Privacy policy

Reference translation. The Japanese version is the legally binding text; this English page is provided for convenience only. Where the two differ, the Japanese page prevails.

B.A.D. GYM URAWA (“the gym”) handles the personal information of members and of those who come for a trial or a look round in accordance with the Act on the Protection of Personal Information and other laws. This policy also serves as the publication required by Article 32, paragraph 1 of that Act.
Requests for disclosure and complaints are all handled through the web form or by email.

1. About the business

Business name

ROCKEDGE Property Management Inc.Facility name: B.A.D. GYM URAWA (Body Art Design Gym Urawa)

Address

6F, 7-17-18 Ginza, Chuo-ku, Tokyo 104-0061

Representative

Representative Director Kenichi Iwasaki

accredited personal information
Person responsible

Kenichi Iwasaki

Contact

[email protected]We also accept them through the enquiry form on the website.

2. The personal information we collect

We collect the following information.

• Name, date of birth and address
• Email address and your own telephone number
• The name, relationship and telephone number of your emergency contact
• What you declare about your state of health (see paragraph 4)
• Information about payment of fees (payment records, receipt status)
  Card numbers, expiry dates and security codes are taken directly by the payment processor. We never collect or hold them.
• Records of use (dates and times of entry, studio and event bookings)
• If you apply for drop-in use at the JPA-registered lifter / Yusuke Suzuki salon member rate, a photo of your registration card or of a screen that shows your salon membership
  This image is used only to confirm eligibility for the discounted rate and is deleted within 90 days of receipt.
• Security camera footage from the premises (see paragraph 8)
• The content of enquiries and records of correspondence

3. Purposes of use

We use the personal information we collect for the following purposes.

1. Processing applications, managing membership, and verifying identity
2. Billing and settling fees and other charges
3. Confirming eligibility for discounted rates
4. Information about using the facility, and managing bookings
5. Urgent contact, first aid and handover to the emergency services in the event of an accident or sudden illness
6. Deciding whether you may use the facility, and adjusting coaching, according to your state of health
7. Responding to enquiries
8. Responding to breaches of the terms, and keeping the facility safe
9. Analysis to improve the service (carried out after processing the data so that individuals cannot be identified)
10. Responding as the law requires

Use beyond the purposes above requires your prior consent.

4. Information about your health

1. We ask you to declare your state of health so far as necessary for safe use of the facility. That information is With your consent we collect it.
2. We use the information collected only for items 4 and 5 of the preceding paragraph (response in an emergency, and deciding whether you may use the facility and adjusting coaching).
3. This information is not provided to third parties except as required by law or when handing over to a medical institution at the scene of an emergency.
4. Without that declaration we cannot confirm safety, and we may refuse use of the facility.

5. Provision to third parties

We do not provide personal data to third parties without consent, except in the following cases.

• Where required by law
• Where it is necessary to protect a person's life, body or property and consent is difficult to obtain (including passing information to ambulance crews, medical institutions and your registered emergency contact in the event of sudden illness or an accident on the premises)
• Where co-operation with a state organ carrying out statutory duties is necessary and obtaining consent would risk impeding those duties

We do not sell personal data to third parties.

6. Outsourcing

1. We may outsource the handling of personal data so far as necessary to achieve the purposes of use. The outsourcing is as follows.
   • Payment processing for membership fees (payment processor, Japan)
   • Operation of the member page and booking system (system provider, United States)
   • Sending of email (email delivery provider, United States)
2. Providing personal data in the course of outsourcing is not, in law, provision to a third party. We supervise our contractors as necessary and appropriate.
3. Where a contractor handles personal data in a foreign country, we ascertain that country's personal-data protection regime and take the measures necessary for its secure management (our contractors are located in Japan and the United States).

7. Security measures we take

• A basic policy We have a basic policy for the proper handling of personal data.
• Established rules on handling For each stage - collection, use, storage, provision and deletion - we set the method of handling and the person responsible.
• Organisational measures We designate who handles personal data and the scope of their handling, and review it regularly.
• Measures relating to staff Staff are trained in handling personal data and are bound by confidentiality arrangements.
• Physical measures Documents are kept in a lockable place and the removal of equipment is restricted.
• Technical measures We limit who may access the data and how far, and have measures in place to prevent unauthorised outside access.
• Awareness of the external environment Where personal data is handled in a foreign country, we ascertain that country's regime and take security measures.

8. Security cameras

1. We plan to install security cameras in order to keep the premises safe and to prevent accidents and theft (one at reception, two in the training area and one in the studio - four in total). None is installed in the changing rooms or the toilets.
2. Recorded footage is used only for the purposes above and to establish the circumstances of an accident.
3. Footage is kept for 30 days from recording. It is erased in turn once that period has passed.
4. Footage is not provided to third parties except as required by law or where necessary to protect a person's life, body or property.

9. Cookies and analytics

1. On our website, we use no cookies for advertising.
2. For analytics we use Cloudflare Web Analytics (provided by Cloudflare, Inc., United States). According to Cloudflare, it uses no browser-side storage such as cookies or local storage, and it does not fingerprint individuals from an IP address or browser information. What is measured is the number of page views, how long a page took to appear, the linking site, the country and the type of browser.
3. We also count page views on our own server. No cookie or device identifier is issued, and no IP address or browser information is stored. What is recorded is only the date, the address of the page, the language it was shown in and a count, together with the date, the host name of the linking site and a count. None of it identifies an individual.
4. For the linking site we record the host name only (for example www.google.com), never the full address, because a full address can contain the words someone searched for.
5. If we ever introduce analytics or advertising that uses cookies, we will revise this policy before doing so and tell you what is collected, why, and who receives it.

10. Requests for disclosure, correction and suspension of use

1. You, or your representative, may request notification of the purpose of use, and the disclosure, correction, addition, deletion, suspension of use, erasure, or cessation of provision to third parties of the personal data we hold.
2. Make your request by email ([email protected]) or through the enquiry form on the website.
3. We verify identity by correspondence from the registered email address and by checking it against the registered details. A request made by a representative must be accompanied by a document evidencing their authority.
4. A fee of ¥1,100 including tax is charged per request for notification of the purpose of use or for disclosure. No fee is charged for a request for correction or suspension of use.
5. We reply, as a rule, to the registered email address.
6. There are cases where the law prevents us from meeting a request. We then inform you along with the reason.

11. If a leak occurs

If personal data is leaked, lost or damaged in a way that risks harming the rights and interests of the person concerned, we report it to the Personal Information Protection Commission as the law requires and inform the person of the fact.

12. Complaints and enquiries

Contact point

B.A.D. GYM URAWA personal information contact point

Email

[email protected]We reply within two business days. We do not take enquiries by telephone.

Accredited personal information
protection organisation

There is no accredited personal information protection organisation of which we are a covered business.

13. Changes to this policy

We may revise this policy to match changes in the law or in our practice. Revisions are announced by publication on our website. Where the change is significant we also notify you at your registered email address.

Enacted: 1 October 2026
Last updated: 3 October 2026