Privacy Notice
Soriv · Hirozumi Taima, Founder and operator · Japan · Version 1.1 · Effective date: 15 August 2026
1. Who is responsible for your personal data?
Hirozumi Taima, trading as Soriv, is the controller of personal data described in this notice. Soriv is operated from Japan and does not claim to be incorporated or established in the United Kingdom or the European Economic Area (EEA).
Privacy and data-protection contact: research@sorivresearch.com.
This notice covers the Soriv website, product enquiries, purchasing and delivery, support, and business-to-business outreach, including where Soriv contacts a named professional at an organisation using publicly available professional contact information.
2. Personal data Soriv may process
Depending on the context, Soriv may process:
- your professional name;
- job title, professional role, department or function;
- business email address and other professional contact details;
- employer, club, agency or other organisation;
- public professional information relevant to whether Soriv's product may be relevant to your role;
- the source from which Soriv obtained the professional information;
- outreach history, replies, enquiry history and opt-out or objection status;
- for customers, purchaser, organisation, billing, transaction, delivery and licence records;
- support correspondence and records needed to investigate a product or delivery issue; and
- technical and security information generated when the website is delivered or protected.
Soriv does not need confidential player, medical, privileged, contract or live-negotiation information for routine Atlas use or routine support.
3. Where professional contact data may come from
For business outreach, Soriv may obtain professional information from sources other than the individual, including organisation websites, official league or federation directories, club or agency directories, and other lawful public business or professional sources.
Soriv does not treat information as unrestricted merely because it is publicly available. Where the information identifies an individual, Soriv treats it as personal data where applicable.
4. Why Soriv uses personal data and the lawful basis
Soriv uses personal data only for defined business purposes. The lawful basis depends on the activity.
| Purpose | Lawful basis |
|---|---|
| Relevant B2B outreach to named professional contacts at corporate organisations | Legitimate interests, where applicable data-protection and electronic-marketing rules permit the outreach without consent. Soriv's interests are to introduce its own relevant research products to professional decision-makers and develop business relationships. Legitimate interests are not used to override a consent requirement or other restriction imposed by applicable electronic-marketing law. |
| Responding to an enquiry or request | Legitimate interests in responding to professional enquiries and, where the individual is entering into a contract personally, steps at the individual's request before entering into or performing that contract. |
| Administering a purchase, payment, delivery, licence or support request | Contract where applicable; legitimate interests in administering a business purchase and supporting the purchasing organisation; and legal obligation where records are required for tax, accounting or other law. |
| Maintaining an opt-out / suppression record | Legitimate interests in respecting objections and avoiding repeat marketing, together with compliance with applicable direct-marketing and data-protection duties. |
| Website delivery, security and aggregate performance measurement | Legitimate interests in operating, protecting and understanding the performance of the website. |
Electronic-marketing rules vary by country and by recipient type. For UK B2B electronic mail, Soriv applies the applicable PECR rules. For EEA outreach, Soriv applies the relevant national ePrivacy / electronic-marketing rules together with the GDPR where personal data are involved. Soriv does not treat a data-protection lawful basis such as legitimate interests as a substitute for any consent, recipient-type or opt-out rule required by the applicable electronic-marketing law.
5. How Soriv applies legitimate interests to outreach
Where Soriv relies on legitimate interests for B2B outreach, it limits the activity to professional recipients whose role is reasonably relevant to the product. The intended operating safeguards include:
- targeted professional outreach rather than indiscriminate consumer mailing;
- one unsolicited first-cycle outreach per organisation per transfer season across Soriv-controlled channels;
- no automatic unanswered follow-up;
- an easy reply-based opt-out;
- a suppression list to prevent repeat contact after an objection; and
- no consumer targeting as part of this B2B outreach process.
Soriv considers the purpose, necessity and impact on the individual before relying on legitimate interests. The existence of a commercial interest does not by itself make every use of personal data lawful.
You can object to Soriv using your personal data for direct marketing at any time. This right is absolute. Reply to the outreach email with an opt-out request or email research@sorivresearch.com. Soriv will stop using your personal data for direct marketing after an objection. Soriv may keep the minimum information needed on a suppression list so that the objection is respected in future.
6. When Soriv provides this information
If Soriv obtains your personal data from another source, such as your organisation's website or an official professional directory, Soriv will provide or link to this privacy information within the period required by applicable law. Where Soriv communicates with you first, the intention is to provide the privacy information no later than that first communication, unless a lawful exception applies.
7. Who Soriv may share data with
Soriv shares personal data only where reasonably necessary for the purposes above. Relevant categories include:
- Cloudflare, for website hosting/delivery, security and Web Analytics;
- Stripe, for Stripe-hosted checkout, payment processing and related transaction records when you purchase;
- Soriv's business email service provider, for sending and receiving business email;
- professional advisers or service providers where genuinely needed for accounting, legal, security, records or business administration; and
- public authorities or regulators where disclosure is required by law.
Soriv does not sell professional outreach lists or personal data.
8. International processing and transfers
Soriv is operated from Japan, so personal data handled directly by Soriv may be accessed and processed in Japan. Some service providers also operate internationally or use sub-processors in more than one country.
Where EU / EEA data-protection transfer rules apply, transfers are handled under an applicable Chapter V GDPR mechanism. The European Commission has adopted an adequacy decision for Japan. Where a transfer falls within the scope of that adequacy decision, personal data may be transferred on that basis. Where adequacy does not cover a relevant transfer, Soriv uses another lawful mechanism where required, such as appropriate safeguards provided under applicable data-protection law.
Where UK data-protection transfer rules apply to a transfer outside the UK, Soriv uses an applicable UK transfer mechanism where required. Service providers such as Cloudflare and Stripe publish contractual transfer terms for applicable international processing. You may contact research@sorivresearch.com for information about safeguards relevant to your data.
9. Retention
Soriv does not keep personal data simply because it might be useful later. Retention is based on the purpose for which the information is held and any legal or operational need that continues to apply.
- Professional prospect and outreach records are reviewed when the relevant outreach cycle or business purpose ends and are deleted or reduced when they are no longer needed.
- Opt-out and objection records may be retained in minimal form for as long as reasonably necessary to ensure Soriv does not contact the person again for direct marketing.
- Customer, payment, delivery, accounting and transaction records are retained for the periods required by applicable tax, accounting, contractual, dispute and legal obligations.
- Support and complaint records are kept only as long as needed to resolve the matter and meet applicable legal or record-keeping requirements.
10. Your data-protection rights
Where the UK GDPR or EU GDPR applies, you may have rights to request access to your personal data, ask for inaccurate data to be corrected, request erasure or restriction in applicable circumstances, object to processing, and receive or transfer certain data where the portability right applies. If Soriv relies on consent for a specific activity, you may withdraw that consent at any time. Rights may be subject to conditions and lawful exceptions.
You may object to processing of your personal data for direct marketing at any time. Where that right applies, Soriv will stop processing your personal data for direct-marketing purposes after the objection, while retaining the minimum suppression information reasonably necessary to respect it.
To exercise a right, email research@sorivresearch.com. Soriv may ask for information reasonably necessary to verify identity or authority and will respond within the timeframe required by the applicable law.
11. Data-protection complaints
You can raise a data-protection concern with Soriv at research@sorivresearch.com. Soriv will investigate and respond in accordance with the requirements that apply to the matter.
Where UK data-protection law applies, you may also complain to the UK Information Commissioner's Office (ICO). Information about making a complaint is available at ico.org.uk.
Where the EU GDPR applies, you may have the right to lodge a complaint with a competent EEA supervisory authority, including in the Member State of your habitual residence, place of work, or the alleged infringement. In Ireland, the supervisory authority is the Data Protection Commission (DPC).
12. Automated decision-making and profiling
Soriv does not use solely automated decision-making that produces legal effects or similarly significant effects on professional outreach recipients. Soriv may use ordinary business tools to organise prospect and customer information, but a person's inclusion in outreach is intended to be based on professional relevance rather than sensitive profiling.
13. Website analytics and cookies
Soriv uses Cloudflare Web Analytics and Cloudflare's hosting/security services. Soriv does not intentionally use Web Analytics to set advertising cookies, build behavioural advertising profiles or identify individual visitors. Soriv does not intentionally deploy Google Analytics, advertising cookies or behavioural advertising on this website.
No cookie banner is added merely for appearance. If the website later introduces storage or tracking technologies that require consent or additional information, this notice and the website will be updated before that change is relied on.
14. Changes to this notice
Soriv may update this Privacy Notice when its business practices, providers or legal obligations change. The current effective date will be shown at the top of this page.