Legal
Privacy Policy
Last updated: 9 September 2026
This page explains what personal data Ki Tuning Therapy collects, why, how long it is kept, and what you can ask us to do with it. It is written to meet the EU General Data Protection Regulation (GDPR), which applies to us because we operate from Portugal.
1. Who is responsible
The data controller is Art of Nippon, which operates Ki Tuning Therapy from Lisbon, Portugal.
For anything on this page — including access, correction, or deletion requests — write to info@uenojapan.com. We answer privacy requests within 30 days.
2. What we collect
-
Contact form. Your name, email address, phone number (optional), and whatever you write in the message field. Nothing else is required.
-
WhatsApp. If you contact us on WhatsApp, we receive your phone number, your WhatsApp profile name, and your messages.
-
Usage data. Pages viewed, country, device and browser type, and the site you arrived from. This is counted without cookies and cannot be traced back to you. See section 5.
We do not ask for, and do not want, health information through this website. Please do not send medical details through the form — Ki Tuning is a wellness practice, not a medical service.
3. Why we use it, and our legal basis
Answering your inquiry and arranging a session
Article 6(1)(b) — steps taken at your request before entering into a contract.
Keeping a record of our correspondence, and blocking form spam
Article 6(1)(f) — our legitimate interest in running the practice and keeping the site usable.
Understanding how the site is used
Article 6(1)(f) — our legitimate interest in knowing whether the site works. The measurement is cookieless and aggregate, so it does not override your interests.
We do not sell your data, and we do not use it to build advertising profiles.
4. How long we keep it
Inquiries and the correspondence attached to them are kept for 24 months after our last contact with you, and then deleted. You can ask us to delete them sooner at any time.
5. Services we rely on
Running this site means a handful of other companies process data on our behalf or their own. Here is the full list — there is nothing else.
SSGForm — form delivery, Japan
Receives what you type into the contact form and forwards it to us. Japan is covered by an EU adequacy decision, so the transfer needs no further safeguard.
Cloudflare — hosting and Web Analytics
Serves the site and counts page views. Cloudflare Web Analytics uses no cookies, does not fingerprint visitors, and reports only aggregate totals. It is the only analytics on this site.
Google Fonts — typefaces
Fonts load from Google's servers, which means your IP address reaches Google when a page is rendered.
cdnjs (Cloudflare) and unpkg — scripts and stylesheets
Deliver the animation and icon libraries the page uses. Same situation as fonts: your IP address reaches them.
WhatsApp — Meta Platforms Ireland Ltd
Only if you choose to message us there. Meta's own privacy terms govern that conversation.
Google, Cloudflare and Meta may process data outside the EU, including in the United States, under the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
6. Cookies
This site sets no cookies at all. Not for analytics, not for advertising, not for anything else. That is why you are not being asked to dismiss a consent banner — there is nothing to consent to.
We used Google Analytics until September 2026 and removed it rather than ask you to accept its cookies. Visitor numbers are now counted by Cloudflare, which does it without storing anything on your device.
7. Your rights
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, hand it to you in a portable format, or stop processing it where we have relied on legitimate interests. Exercising any of these is free, and we will not treat you differently for it.
Write to info@uenojapan.com.
If you think we have handled your data badly, you can complain to the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD). You do not need to contact us first, though we would rather you did.
8. Changes to this policy
If what we do with your data changes, this page changes with it, and the date at the top changes too. There is no mailing list to notify — the date is the record.