Nagashima Ohno & Tsunematsu (“NO&T”) and Nagashima Ohno & Tsunematsu UK Limited (“NO&T UK”) (collectively, “we”, “us” or “our”) will comply with applicable data protection laws and regulations relating to the processing of personal data in connection with our operations and will strive to ensurethat such data is processed appropriately in accordance with such laws and regulations.
We have created this Privacy Policy for Europe to set out how we use and process personal data that we collect when you visit our website, as well as personal data that you may provide to us, or that we otherwise receive or collect in connection with our business.
This Privacy Policy for Europe applies to our processing of the personal data of data subjects resident in the UK and European Economic Area (“EEA”).
Where applicable, this Privacy Policy for Europe shall apply together with NO&T Group Privacy Policy, but this Privacy Policy for Europe shall prevail over the latter with respect to such data subjects to the extent that these policies conflict.
For the purposes of this Privacy Policy for Europe, the term “NO&T Group” has the meaning as defined in the NO&T Group Privacy Policy referenced above.
-
Categories of Personal Data We Collect and Purposes of Processing of Personal Data
Provision of our legal services and related business activities
The categories of personal data we may collect with respect to our (potential) clients, related parties and business partners include:
- Name and contact details (such as your address, email address and telephone numbers);
- Company name, address, job title and role;
- When you visit our offices, we may collect information regarding the access times and any access requirements you may have;
- Your communications with us (whether by telephone, in writing, via email or other electronic means);
- Financial and payment information (such as bank details);
- Identification documents and related information, including your passport number, date of birth and photographs, information about criminal offences or alleged criminal offences committed by you and any other personal data required to comply with our legal obligations; and
- Special Category (Sensitive) Data (such as information about your ethnicity or race, sexual orientation, health (for example any medical conditions, disabilities and dietary requirements), religious or philosophical beliefs and political opinions).
The purposes for which we may use this personal data include:
- Handling legal matters and related communications;
- Managing client relationships, including conducting conflict checks, responding to various enquiries and preparing fee estimates;
- Carrying out the necessary pre-contractual due diligence, anti-money laundering and identity checks that we are legally obliged to perform;
- Providing information about us, providing information in relation to and holding lectures and seminars, etc., sending newsletters and letters of greeting, etc., and offering other information related to our legal services;
- Dealing with enqueries, complaints and other claims relating to our business;
- Arranging client meetings and other in-person events;
- Engaging with suppliers and other business contacts; and/or
- Performing the businesses in a proper and efficient manner.
Recruitment of lawyers and office staff
The categories of personal data we may collect include:
- Name and contact details (such as your address, email address and telephone numbers); and
- Your date of birth, details regarding your gender, photographs of you, and other information described in your CV or otherwise submitted to us.
The purposes for which we may use this personal data include:
- Arranging candidates’ office visits, communicating with you, and conducting the selection process.
Website usage and other technical data
The categories of personal data we may collect include:
- Access logs, web beacons (also known as pixels), cookies and your IP address. These types of data may remain in your computer and continue to collect data.
For information regarding our uses of cookies on its website, please refer to our Cookie Policy.
The purposes for which we may use this personal data include:
- Conducting needs assessment analysis based on viewing results of requested newsletter subscriptions, seminar attendance records, website browsing histories, and other data; and
- To prevent, detect and investigate unauthorised access or attacks.
We may obtain personal data directly from you or alternatively from third parties, such as our professional contacts including other law firms. We will only use your personal data for the purposes described above, unless we determine that we need to use it for another purpose that is compatible with the original purpose for which the data was collected. If you wish to receive a more detailed explanation of how any new purpose for which we process your personal data is compatible with the original purpose, please contact us at the point of contact mentioned in Section 7 below.
-
Legal Basis for Processing Personal Data
We process your personal data for the purposes described above on the following legal basis:
- Performance of a contract: This is where we need to process your personal data in order to carry out a contract that we have entered into with you (including, for example, to provide the legal services that you have contracted with us to provide).
- Legal obligation: This is where we need to process your personal data in order to comply with legal obligations to which we are subject, such as conducting “know your client” (KYC) procedures or implementing anti-money laundering measures.
- Legitimate interests: We may process your personal data where it is in our legitimate interests to do so, provided that your interests and fundamental rights do not override those interests. Our legitimate interests include the provision of legal services and the promotion of our legal services to prospective clients.
- Consent: In some instances, we may obtain your express consent to process your personal data. You have the right to withdraw your consent to such processing at any time. However, the withdrawal of your consent will not affect the lawfulness of any processing carried out prior to your withdrawal. Furthermore, in circumstances where you withdraw your consent, we may still process your personal data if other legal bases apply.
-
Provision of Personal Data to Third Parties
We may share your personal data with the following categories of recipients:
- Any entity or office of NO&T Group;
- Third parties or related parties, as necessary to provide our professional services, such as advisors on a matter in relation to which we are providing legal services;
- Third parties who process your personal data on our behalf, such as providers of IT and HR-related products and services, including those hosted in the cloud; and
- Law enforcement agencies, regulatory bodies and other related parties, to the extent necessary for us to provide our services and/or to comply with applicable laws and regulations.
We will never sell your personal data to third parties.
-
Transfer of Personal Data Outside Europe
Your personal data may be transferred to, accessed from or stored in countries outside the UK and the EEA, including countries with different data protection laws. For example, we may transfer your personal data with our overseas offices located in countries such as Japan.
In such circumstances, we will take all steps reasonably necessary to ensure that your personal data is treated securely and in accordance with this Privacy Policy for Europe and as required by the UK Data Protection Laws or GDPR. This includes ensuring that your personal data is transferred only to countries that have been deemed to provide an adequate level of protection to personal data by the UK Government or the European Commission (as applicable), or is otherwise transferred pursuant to an alternative authorised data transfer mechanism. For more information, please contact us using the details in Section 7 below.
-
Retention Periods for Personal Data
We will only keep your personal data for as long as is necessary for the purposes set forth in this Privacy Policy for Europe. We may retain your data for a longer period if required by applicable laws or if necessary to address potential legal claims, where the data is needed to assert or defend against claims that are not yet time-barred.
-
Your Rights
Subject to certain exemptions, you have a number of rights in relation to your personal data. For example:
- You have the right to ask us for a copy of your personal data.
- You have the right to ask us to correct or delete personal data that is inaccurate or incomplete.
- You have the right to ask us to delete your personal data (or a part thereof), which we will do unless we have a lawful reason to retain your data (for example, to comply with our legal obligations).
- You have the right to ask us to limit how we can use your personal data.
- You have the right to object to our processing of your personal data, unless we can demonstrate that such processing is based on legitimate interests that override your interests, rights and freedoms, or that it is necessary for the establishment, exercise or defence of legal claims.
- You have the right to request that we transfer your personal data to you or to a specified third party.
- Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.
You can exercise your rights by contacting us in accordance with Section 7 below. You also have the right to make a complaint to the Information Commissioner’s Office (ICO) in the UK or other competent European data protection authorities.
-
Contact Details
If you have any questions about this Privacy Policy for Europe, including any requests to exercise your legal rights, please contact us using the details set out below.
You may contact NO&T UK at:
Nagashima Ohno & Tsunematsu UK Limited
125 Old Broad Street, London
EC2N 1AR, United KingdomYou may contact NO&T at:
Nagashima Ohno & Tsunematsu
JP Tower, 2-7-2 Marunouchi, Chiyoda-ku, Tokyo
100-7036, Japan -
Updates to this Privacy Policy for Europe
We may amend this Privacy Policy for Europe as necessary at any time, with any changes being posted on this page.
Last Updated: August 12, 2025