Privacy Policy
Effective date: June 18, 2026 Last updated: June 18, 2026
1. Who we are
We are Nishihata Engineering Co., Ltd. (有限会社西畑エンジニアリング), operating our web division as One Craft ("we", "us", "our"), the provider of GENE Section Builder and GENE Blocks Studio (together, the "Plugins") and the website gene-wp.com (the "Site").
For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, Nishihata Engineering Co., Ltd. is the data controller.
Contact:
- Email: contact-web@onecraft-ne.jp
- Postal address: 61 Takayacho Asahi, Konan-shi, Aichi-ken 483-8065, Japan
If you are an EU resident and have questions about your personal data, you can contact us at the address above.
2. What this policy covers
This Privacy Policy explains what personal data we collect about you when you:
- Visit gene-wp.com
- Create an account
- Purchase a GENE Complete Site Pro license
- Use the GENE Complete Site WordPress plugin
- Contact us for support
It also explains your rights and how to exercise them.
This policy does not cover:
- The free GENE Section Builder plugin distributed via WordPress.org, which makes no external requests and does not collect any data
- Third-party websites linked from gene-wp.com
3. What personal data we collect
3.1 When you visit the Site
- Cookies and similar technologies (see Cookie Policy)
- IP address, browser and OS, pages visited, referrer (via Google Analytics or equivalent — only with your consent if you are in the EEA / UK)
3.2 When you create an account or purchase
- Name and email address
- Billing details (handled by Freemius, our payment processor — see Sub-processors)
- The website URL where you install the Plugin
3.3 When you use GENE Blocks Studio (paid plugin)
- Plugin activation and license validation requests (license key, site URL, plugin version, WordPress version) sent to Freemius
- Optional, opt-in usage statistics (you can decline at activation)
GENE Blocks Studio does not read or transmit your content, page data, user data, or any data unrelated to licensing.
3.4 When you contact support
- Your email address and the content of your message
4. Why we use your data (legal bases under GDPR)
| Purpose | Legal basis |
|---|---|
| Deliver the Site, Plugin, and license activation | Performance of a contract (Art. 6(1)(b)) |
| Process payments | Performance of a contract (Art. 6(1)(b)) |
| Respond to support requests | Performance of a contract / legitimate interests (Art. 6(1)(b)/(f)) |
| Send service announcements (security, billing, license expiry) | Legitimate interests (Art. 6(1)(f)) |
| Optional product analytics | Consent (Art. 6(1)(a)) — you can withdraw any time |
| Marketing emails | Consent (Art. 6(1)(a)) — opt-in only |
| Comply with legal obligations (tax, fraud) | Legal obligation (Art. 6(1)(c)) |
5. Who we share your data with (Sub-processors)
We use the following third parties to operate the Service. They process your data on our behalf under data processing agreements. The full current list is maintained at Sub-processors:
- Freemius Inc. (USA) — billing, license keys, plugin updates
- Xserver Inc. (Japan) — gene-wp.com hosting
- SAKURA Internet Inc. (Japan) — transactional emails
- Google Analytics (optional, consent-based) — site analytics
We do not sell your personal data to third parties.
6. International data transfers
We are based in Japan. Some of our Sub-processors are located outside the EEA / UK (notably Freemius and Google in the US). When personal data is transferred outside the EEA / UK, we rely on:
- Standard Contractual Clauses (SCCs) approved by the European Commission, and
- Other safeguards required by Chapter V of the GDPR.
You can request a copy of the relevant safeguards by writing to contact-web@onecraft-ne.jp.
7. How long we keep your data
| Data | Retention |
|---|---|
| Account and license records | While your account is active + 7 years for tax/accounting |
| Billing records | 7 years (legal obligation) |
| Support correspondence | 3 years from last contact |
| Server logs | 30 days |
| Optional analytics | Per Google Analytics defaults (14 months by default) |
| Marketing consent records | Until you withdraw consent + 3 years |
After these periods, we delete or fully anonymise your data.
8. Your rights
If GDPR / UK GDPR applies to you, you have the right to:
- Access — ask for a copy of the data we hold about you
- Rectify — ask us to correct inaccurate data
- Erase ("right to be forgotten") — ask us to delete your data
- Restrict — ask us to stop processing in certain situations
- Object — object to processing based on legitimate interests
- Data portability — receive your data in a machine-readable format
- Withdraw consent — for any processing based on your consent
- Lodge a complaint — with your local supervisory authority
If CCPA / CPRA (California) applies to you, you have the right to:
- Know what personal information we collect, use, disclose, and sell/share
- Delete your personal information
- Correct inaccurate personal information
- Opt out of the sale or sharing of personal information (we do not sell)
- Limit use of sensitive personal information
- Non-discrimination for exercising these rights
To exercise any right, write to contact-web@onecraft-ne.jp. We will respond within 30 days (GDPR) or 45 days (CCPA), extendable as the law allows.
9. Children
The Site and Plugins are not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
10. Security
We use industry-standard measures to protect your data: HTTPS / TLS on the Site, encryption at rest where supported by our providers, access controls, and the principle of least privilege internally.
No system is 100% secure. If we ever become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and you without undue delay, as required by GDPR.
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be announced at the top of this page and, where appropriate, by email. The "Last updated" date above always reflects the current version.
12. Contact
Questions about this policy or your data:
Email: contact-web@onecraft-ne.jp Post: Nishihata Engineering Co., Ltd., 61 Takayacho Asahi, Konan-shi, Aichi-ken 483-8065, Japan