Privacy Policy

Information We Collect

We collect information such as your name, email address, affiliated company, industry, and profile information. We also collect members' browsing history within the service (pages viewed, time spent, referring page, date and time of viewing, language setting, and traffic-source parameters). When you register for an event, we may also collect your answers to the items set for that event (such as your phone number, passport or IC number, and pre-event survey answers).

Purpose of Use

We use this information to provide member services, verify identity, respond to inquiries, improve the service and analyze usage, and to send members information matched to their interests (such as newsletters) and offers of our services. Information collected when you register for an event is used to run the event, to complete building-entry procedures at the venue, and to allow the speakers and co-hosting companies to prepare the event content and respond to your requests.

Provision to Third Parties

Except as required by law, we do not provide personal data to third parties without your consent. When you register for an event, with your consent given at registration, we provide personal data as follows: (1) for building-entry procedures, your name, company, phone number and passport or IC number to the venue (the building management); (2) to prepare the event content and respond to your requests, your name, company, job title and your pre-event survey answers (excluding your phone number and passport or IC number) to the event speakers and co-hosting companies.

Cross-Border Transfer (Article 28, APPI)

This service uses the following overseas providers, and personal data is transferred outside Japan. Supabase (Singapore: database, authentication, storage), Vercel (US: hosting), Inngest (US: background jobs — we send only identifiers, never your name or email), Resend (US: email delivery), Sentry (US: error monitoring), Stripe (US: payments), Cloudflare (Asia-Pacific: off-site storage of database and file backups), and Google (destination country cannot be identified — the Gemini API does not let us pin a processing region and may process in several countries, including the US: AI first-contact in the office chat and translation — processes the conversation content and text you submit; we do not send other personal data such as your name or email. The content submitted may be used by Google to improve its services and to train machine learning models), and Google (destination country cannot be identified — Google Tag Manager and the analytics and advertising tags it delivers, such as Google Analytics, do not let us pin a processing region and may process in several countries, including the US: sends your IP address, browser information, the URLs you view, page titles and cookies or other on-device identifiers. If you are signed in as a member, the URLs include member-only pages. Loaded only if you consent to both analytics and marketing cookies; if either is undecided or refused, they are not loaded). We have conducted Transfer Impact Assessments (TIA) regarding the legal systems and safeguards of each destination.

You may withdraw your consent to this cross-border transfer at any time. Once withdrawn, you can no longer use this service and will be signed out immediately. The record of your withdrawal is retained as required by law. If you want your account and data deleted entirely, please use the account withdrawal flow.

• Statement on Cross-Border Transfers of Personal Data
• Withdraw consent (member page)
• If you cannot sign in, use our contact form

Retention Period

We retain personal data for the period necessary to achieve the purpose of use or as required by law. After withdrawal, data is deleted following a 30-day cooling-off period (except for data subject to statutory retention obligations). Raw browsing-history data is deleted within 13 months of collection; thereafter only statistics that cannot identify individuals are retained. When member data is deleted upon withdrawal, identifiers linking browsing history to the member are removed (anonymized). Database backups are created by the automatic backup feature of our database provider (Supabase Inc.) and are deleted automatically once that provider’s retention period elapses. We additionally keep off-site backups with Cloudflare (Asia-Pacific) to guard against a failure at the provider level; differential file backups are deleted automatically after 30 days, and monthly database backups after 365 days. Where personal data subject to a deletion request remains in a backup, we do not use it for any purpose other than disaster recovery. Audit logs are retained separately from other personal data for 12 months to investigate unauthorized activity. Phone numbers and passport or IC numbers collected at event registration are deleted immediately when the registration or the event is cancelled, and otherwise 1 year after the event ends.

Requests for Disclosure, Correction, and Deletion (DSAR)

If you wish to request disclosure, correction, or deletion of your personal data, please contact the Data Protection Officer (DPO) below.

Data Protection Officer (DPO) Contact

Bridge International Asia Sdn Bhd (contact details to be published after legal review)

Access Analytics (Browsing History)

We perform access analytics using our own in-house system to improve the service and to send members relevant information. In addition, we may use external analytics and advertising-related services such as Google Analytics through Google Tag Manager, provided by Google LLC. These use cookies or other on-device identifiers and send your IP address, browser information, the URLs you view and page titles to Google. These external services are loaded ONLY if you have consented to BOTH "Analytics cookies" and "Marketing cookies" in the cookie banner or "Cookie settings". If either is undecided or refused, they are not loaded (undecided is treated the same as refused). If you withdraw consent, they stop from the next page you load (on the page already loaded, they may keep running until you reload the browser). For signed-in members, browsing history is recorded in association with the member ID and used within the scope described under "Purpose of Use." For visitors who are not signed in, we do not use cookies or any on-device identifiers. Instead, we count views only within the same day using an anonymous ID derived from the IP address and browser information combined with a random value that changes daily. Because this random value is discarded every day, it is impossible — even for us — to identify the same visitor across days. The IP address and browser information themselves are never stored. If the browser's do-not-track setting (DNT / Global Privacy Control) is enabled, visitors who are not signed in are not measured at all. If you choose "Essential only" in the cookie banner or "Cookie settings," or turn "Analytics cookies" off under "Customize" and save, we do not perform access analytics in that browser, whether or not you are signed in. This setting is stored per browser, so please set it again on another device or browser, or after you clear the site data.

Use of Cookies

In addition to cookies essential for login sessions and security, this service may use cookies for usage analytics (analytics cookies) and for delivering more relevant content and advertising (marketing cookies). You can change your consent for non-essential cookies anytime via "Cookie settings" at the bottom of the site or on this page. Turning "Analytics cookies" off also stops the access analytics described above.

Cross-Border Privacy Rules (Global CBPR)

We respect the Global CBPR Forum framework, the successor to the APEC Cross-Border Privacy Rules (CBPR), and handle personal data in line with international data protection standards. Singapore, where personal data is primarily stored, participated in APEC CBPR (2018-2023) and is now a founding member of the Global CBPR Forum.