About Privacy Policy
Legal · Effective Worldwide

Privacy Policy

Last Updated: 2026-04-24 Medical Software Consulting

Medical Software Consulting ("MSC", "we", "us", "our") respects your privacy and is committed to protecting the personal information you share with us through our website (medicalsoftwareconsulting.com) and related services, including MSC Regulatory Watch (watch.medicalsoftwareconsulting.com).

This Privacy Policy explains what information we collect, how we use it, and the rights you have regarding your personal information under applicable data protection laws.

Compliant with EU GDPR UK GDPR APPI (Japan) CCPA / CPRA (California)
Section 01

Data Controller

Medical Software Consulting is the data controller responsible for your personal information.

OrganizationMedical Software Consulting
RepresentativeYoshio Sakai
LocationJapan
Section 02

Information We Collect

We collect personal information lawfully and fairly, only to the extent necessary for our business activities. The categories of information we may collect include:

Information you provide directly

Information collected automatically

Section 03

How We Use Your Information

We use personal information only for the following purposes. For users in the EEA and the UK, the corresponding legal basis under the GDPR / UK GDPR is indicated:

We do not use your personal information for automated decision-making or profiling. We do not use personal information for any purposes other than those listed above.

Section 04

Sharing & Third-Party Processors

We do not sell your personal information.

We share personal information only in the following circumstances:

Main third-party processors

We engage the following processors to support our services. All processors are bound by appropriate data protection agreements and are subject to our oversight.

We may engage additional processors from time to time as necessary for our business operations, always under appropriate supervision.

Section 05

International Data Transfers

Our services are operated from Japan, and personal information is stored and processed primarily in Japan.

For users in the European Economic Area (EEA) and the United Kingdom: Japan has been recognized by the European Commission as providing an adequate level of data protection (Adequacy Decision, January 2019). Transfers of personal information to Japan therefore do not require additional safeguards under the EU / UK GDPR.

Where personal information is transferred to processors outside the EEA, UK, or Japan (such as Google LLC in the United States), we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) or adequacy decisions where applicable.

Section 06

Data Retention

We retain personal information only for as long as necessary for the purposes for which it was collected:

After these periods, personal information is securely deleted or anonymized. Where longer retention is required by law, we retain the information for the applicable statutory period.

Section 07

Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, loss, alteration, or disclosure. These measures include encrypted data transmission (HTTPS / TLS), access controls, regular security updates, and secure credential management. Where we engage processors to handle personal information on our behalf, we exercise appropriate oversight.

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Section 08

Your Rights

Depending on your location, you have the following rights regarding your personal information. We will respond to verified requests within 30 days.

Rights available to all users

Additional rights for EU / UK users (GDPR / UK GDPR)

Additional rights for California residents (CCPA / CPRA)

To exercise any of these rights, please contact us at info@medical-sc.com. We may need to verify your identity before fulfilling your request.

Section 09

Google Analytics & Cookies

Google Analytics

We use Google Analytics 4 (Measurement ID: G-YSLBR8FSGW) to understand how visitors interact with our website. Google Analytics uses cookies to collect information such as pages visited, time spent, referring website, device type, and approximate geographic location.

We have enabled IP address anonymization, and the data is processed on an aggregated basis and is not used to identify individual visitors. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

For details on Google's data practices, see Google's Privacy Policy.

Cookies

Our website uses cookies to improve usability and analyze traffic. A cookie is a small data file that websites store on your device through your browser.

You can refuse cookies through your browser settings, although some website functions may not operate properly if cookies are disabled.

Section 10

Children's Privacy

Our services are directed at professionals in the medical device regulatory field and are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us at info@medical-sc.com.

Section 11

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable legal requirements. Material changes will be communicated through our website. The "Last Updated" date at the top of this policy indicates when it was most recently revised.

We comply with applicable data protection laws and regulations, including Japanese law and other applicable international norms, and review this policy periodically to ensure ongoing compliance.

Section 12

Contact Us

For questions, requests, or complaints regarding this Privacy Policy or our handling of your personal information, please contact:

Medical Software Consulting
Yoshio Sakai · Representative
← Back to About v1.0 · Last Updated 2026-04-24 Top of page ↑