Privacy policy

1. About this policy

Star Navigation  ( “we”, “us” or “our”) respects your privacy and handles personal information for the purposes explained in this policy and the notice provided for the relevant service or activity.

This policy covers our recruitment and career support, consulting, marketing, branding, market research, surveys, product and concept testing, test sales, business development, e-commerce, retail, trade, food and catering services, cultural activities, events and related business operations.

It applies to information collected through our websites, forms, online stores, social media, email, interviews, research activities, purchases, reservations, events and business dealings.

We comply with applicable privacy laws, including Japan’s Act on the Protection of Personal Information and, where applicable, Australia’s Privacy Act 1988 and Australian Privacy Principles. Applicable employment, marketing and other laws may impose additional requirements.

Where another legal entity operates a particular service, the relevant collection notice or service documentation will identify that entity. This policy does not, by itself, authorise unrestricted sharing between separate businesses.

2. What personal information means

Personal information generally means information about an identified individual or an individual who can reasonably be identified.

Depending on the applicable law, additional rules apply to personal data, retained personal data, sensitive information and other categories of information.

Business contact information may also be personal information when it identifies an individual.

3. Information we collect

We collect information reasonably necessary for the relevant activity. Depending on your interaction with us, this may include:

• Your name, contact details, location, organisation and role.

• Recruitment information, including experience, education, skills, qualifications, employment preferences, availability, work rights, relevant visa information, résumés and interview records.

• Employer information, including hiring requirements and the business contact details of authorised representatives.

• Survey responses, opinions, preferences, product evaluations, purchase intentions, pricing feedback and relevant demographic information.

• Orders, delivery details, purchase history, invoices, payment status, returns and customer service records.

• Reservations, event arrangements and information needed to provide a requested service.

• Website and device information, such as IP address, browser information, referring pages, usage records and cookie identifiers, where collected through the relevant systems.

• Relevant communications, permissions, consent records and information needed to handle enquiries or complaints.

We do not ask you to provide information unrelated to the stated purpose.

Please do not include passport copies, tax file numbers, payment card details, health information or other sensitive material in a general enquiry or survey unless we specifically request it through an appropriate process.

4. Sensitive information

We collect sensitive information only where it is reasonably necessary for a specific purpose and with your consent, unless collection is otherwise permitted or required by law.

Examples may include health or allergy information needed for a food-related activity, or other sensitive information necessary for a specifically explained research or service purpose.

We explain the intended use and relevant disclosure before requesting such information. Providing sensitive information for one activity does not authorise its use for unrelated recruitment, research or marketing.

5. How we collect information

We generally collect information directly from you through forms, applications, interviews, surveys, purchases, bookings and communications.

We may also collect information from authorised representatives, referees, business partners, publicly available sources and service providers where lawful and appropriate. We provide any notice or obtain any consent required for that collection.

Before contacting a referee whose details you provide, we will confirm the appropriate arrangements with you.

Where practical and lawful, you may make a general enquiry or participate in an activity anonymously or under a pseudonym. Identification may be necessary for recruitment, transactions, delivery, incentive payments or other activities that cannot reasonably be provided anonymously.

6. Why we use information

We use information for the purpose relevant to your interaction with us, including:

Recruitment and career support: assessing experience and preferences, discussing opportunities, matching candidates with roles, arranging introductions and interviews, coordinating offers and providing agreed support before and after commencement.

Employer services: understanding vacancies, preparing job information, coordinating candidate assessment and managing recruitment enquiries and agreements.

Research and business development: conducting market, customer, preference, pricing, concept and product research; evaluating services and advertising; analysing results; and developing or improving products, services and business proposals.

Product testing and test sales: selecting participants, arranging samples or test purchases, collecting feedback, handling incentives and addressing product quality or safety matters.

E-commerce, retail and trade: processing orders, payments, delivery, returns, enquiries, import or export arrangements and transaction records.

Food, catering, cultural services and events: managing enquiries, reservations, service arrangements, participant communications and relevant safety requirements.

Business administration: contracts, accounting, security, fraud prevention, complaints, legal obligations and record management.

We do not treat participation in one activity as permission to use identifiable information for every business activity listed above.

If we propose a materially different use, we provide further information and obtain any consent required before proceeding.

7. Research findings and client reports

We may prepare and supply research reports, statistical findings and commercial recommendations to clients or other agreed recipients.

Our standard approach is to report findings in aggregated or appropriately de-identified form. We assess whether individuals could reasonably be identified, including from small groups, distinctive comments or combinations of data.

Removing a name alone does not necessarily de-identify information.

We do not provide identifiable research responses, participant contact lists, recordings or attributed quotations to a client merely because the client commissioned the research. Where such disclosure is proposed, we explain the recipient, information, purpose and relevant countries, and obtain any required permission.

Participation does not automatically authorise a client to contact you for sales or marketing.

8. Who may receive information

Depending on the activity, we may disclose necessary information to:

• Prospective employers and authorised hiring personnel, following the candidate’s agreement to the relevant introduction.

• Research clients or project partners under the arrangements explained for the project.

• Providers of forms, cloud storage, communications, payment processing, delivery, accounting, research or other operational services.

• Professional advisers, insurers, regulators or authorities where necessary and lawful.

• Other recipients you authorise or to whom disclosure is permitted or required by law.

We limit disclosures to information appropriate for the purpose. We assess service providers and use suitable contractual, access-control and other safeguards.

A paid recruitment or research service does not give the customer unrestricted ownership of, or access to, individuals’ personal information.

Any joint-use arrangement under Japanese law will be supported by the required information about the participating parties, data, purposes and responsible entity before it begins.

9. Overseas handling

Our activities involve Japan and Australia. Information may be accessed, processed or disclosed across those countries where relevant to the service.

Cloud or operational providers may also handle information in other countries. We identify relevant overseas recipients and countries in the applicable notice or supplementary information where required and practicable.

Before a cross-border disclosure, we assess the applicable legal requirements and take the necessary steps, which may include recipient safeguards, contractual arrangements, notices and specific consent.

Where we rely on consent for a foreign third-party disclosure under Japanese law, we provide the legally required information about the destination country, its privacy framework and the recipient’s protective measures.

A general acceptance of this policy does not waive mandatory protections or automatically remove our responsibilities for overseas disclosures.

10. Marketing communications

We obtain the consent required for marketing communications and distinguish optional promotions from communications needed to provide a requested service.

Recruitment registration, survey participation, a purchase or an enquiry does not automatically subscribe you to unrelated promotions.

You may unsubscribe using the method in a marketing message or by contacting us. We process unsubscribe requests within the applicable legal timeframe.

Unsubscribing does not prevent necessary communications about an existing order, application, booking, safety issue or other requested service.

Research invitations containing promotional material will be assessed under the applicable marketing rules.

11. Cookies and online services

Our websites and embedded services may use cookies or similar technologies for functionality, security, analytics and, where configured, advertising measurement.

Where we use analytics or advertising tools, we provide relevant information about the tools, purposes, recipients and available choices through the website or a supplementary notice.

We obtain any consent required for the relevant collection, use or disclosure. Browser settings may allow you to limit cookies, although some functions may be affected.

External platforms have their own privacy policies. Their involvement does not replace our responsibility to explain our own handling of information.

12. Recordings and public use

Where an interview, testing session or event is to be recorded, we explain the recording arrangements and obtain appropriate permission.

Permission to participate or to be recorded for internal analysis does not automatically authorise public use of your name, photograph, voice, testimonial or identifiable quotation.

We obtain separate permission for such public use, specifying the intended material and channels.

13. Security and storage

We take reasonable and appropriate steps to protect information from misuse, interference, loss, unauthorised access, modification and disclosure.

Measures are selected according to the information and risks and include access controls, account security, appropriate storage, confidentiality arrangements, provider oversight and incident-response procedures.

Candidate records and identifiable research records are not made available to all clients. External access is limited to authorised recipients for an agreed purpose.

No system can guarantee absolute security. We review our arrangements and address identified risks.

14. Retention and disposal

We keep information only for as long as reasonably needed for the stated purposes and any applicable legal, accounting, contractual or dispute-related requirements.

For candidate registration records, we generally review the need for continued retention 24 months after the last substantive contact or update. This is a review point, not a promise that all records are automatically deleted on that date.

For research and testing, the relevant project information explains any specific retention arrangements. Where practical, contact details used for incentives or follow-up are separated from research responses.

When information is no longer needed, we take appropriate steps to delete it or de-identify it, subject to lawful retention requirements and reasonable handling of backups.

15. Access correction and other requests

You may contact us to request access to, correction of, or an update to your personal information.

You may also request withdrawal of consent, restriction of use, deletion or cessation of disclosure where available under applicable law.

We verify identity proportionately and respond within the applicable legal requirements. A request may be limited by legal retention duties, third-party rights or other lawful exceptions. Where we cannot comply, we explain the reason and available next steps.

We do not charge for making an access or correction request. If a lawful charge applies to providing access, we explain it in advance. Correction requests are handled without charge.

Withdrawing consent may affect a service that depends on the relevant information. It does not automatically reverse lawful processing already completed.

16. Enquiries and complaints

Please contact our Privacy Contact with a description of the issue, the relevant service and your preferred resolution.

We investigate privacy complaints and aim to provide a substantive response within 30 days. If further time is needed, we explain the reason and expected timeframe, subject to applicable legal requirements.

If you are dissatisfied, you may contact the relevant regulator. In Australia, this may be the Office of the Australian Information Commissioner where it has jurisdiction. In Japan, you may contact the Personal Information Protection Commission or another appropriate consultation body.

17. Data incidents

If a suspected privacy or security incident occurs, we take appropriate steps to contain it, investigate the circumstances, assess potential harm and reduce further risk.

We notify affected individuals and the relevant authorities where required by applicable law, including applicable Japanese reporting rules and Australia’s Notifiable Data Breaches scheme.

18. Children and young people

We consider the person’s age, capacity, the nature of the activity and applicable law when collecting information from children or young people.

Where appropriate, we obtain parent or guardian permission. We provide additional activity-specific information for research or testing involving minors.

19. Changes to this policy

We may update this policy to reflect changes in our services, systems or legal obligations.

The updated version will show its revision date. A policy update does not itself authorise materially different processing or replace any consent required by law.

20. Contact details

Business Name: Star Navigation
Representative: Keisuke Yajima
Registered office: [Registered office address in Japan]
Australian operating location: Sydney, Australia
Privacy Contact: sushitycoon@stanavi.com
Website: https://sites.google.com/view/star-navigation/home

Please use the subject line “Privacy enquiry” or “Privacy complaint” when contacting us about personal information.

Last updated: 19 October 2026