Privacy Policy for Faro, the Advisory of The Mega Center

Last updated: March 2026

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Privacy Policy

The Mega Center / Faro

Last updated: March 2026

This Privacy Policy applies to themega.center and faro.themega.center (collectively, “the Websites”) operated by The Mega Center (“the Company,” “We,” “Us,” or “Our”), registered in Japan at 2-12-22 Kitanosawa. It describes how We collect, use, and protect your personal information, and sets out your rights under applicable law.

1. Information We Collect

We may collect the following categories of personal information:

  • Contact information: name, email address, phone number, postal address

  • Usage data: IP address, browser type and version, pages visited, time and date of visit, time spent on pages, device identifiers

  • Communication data: messages, inquiries, or other content you submit to us

  • Email engagement data: open rates, click-through rates, and related metrics collected by our email service providers

2. How We Use Your Information

We use personal information for the following purposes:

  • To provide and maintain our websites and services

  • To respond to inquiries and manage client relationships

  • To send newsletters, updates, and marketing communications via Substack and Kit.com, where you have opted in

  • To analyze usage patterns and improve our services

  • To comply with legal obligations

  • To protect the security and integrity of our services

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to monitor activity on our Websites and store certain information. You may instruct your browser to refuse cookies, though this may affect your ability to use certain features. We use session cookies (deleted when you close your browser) and persistent cookies (which remain on your device).

4. Email Marketing Service Providers

We use the following third-party platforms to manage and send email communications:

  • Substack — privacy policy available at substack.com/privacy

  • Kit.com (formerly ConvertKit) — privacy policy available at kit.com/privacy

  • Squarespace — privacy policy available at squarespace.com/privacy

You may opt out of receiving marketing communications at any time by using the unsubscribe link in any email or by contacting us directly.

5. Your Rights Under GDPR (European Users)

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

  • Right of access: to request a copy of the personal data we hold about you

  • Right of rectification: to request correction of inaccurate or incomplete data

  • Right to erasure: to request deletion of your personal data where there is no lawful basis for continued processing

  • Right to restrict processing: to request that we limit how we use your data

  • Right to data portability: to receive your data in a structured, machine-readable format

  • Right to object: to object to processing based on legitimate interests or for direct marketing

  • Right to withdraw consent: where processing is based on consent, you may withdraw it at any time

  • Legal bases for processing under GDPR include: your consent, performance of a contract, compliance with legal obligations, and our legitimate interests in operating and improving our services.

6. Your Rights Under APPI (Japan)

The Company is subject to Japan’s Act on the Protection of Personal Information (APPI). If you are located in Japan or your data is processed by the Company as a Japanese-registered entity, you have the following rights:

  • Right to disclosure: to request disclosure of personal information we hold about you

  • Right to correction: to request correction, addition, or deletion of your personal information if it is factually inaccurate

  • Right to suspension of use: to request that we suspend use or delete your personal information if it has been handled in violation of APPI

  • Right to suspension of third-party provision: to request that we stop providing your personal information to third parties

To exercise any of these rights, please contact us using the details in Section 10.

7. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy, or as required by applicable law. When data is no longer needed, we delete or anonymize it.

8. International Data Transfers

Your personal data may be processed outside Japan or the EEA by our service providers (including Substack and Kit.com, which operate in the United States). Where data is transferred internationally, we take steps to ensure adequate protections are in place consistent with applicable law.

9. Security

We take commercially reasonable steps to protect your personal data from unauthorized access, use, or disclosure. No method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Contact

To exercise your rights, ask questions about this Policy, or raise a concern about how we handle your data, please contact us:

The Mega Center

Email: contact@themega.center

Web: themega.center / faro.themega.center

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this Policy periodically. Continued use of our Websites following any changes constitutes acceptance of the revised Policy.

Note: This document has been prepared for review and should be verified by a qualified legal professional before publication, particularly with respect to APPI compliance and any Faro GK entity-specific obligations upon incorporation.