LOREATEC K.K. — Starlink installation and IT-support services. This is a summary; the Japanese text above is the operative version.
Last updated: 29 October 2026 · Issued by LOREATEC K.K.
LOREATEC K.K. ("we") handles personal information in compliance with Japan's Act on the Protection of Personal Information ("APPI") and related guidelines, in providing the LOREATEC Installer Partner Program (Starlink installation) and the IT Support Platform (together, the "Service").
The section below is a summary for convenience, not the policy itself. The Japanese text is the operative version and is the one that governs.
Summary of key points
Who this covers — one policy for both of our lines of business: Starlink installation partners, IT-support partners, the technicians those partners employ, end customers having Starlink installed, and the staff of client companies who commission IT-support work. What we collect, why, and who receives it differ by role — the sections below say which is which.
Data we collect — Partners (either line): name, entity type, address, phone, email, bank details including the bank and branch codes, business-verification documents (開業届 / registration), coverage/availability, performance score. Technicians employed by a partner: name, contact details, and qualification certificates, supplied to us by the partner. End customers: name, contact, installation address/postal code, survey notes/photos, on the scale needed to arrange installation — received from the SBPM/Starlink order system for Starlink-sourced jobs, or directly from the customer when they order the installation from us. Client-company contacts (IT support): name, department, contact details, site address, and the on-site contact for a given job. Access data: cookies, IP, logs, clickwrap consent records.
Applications not approved — a partner application that is declined, or that stops moving forward, is deleted together with the documents submitted with it 60 days after the decision or its last step.
Purposes — partner vetting & account management; job routing, scheduling, completion & quality control; payment/billing/tax; scoring & service improvement; arranging installation using end-customer data and entrusting it to the assigned partner as necessary; arranging IT-support work for a client and passing what the assigned partner and technician need; AI-assisted checking, answering, translation and quality control (see AI services below); providing the assigned partner's name and the technician's name, email and phone to the IT-support client so the visit can be arranged and the technician admitted to the site; legal compliance and support.
Third-party sharing / entrustment — We do not provide personal data to third parties without consent except as permitted by law. For Starlink-sourced jobs only, we receive customer data from the SBPM/Starlink order system and send order/progress/completion data back to it. Installations a customer orders from us directly, and all IT-support work, are never shared with SBPM or Starlink — the IT-support line is an unrelated business and neither party has access to its data. We entrust customer data to the assigned installer partner, and client and on-site contact data to the assigned IT-support partner, to perform the job — under a written data-handling agreement (confidentiality, purpose limitation, security, return/deletion on termination), with our supervision. Separately, and as a genuine provision to a third party rather than entrustment, we give the IT-support client the assigned partner's name and the technician's name, email and phone; partners consent to this at registration, we record what was provided to whom, and we limit it to what that job requires.
AI services — to check submitted documents, answer and translate enquiries, check photos and pre-installation answers, and otherwise assist our work, we may send information including personal data, limited to what the purpose needs, to AI model APIs provided by outside companies. This is an entrustment of personal data. Some of these APIs are provided in Japan and some outside Japan (mainly the United States; currently mainly Google LLC's Gemini API and Anthropic, PBC's Claude API, and X.AI LLC's Grok API for drafting replies to partner-recruitment e-mails). Document checks, the photo pre-check and the installer app's reading of a Wi-Fi extender's label (which shows the device's admin password) also go to the AI provider set for each feature, which may be outside Japan. We choose services whose terms do not allow the provider to use the data for anything other than providing the service (including training AI models), send only what is needed, and as a rule have our staff check the AI's results before using them — except that when the AI confirms a submitted document, that result may be used without a staff check. The US has no comprehensive federal privacy law (sectoral federal and state laws, e.g. the CCPA, apply) — see the Personal Information Protection Commission's country reports.
Cross-border — Besides the AI services above and the phone reception below, this applies to Starlink-sourced installation jobs only. Directly-ordered installations and IT-support data are not transferred outside Japan except through the AI services above. For Starlink-sourced jobs, your personal data is collected from you by Starlink (Space Exploration Technologies Corp., USA) and passed to us through Starlink's installation contractor SBPM Partners, LLC (Houston, Texas, USA). We process it only to arrange and carry out the installation, and we return the installation completion report (including photos of the installation, equipment details, connectivity test results and survey answers) to SBPM Partners, LLC and Starlink as the result of the work entrusted to us. Recipients: SBPM Partners, LLC and Space Exploration Technologies Corp. (Starlink), both in the United States. The US has no comprehensive federal privacy law; personal data is governed by sectoral federal laws and state laws (e.g. the California Consumer Privacy Act) — see the Personal Information Protection Commission's country report on the United States. Under our contracts with SBPM and Starlink (including a data-processing agreement), the recipients are bound to use the data only for the job, keep it confidential, apply security measures, notify us of any breach, and return or erase the data when the work ends. Notices to you and any consent required for the collection of your data and its handling in the US are given and obtained by Starlink, with whom you have the customer relationship, in its own sign-up process and privacy policy; we act within the instructions of Starlink and SBPM. You may ask our contact in section 9 for information about the recipients' handling of personal data (APPI art. 31).
The LOREATEC Install app (「LOREATEC 施工」) — the iPhone and Android app technicians use (and the same web page) records: the technician's e-mail (for the sign-in code; a sign-in lapses 30 days after last use and ends on sign-out); the check-in time and location (GPS), and the location on after-work photos — taken only at those moments, never in the background; before/after photos, the technician's and the customer's signatures and the work record; readings the app takes from the Starlink dish and router on site with the phone's permission (Local Network on iPhone; Wi-Fi access and location on Android) (dish and router IDs, alignment, obstruction figure and map, speeds, the phone's Wi-Fi signal, a picture of the dish's status page); the model and OS version of the phone that ran the speed test; and the Wi-Fi name and password the customer chose, the password stored encrypted, shown only when the technician sets it on the router and on the customer's sign-off screen, and deleted when the customer signs (or the job is stopped or cancelled). No advertising, tracking or analytics data is collected and no third-party analytics is used. The work record is kept as long as warranty handling and legal retention require, then deleted. A technician can ask for their account to be deleted from the app (「アカウント削除の依頼」): it is deleted within 5 business days and they are e-mailed when it is done (except work records the law requires us to keep).
Phone calls — calls to our phone number are answered by an automated phone reception. We collect the time of the call, the caller's number when it is shown, what you choose or type on the keypad (the kind of enquiry, your order number) and a written transcript of the message you speak. Call audio is not kept. The transcript goes to our staff and, when the call is about an order and comes from a phone number registered on that order, into that order's chat, where the partner handling the order also sees it. Transcripts about an order are kept as long as that order's data; others for one year. The phone reception runs on Twilio Inc. (California, USA) and the companies it uses for speech recognition and speech synthesis, so the call is processed in the United States; the same note on US law as above applies.
Security — organisational, personnel, physical and technical measures (access control, TLS, permissions, audit logs, supervision of entrusted parties).
Your rights — you may request notification of purpose, disclosure, correction, deletion, or suspension of use/provision of your retained personal data via the contact below.
