consent banner displayed on your first visit to the Site.

Article 5 (Security Measures)

  1. We implement appropriate organizational, human, physical, and technical security measures to prevent the leakage, loss, or damage of personal data.
  2. Third Scope Inc. holds an Information Security Management System (ISMS/ISO 27001) certification (registration number: 50301700 ISMS22) and manages information in accordance with this management system. See our separate Information Security Policy for details.
  3. Where we engage third parties to process personal data on our behalf, we require them to implement appropriate security measures and exercise necessary and appropriate supervision.

Article 6 (Disclosure to Third Parties)

  1. Except as required by applicable law, we do not disclose personal data to third parties without your prior consent.
  2. We may engage service providers (including cloud service providers) to process personal data for purposes such as hosting, email delivery, CRM/marketing automation, analytics, and payment processing. We require such providers to implement appropriate security measures under contract.

Article 7 (Intra-Group Sharing and International Transfers)

  1. Personal data collected through inquiries, recruitment applications, and similar channels may be shared among Third Scope Inc., Third Scope Asia PTE. LTD., and Third Scope Europe Ltd. to ensure consistent and appropriate handling across the Group.
  2. As a result of the sharing described above, and our use of cloud service providers whose servers may be located outside your home country, personal data may be transferred to and stored on servers located in Japan, Singapore, the United Kingdom, and other countries.
  3. Where required under applicable law, we implement appropriate safeguards for international transfers of personal data, such as entering into Standard Contractual Clauses (SCCs), verifying appropriate protections at the recipient, or using other lawful transfer mechanisms, having regard to the data protection framework of the recipient country.
  4. Jurisdiction-specific details on international transfers are set out in Annexes A through C.

Article 8 (Retention Period)

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, and delete or anonymize it within a reasonable period thereafter in accordance with applicable law and our internal retention rules.

For business contacts, we keep data for up to 24 months after our last contact. If you ask us not to contact you again, we keep only your name, email address and the date of your request, so that we can respect it, and delete the rest within 30 days.

Article 9 (Your Rights)

Subject to applicable law, you may have rights to request disclosure, correction, addition, deletion, suspension of use, erasure, restriction of processing, data portability, and withdrawal of consent regarding your personal data. Jurisdiction-specific details are set out in Annexes A through C. To exercise these rights, please contact us using the details in Article 12.

Article 10 (Opting Out of Marketing)

You may opt out of receiving marketing communications (such as our newsletter) at any time, either via the unsubscribe link in the relevant email, by replying to our message, or by contacting us using the details in Article 12.

Article 11 (Children's Personal Data)

The Site is intended primarily for business-to-business communications, including inquiries and recruitment applications, and is not directed at individuals under the age of 18. If we become aware that we have inadvertently collected personal data from a person under 18, we will take appropriate action in accordance with applicable law.

Article 12 (Contact Us)

For questions about this Policy, or to exercise your rights regarding your personal data, please contact our unified privacy contact point:

  • Contact: Data Protection Officer, Third Scope Inc. — Shuto Nakazato
  • Email: ga@third-scope.com
  • Address: Aoyama SI Building 3F, 1-1-11 Shibuya, Shibuya-ku, Tokyo 150-0002, Japan

Inquiries relating to Third Scope Asia PTE. LTD. or Third Scope Europe Ltd. are, as a general rule, also handled through this unified contact point, which will coordinate with the relevant local team as necessary.

Article 13 (Changes to This Policy)

We may update this Policy from time to time to reflect changes in law or our business. Material changes will be notified via posting on the Site or other appropriate means. Any updated Policy takes effect from the time it is posted on the Site.

Part 2: Annexes

Annex A: Japan (Third Scope Inc.) — Supplementary Provisions

  1. Site Operator: Third Scope Inc. — Aoyama SI Building 3F, 1-1-11 Shibuya, Shibuya-ku, Tokyo 150-0002, Japan.
  2. Applicable law: the Act on the Protection of Personal Information (APPI).
  3. Requests regarding retained personal data: Under APPI, you may request notification of the purpose of use, disclosure, correction/addition/deletion, and suspension of use/erasure/suspension of third-party provision of your retained personal data. Requests should be submitted in writing or by email to the contact point in Article 12; we may request identity verification.
  4. Cross-border provision to third parties: Where we provide personal data to Third Scope Asia PTE. LTD., Third Scope Europe Ltd., or other overseas service providers, we do so either with your prior consent or, where applicable, by ensuring the recipient has implemented a system that satisfies APPI Article 28 and its related requirements.
  5. Publication of matters concerning retained personal data: This Policy serves as the publication of matters concerning retained personal data required under APPI.

Annex B: Singapore (Third Scope Asia PTE. LTD.) — Supplementary Provisions

  1. Site Operator: Third Scope Asia PTE. LTD. — One&Co, 20 Anson Road, #11-01 Twenty Anson, Singapore 079912.
  2. Applicable law: the Personal Data Protection Act 2012 (PDPA).
  3. Data Protection Officer (DPO): Third Scope Asia PTE. LTD. designates the unified contact point set out in Article 12 (Shuto Nakazato, ga@third-scope.com) as its Data Protection Officer for PDPA purposes.
  4. Consent Obligation: We collect, use, and disclose personal data with your consent, in accordance with the PDPA, unless an exception under the PDPA applies (for example, where necessary for the conclusion or performance of a contract).
  5. Transfer Limitation Obligation: Where personal data is transferred outside Singapore (including to our Japan and UK Group companies, and to overseas cloud service providers), we take contractual and other measures to ensure a standard of protection comparable to the PDPA at the recipient, as required under the PDPA and the Personal Data Protection Regulations.
  6. Access, correction, and complaints: You may request access to and correction of your personal data under the PDPA. Complaints should first be directed to the contact point in Article 12; unresolved complaints may be referred to the Personal Data Protection Commission (PDPC) at https://www.pdpc.gov.sg.

Annex C: United Kingdom and European Economic Area (Third Scope Europe Ltd.) — Supplementary Provisions

C-1. General

  1. Site Operator: Third Scope Europe Ltd. — Suite 1 Chantal House, 13-17 High Beech Road, Loughton, IG10 4BN, United Kingdom.

  2. Applicable law: the UK GDPR and the Data Protection Act 2018. Where we process personal data of individuals located in the EU/EEA through eu.third-scope.com, the EU GDPR (Regulation (EU) 2016/679) also applies.

  3. Data Controller: Third Scope Europe Ltd. is the data controller for personal data collected through eu.third-scope.com. For business contacts we contact directly, see Section C-2.

  4. Lawful basis: We rely on steps taken prior to entering into a contract or legitimate interests to respond to inquiries, recruitment applications, and material requests. We rely on consent for newsletters and other marketing you sign up to, and on legitimate interests for contacting business contacts in their professional capacity, as described in Section C-2.

  5. Data subject rights: Under the UK GDPR/EU GDPR, you have the right to access, rectify, erase ("right to be forgotten"), restrict processing of, port, object to the processing of, and withdraw consent regarding your personal data.

  6. International transfers: Where personal data is transferred to our Japan or Singapore Group companies, or to cloud service providers outside the UK/EEA, we use Standard Contractual Clauses (SCCs), the International Data Transfer Agreement (IDTA), or other lawful transfer mechanisms recognized under the UK GDPR/EU GDPR.

  7. Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority:

    • United Kingdom: the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom — https://ico.org.uk
    • EU/EEA residents: the data protection supervisory authority of your EU/EEA member state of residence.

  8. UK and EU representatives (Article 27): Third Scope Inc. and Third Scope Europe Ltd. have appointed DataRep (Data Protection Representative Limited) as their data protection representative in the United Kingdom, the European Union, the wider European Economic Area and Switzerland. If you are in the UK or the EEA, please send any request about your personal data to DataRep at the address for your country below. If you are elsewhere, please contact our Data Protection Officer at ga@third-scope.com (see Article 12). Address your letter to "DataRep", not to Third Scope, and state that it concerns Third Scope Inc. Letters addressed to Third Scope at these addresses may not be received.

    CountryAddress
    United KingdomDataRep, 107-111 Fleet Street, London, EC4A 2AB, United Kingdom
    AustriaDataRep, City Tower, Brückenkopfgasse 1/6. Stock, Graz, 8020, Austria
    BelgiumDataRep, Rue des Colonies 11, Brussels, 1000, Belgium
    BulgariaDataRep, 132 Mimi Balkanska Str., Sofia, 1540, Bulgaria
    CroatiaDataRep, Ground & 9th Floor, Hoto Tower, Savska cesta 32, Zagreb, 10000, Croatia
    CyprusDataRep, Victory House, 205 Archbishop Makarios Avenue, Limassol, 3030, Cyprus
    Czech RepublicDataRep, Platan Office, 28. Října 205/45, Floor 3&4, Ostrava, 70200, Czech Republic
    DenmarkDataRep, Lautruphøj 1-3, Ballerup, 2750, Denmark
    EstoniaDataRep, 2nd Floor, Tornimae 5, Tallinn, 10145, Estonia
    FinlandDataRep, Luna House, 5.krs, Mannerheimintie 12 B, Helsinki, 00100, Finland
    FranceDataRep, 72 rue de Lessard, Rouen, 76100, France
    GermanyDataRep, 3rd and 4th floor, Altmarkt 10 B/D, Dresden, 01067, Germany
    GreeceDataRep, Ippodamias Sq. 8, 4th floor, Piraeus, Attica, Greece
    HungaryDataRep, President Centre, Kálmán Imre utca 1, Budapest, 1054, Hungary
    IcelandDataRep, Laugavegur 13, 101 Reykjavik, Iceland
    IrelandDataRep, The Cube, Monahan Road, Cork, T12 H1XY, Republic of Ireland
    ItalyDataRep, Viale Giorgio Ribotta 11, Piano 1, Rome, Lazio, 00144, Italy
    LatviaDataRep, 4th & 5th floors, 14 Terbatas Street, Riga, LV-1011, Latvia
    LiechtensteinDataRep, City Tower, Brückenkopfgasse 1/6. Stock, Graz, 8020, Austria
    LithuaniaDataRep, 44A Gedimino Avenue, 01110 Vilnius, Lithuania
    LuxembourgDataRep, BPM 335368, Banzelt 4 A, 6921, Roodt-sur-Syre, Luxembourg
    MaltaDataRep, Tower Business Centre, 2nd floor, Tower Street, Swatar, BKR4013, Malta
    NetherlandsDataRep, Cuserstraat 93, Floor 2 and 3, Amsterdam, 1081 CN, Netherlands
    NorwayDataRep, C.J. Hambros Plass 2c, Oslo, 0164, Norway
    PolandDataRep, Budynek Fronton ul Kamienna 21, Krakow, 31-403, Poland
    PortugalDataRep, Torre de Monsanto, Rua Afonso Praça 30, 7th floor, Algès, Lisbon, 1495-061, Portugal
    RomaniaDataRep, 15 Piaţa Charles de Gaulle, nr. 1-T, Bucureşti, Sectorul 1, 011857, Romania
    SlovakiaDataRep, Apollo Business Centre II, Block E / 9th floor, 4D Prievozska, Bratislava, 821 09, Slovakia
    SloveniaDataRep, Trg. Republike 3, Floor 3, Ljubljana, 1000, Slovenia
    SpainDataRep, Calle de Manzanares 4, Madrid, 28005, Spain
    SwedenDataRep, S:t Johannesgatan 2, 4th floor, Malmo, SE - 211 46, Sweden
    SwitzerlandDataRep, Leutschenbachstrasse 95, Zurich, 8050, Switzerland

C-2. Business contacts we contact directly

This section applies if we have contacted you, or may contact you, in your professional role about our services, such as Kanata, without you having contacted us first.

Controller. Third Scope Inc. (Aoyama SI Building 3F, 1-1-11 Shibuya, Shibuya-ku, Tokyo 150-0002, Japan) is the controller for this processing. How to contact us about your personal data depends on where you are, as set out below.

How to contact us.

  • If you are in the UK or the EEA: please contact our representative, DataRep (Data Protection Representative Limited), which we have appointed under Article 27 of the UK GDPR and the EU GDPR. Address your request to "DataRep", not to Third Scope, and say that it concerns Third Scope Inc. DataRep's addresses are listed under "UK and EU representatives" in this Annex.
  • If you are anywhere else: please contact our Data Protection Officer, Shuto Nakazato, at ga@third-scope.com.

You can always reply directly to any message we have sent you.

What we collect and where it comes from. We collect your name, job title, employer, work email address, work phone number, professional profile URL and work location. We may also note publicly reported information about your organisation that is relevant to our message. We obtain this from:

  • publicly available sources, such as your organisation's website, press releases and news articles
  • professional networking sites, such as LinkedIn
  • business contact data providers, such as Apollo.io

We do not collect special category data.

Why we use it and our lawful basis. We use this data to contact you, usually once with a small number of follow-ups, about how our services may help your organisation, and to respond if you are interested. Our lawful basis is legitimate interests (Article 6(1)(f) UK GDPR and EU GDPR): introducing our services to organisations that may benefit from them. We limit this to business contact data, to people whose role is relevant, and to a small number of messages. Where local law requires prior consent for business marketing emails, we will first ask through a professional networking site whether you are happy to receive information.

Who we share it with. Our Group companies, including Third Scope Europe Ltd., where they help with sales and support, and service providers such as email, document and contact database tools, under contracts that protect your data. We do not sell your data.

International transfers. Your data is stored and accessed in Japan. The UK and the European Commission have both recognised Japan as providing an adequate level of data protection. Transfers to other countries follow Article 7 and this Annex.

How long we keep it. Up to 24 months after our last contact with you. If you ask us not to contact you again, we keep only your name, email address and the date of your request, and delete the rest within 30 days.

Your right to object. You can object at any time to our use of your data for direct marketing, and we will stop. Just reply to any of our messages, or use the contact routes described in this section. Your other rights, and how to complain to the ICO or your local supervisory authority, are set out above in this Annex.

Contact Us

Please click here
for enquiries and consultations.

Contact form