Privacy & Policy

Candy Corporation (hereinafter referred to as "the Company") has established the following Privacy Policy (hereinafter referred to as "this Policy") regarding the handling of personal information of individuals utilizing the Company's services (hereinafter referred to as "Users"). The Company will build a framework for personal information protection and ensure that all employees recognize the importance of personal information protection and thoroughly implement these efforts to promote the protection of personal information.

1. (Personal Information)

"Personal Information" refers to the "personal information" defined in the Act on the Protection of Personal Information (Law No. 57 of 2003, hereinafter referred to as "the Personal Information Protection Act"). It includes information related to a living individual that can identify a specific person through their name, date of birth, or other descriptions contained in that information, or includes individual identification codes.

2. (Purpose of Using Personal Information)

The Company will acquire Users' personal information to the extent necessary for the following purposes and will utilize the obtained information for those purposes. If the Company intends to use personal information beyond the scope of the purposes listed below, it will obtain consent from Users in an appropriate manner in advance.

1. To provide the Company's services (hereinafter referred to as "the Service").

2. To improve and enhance the content of the Service, or to develop new services.

3. To provide information about new features, updates, campaigns, etc. of the Service and other services offered by the Company (including but not limited to emails, flyers, direct mail, and other communication methods).

4. To communicate as necessary for maintenance, important announcements, and other notifications.

5. To respond to feedback and inquiries from Users regarding the Service (including verification of identity).

6. To report the usage status of the Service to Users and other stakeholders of the Company.

7. To request cooperation for surveys and interviews related to the Service, or to invite participation in various events, and to report the results.

8. To investigate and analyze usage history of the Service and to utilize the results for improvement and development of the Service, as well as for advertising delivery.

9. To provide personal information to participating companies and others in Company-hosted events based on the User's consent and application.

10. To identify Users who violate the Terms of Use or attempt to use the Service for unlawful or improper purposes and to deny them access.

3. (Management and Protection of Personal Information)

The management of personal information shall be conducted rigorously, and except in the cases listed below, data will not be disclosed or provided to third parties without the User's consent. Additionally, with safety in mind, the Company will implement measures to prevent and rectify risks related to unauthorized access to personal information, loss, destruction, alteration, and leakage of personal information.

1. When it is necessary to protect a person's life, body, or property, and obtaining the User's consent is difficult.

2. When it is particularly necessary for the improvement of public health or the promotion of the sound development of children, and obtaining the User's consent is difficult.

3. When it is necessary to cooperate with national agencies, local public bodies, or persons entrusted by them in the execution of duties prescribed by law, and obtaining the User's consent may impede the execution of those duties.

4. In other cases permitted by law.

4. (Outsourcing of Personal Information Handling)

The Company may outsource all or part of the handling of personal data within the scope necessary to achieve the purposes of use. In such cases, the Company will thoroughly evaluate the suitability of the outsourcing party, establish confidentiality obligations in the contract, and conduct necessary and appropriate supervision of the outsourcing party.

5. (Disclosure of Personal Information)

When a User (referring to the individual only; the same applies hereinafter in this article) requests the disclosure of personal information held by the Company, the Company will disclose it without delay. However, if the disclosure would fall under any of the following categories, the Company may decide not to disclose all or part of the information and will promptly notify the User of such decision. Please note that a fee of 1,000 yen will be charged for each request for disclosure of personal information.

1. When there is a risk of harming the life, body, property, or other rights and interests of the User or third parties.

2. When there is a risk of significantly hindering the proper execution of the Company's operations.

3. When disclosing would violate other laws or regulations.

6. (Correction of Retained Personal Data)

1. Users may request the Company to correct, add to, or delete (hereinafter referred to as "Correction, etc.") any personal information held by the Company that is inaccurate.

3. If the Company makes a decision regarding the implementation or non-implementation of corrections based on the preceding paragraph, it will promptly contact the User.

7. (Suspension of Use of Personal Information)

1. Users may request the Company to suspend the use of, delete, or stop providing their personal data to third parties (hereinafter referred to as "Suspension of Use, etc.").

2. Upon receiving a request as described in the preceding paragraph, the Company will conduct necessary investigations without delay. If the Company determines that the request is justified based on the results, it will suspend the use of the personal data, delete it, or stop providing it to third parties. However, if suspending the use of personal information would require significant costs or if it is otherwise difficult to do so, and if there are alternative measures that can be taken to protect the User's rights and interests, the Company will implement those alternative measures.

3. If the Company makes a decision regarding the implementation or non-implementation of the suspension of use based on the preceding paragraph, it will promptly contact the User.

8. (Procedures for Changing the Privacy Policy)

The Company will review and strive to improve the content of this Policy as necessary. The content of this Policy may be changed, except for matters specifically provided for by laws or other stipulations in this Policy. The amended Privacy Policy will take effect when it is notified to Users through methods specified by the Company or published on the Company's website.

9. (Compliance with Laws and Standards)

The Company will comply with applicable Japanese laws and other standards regarding the personal information it holds.

10. (Response to Complaints and Inquiries)

The Company will accept complaints and inquiries from Users regarding the handling of personal information and will respond appropriately and promptly. Additionally, the Company will also respond swiftly and appropriately to requests from Users regarding the disclosure, correction, addition, deletion, or refusal of use or provision of their personal information.

11. (Safety Management Measures)

The personal information entrusted to the Company by Users will be protected against unauthorized access, loss, destruction, alteration, and leakage through organizational, physical, human, and technical measures, such as implementing access restrictions to personal information files, recording access logs, and implementing security measures to prevent unauthorized access from outside. In the event of an incident involving leakage of Users' personal information, the Company will promptly report it to the supervisory authority in accordance with the Personal Information Protection Act and related guidelines, and will take necessary measures to prevent similar incidents and recurrence in accordance with the instructions of the supervisory authority. For more details, please refer to the attached "Safety Management Measures for Personal Information."

12. (Company Address and Representative Name)

The Company's address and the name of the representative are as follows:

Address: 1-1-1, 29th Floor, Osaka Ekimae Building No. 3, 1-1-3 Umeda, Kita Ward, Osaka City, Osaka 530-0001, Japan

Representative: Chiharu Asano

13. (Contact Information)

For inquiries regarding the handling of personal information by the Company, please contact us at the following:

Candy Corporation Customer Support Center

1-1-1, 29th Floor, Osaka Ekimae Building No. 3, 1-1-3 Umeda, Kita Ward, Osaka City, Osaka 530-0001, Japan

TEL: 06-4965-3024

Mail: hello@candycorp.co.jp

Established and Effective Date: July 1, 2023