Privacy Policy

MISUJI Corporation (hereinafter referred to as “the Company”) establishes the following Privacy Policy (hereinafter referred to as “this Policy”), constructs a system for protecting personal information, makes all employees aware of the importance of protecting personal information, and ensures thorough implementation in order to advance the protection of personal information for all those using our services (hereinafter referred to as “Users”).

Personal Information “Personal information” refers to “personal information” as defined by the Personal Information Protection Law (Law No. 57 of 2003, hereinafter referred to as the “Personal Information Protection Law”) and includes information related to living individuals that can identify specific individuals by name, date of birth, or other descriptions contained therein, or that includes a personal identification code.

Purpose of Using Personal Information The Company will acquire and use Users’ personal information within the necessary scope for the following purposes. If the Company intends to use personal information beyond these purposes, it will obtain consent from the User in an appropriate manner beforehand.

1. To provide our services (hereinafter referred to as “the Services”).
2. To improve and enhance the content of the Services or to develop new services.
3. For notifying Users about new features, updates, promotions, and other services provided by the Company (including sending emails, flyers, and other direct mail).
4. For necessary communications such as maintenance and important notices.
5. To respond to User inquiries and feedback about the Services (including identity verification).
6. To report on the usage of the Services to Users.
7. To request cooperation in surveys and interviews related to the Services and to report the results.
8. To analyze usage history and other data to improve and develop the Services and for delivering advertisements.
9. To provide personal information to partners of events organized by the Company based on User consent and applications.
10. To identify Users who violate the terms of service or use the Services for illegal or unjust purposes, and to deny such use.

Use of Cookies The Company uses cookies and other information collection technologies (hereinafter referred to as “Cookies, etc.”) to analyze access to the Services and can collect access and browsing information of Users to the Services. The information obtained through Cookies, etc. (hereinafter referred to as “Cookie Information”) does not include information that can identify Users by itself.

Users can configure the use of Cookies, etc. on the Services. If you choose not to accept Cookies, etc., you can disable them in your browser settings. However, disabling Cookies, etc., may impair the convenience of the Services or limit the range of services available.

The Company will use Cookie Information for operating the Services, maintaining quality, improvement, as well as for developing and improving our products and services, and for delivering advertisements tailored to the usage of the Services.

Management and Protection of Personal Information The management of personal information shall be strictly controlled, and except in the cases listed below, personal information will not be disclosed or provided to third parties without the consent of the User. Safety measures will be taken to prevent unauthorized access, loss, destruction, falsification, and leakage of personal information.

1. When it is necessary to protect the life, body, or property of an individual, and it is difficult to obtain the consent of the User.
2. When it is particularly necessary for improving public health or promoting the sound growth of children, and it is difficult to obtain the consent of the User.
3. When it is necessary to cooperate with a national agency, a local government, or an individual or entity entrusted by them to execute the provisions of the law, and obtaining the User’s consent would impede the execution of the operations.
4. Other cases where it is permitted by law.

Handling of Personal Information The Company may outsource the handling of personal information within the scope necessary to achieve the stated purposes. In such cases, the Company will sufficiently evaluate the eligibility of the subcontractor and stipulate confidentiality among other matters in the contract, while conducting necessary and appropriate supervision.

Joint Use of Personal Information The Company may jointly use Users’ personal information within the necessary scope for the following purposes:

Purpose of joint use:

• For management and improvement of services.

Scope of jointly used personal information and range of users:

• MISUJI Corporation

Party responsible for management of personal information:

• MISUJI Corporation (Representative Director: Katachi Kakuto)

Disclosure of Personal Information Users can request the disclosure of their personal information held by the Company by following the procedures specified in Article 10. The Company will disclose the information promptly upon request unless it falls under any of the conditions where disclosure is deemed inappropriate. If a decision is made not to disclose the information, the Company will notify the User promptly.

Correction of Personal Data Users can request corrections, additions, or deletions (“corrections, etc.”) to their personal information held by the Company if it contains incorrect information by following the procedures specified in Article 10.

Upon receiving such a request, the Company will conduct the necessary investigations without delay, and if it is determined that there is a reason for the request, the Company will make the necessary corrections promptly.

The Company will inform the User promptly about the implementation or non-implementation of corrections based on the previous paragraph.

Stopping the Use of Personal Information, etc. Users can request the stopping of the use, erasure, or cessation of third-party provision (“stopping of use, etc.”) of their personal data held by the Company by following the procedures specified in Article 10.

Upon receiving such a request, the Company will conduct the necessary investigations without delay, and if it is determined that there is a reason for the request, the Company will stop the use of the personal data. However, if stopping the use of personal information, etc., requires a large amount of expense or is otherwise difficult to perform, and if alternative measures can be taken to protect the rights and interests of the User, such alternative measures will be taken.

The Company will inform the User promptly about the implementation or non-implementation of the stopping of use based on the previous paragraph.

Procedures for Disclosure and Other Requests When making requests as specified in Articles 7 to 9, please fill in the required items on the request form specified in (1) below, attach the identity verification documents specified in (2), and send them to the address specified in (3).

Changes to the Privacy Policy The Company will review the contents of this Policy as appropriate and strive for improvement. The contents of this Policy can be changed, except for matters otherwise specified by laws or other provisions in this Policy. The revised Privacy Policy will take effect when it is notified to the Users by the prescribed method of the Company or when it is posted on our website.

Compliance with Laws and Norms The Company complies with the Japanese laws and other norms applicable to the personal information held.

Handling Complaints and Consultations The Company accepts complaints and consultations regarding the handling of personal information from Users and responds appropriately and promptly. Additionally, the Company will respond promptly and appropriately to requests from Users for disclosure, correction, addition, deletion, or refusal of use or provision of their personal information.

Safety Management Measures The personal information entrusted to us by Users will be protected against unauthorized access, loss, destruction, alteration, and leakage through organizational, physical, human, and technical measures such as implementing access restrictions to personal information files, recording access logs, and taking security measures to prevent unauthorized access from the outside. In the event of an accident involving leakage of Users’ personal information, the Company will promptly report to the supervisory authorities in accordance with the Personal Information Protection Law and related guidelines and will take necessary measures to prevent similar incidents and to prevent recurrence as instructed by the supervisory authorities. For more details, please see the attached “Safety Management Measures for Personal Information.”

Company Address, Representative Name, and Personal Information Protection Manager The address of the Company, the name of the representative, and the personal information protection manager are as follows: Address: 3-13-4 Akasaka, Minato-ku, Tokyo Representative: Kataji Tadato, Representative Director Personal Information Protection Manager: Kataji Tadato

Contact for Inquiries For inquiries regarding the handling of personal information by the Company, please contact: MISUJI Corporation, Customer Support Desk

Enacted and enforced on February 1, 2024