Privacy Policy.

1. Who we are

This website is operated by Advasa Holdings, Inc. ("ADVASA", "we", "us"). We are the controller of the personal information described in this policy.

Advasa Holdings, Inc. is incorporated in the State of Delaware, United States.

Questions about this policy, and requests about your own information, can be sent to us through our contact page.

2. What we collect

We collect only what you send us, and what a web server necessarily records in order to serve a page.

• Enquiry form. If you use the form on our contact page we collect the enquiry type, your name, your company, your email address, your subject line and your message.
• Server logs. Our hosting provider records requests made to the site, which typically includes IP address, timestamp, the page requested, and browser type. We do not combine these logs with any other information to identify you.

We do not ask for, and you should not send us, sensitive personal information - financial account details, government identifiers, or information about health, race, religion or political opinion.

3. Why we use it, and on what basis

• To answer your enquiry. Where you contact us, we process your information because it is necessary to respond to you at your request, and because we have a legitimate interest in handling enquiries about our business.
• To keep the site available and secure. Server logs are processed on the basis of our legitimate interest in operating and protecting the site.

We do not use your information for advertising, we do not sell it, and we do not make decisions about you by automated means.

4. Cookies, analytics and third parties

This site sets no cookies. It uses no analytics, no tag manager, and no tracking pixels.

It does load typefaces from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Making that request necessarily discloses your IP address to Google, which may process it outside your country. No other third party receives anything about your visit.

5. Who we share it with

We do not sell or rent personal information. We disclose it only:

• to service providers acting on our instructions — website hosting, email, and IT support — each under a written agreement that permits them to use the information only to provide that service to us;
• to ADVASA Co., Ltd., our subsidiary in Japan, where your enquiry concerns its business and answering you requires it;
• to our professional advisers, where they need it to advise us; and
• where we are required to disclose it by law, by a court, or by a regulator.

We do not disclose enquiry correspondence to anyone else.

6. Where it goes

We are incorporated in the United States and operate in Japan, so information you send us may be received and accessed in either country.

If you are in the United Kingdom or the European Economic Area, sending us an enquiry involves a transfer of your information outside that area. For transfers to Japan we rely on the European Commission's finding that Japan provides an adequate level of protection; for transfers to the United States we rely on standard contractual clauses or another lawful transfer mechanism. You may ask us for details of the mechanism relied on.

7. How long we keep it

• Enquiry correspondence — for as long as we need it to deal with your enquiry, and then for no more than 24 months, unless we are required to keep it longer for legal or regulatory reasons.
• Server logs — no more than 12 months, except where a log is retained longer to investigate a specific security incident.

When a period ends, we delete the information or remove what identifies you from it.

8. Your rights

Depending on where you live, you may have the right to:

• ask what personal information we hold about you, and receive a copy
• have inaccurate information corrected
• ask us to delete information we no longer need
• object to, or ask us to restrict, our use of it
• withdraw consent where we relied on it
• complain to your data protection authority

To exercise any of these, write to us using the details in section 1. We will respond within the period required by the law that applies to you. We do not charge for this, and we will not treat you differently for asking.

Three regimes are worth naming, because they are the ones most likely to apply:

• Japan. Under the Act on the Protection of Personal Information you may ask us to disclose, correct or delete the personal information we hold about you, or to stop using it.
• United Kingdom and European Economic Area. You have the rights listed above and you may complain to your supervisory authority — in the UK, the Information Commissioner's Office.
• California. You may ask what we have collected about you and ask us to delete it. We do not sell or share personal information, and we have no financial incentive to offer for it.

9. Security

The site is served over HTTPS. We restrict access to enquiry correspondence to those who need it in order to reply to you. No website or email system can be guaranteed secure, and we ask you not to send us confidential information through this site.

10. Children

This site is intended for a business and investor audience. It is not directed at children, and we do not knowingly collect information from them.

11. Changes

If we change this policy we will update the effective date below. Where a change is significant, we will say so on this page.

12. Contact

Questions about this policy, or about how we handle your information, should be sent to us as described in section 1. See also our Terms of Use.

Effective date: August 12, 2026