Privacy Policy

NIKKAKU LABORATORY CO., LTD. (the “Company”) hereby establishes the following privacy policy (the “Policy”) concerning the handling of personal information of customers (hereinafter referred to as “Users”) obtained by the Company in connection with the Company’s provision of the Danitori App (the “Service”).

In addition to this Policy, if there is any privacy policy separately established for an individual service (an “Individual Policy”), such Individual Policy shall apply together with this Policy. The definitions used in this Policy shall be as set forth in the Act on the Protection of Personal Information (Act No. 57 of 2003; the “APPI”).

1 Compliance with Applicable Laws, Guidelines, etc.

1. The Company shall comply with the APPI and other applicable laws and regulations, the guidelines and other rules established by the Personal Information Protection Commission, and this Policy, and shall handle personal information lawfully and appropriately.

2 Categories of Information Obtained by the Company and Methods of Collection

1. The Company may obtain the following information concerning Users by the following methods of collection.

2. The Company will obtain such information properly and by appropriate means.

(1) Information provided directly by Users

• Information concerning the User’s profile, such as user name (nickname), gender, photographs, and images
• Information concerning contact details, such as email addresses
• Information necessary for identity verification, such as IDs and passwords
• Information entered through input forms, etc. (such as the prefecture of residence, the type of residence, family composition, and whether or not the User keeps pets)
• Information specified for each service
• Other information related to each of the items of information above

(2) Information obtained automatically

• Information concerning devices, applications, and networks, such as cookies, online identifiers including advertising IDs (IDFA/AAID), device type, OS, language and time zone settings, browser type, application version, IP address, and the name of the telecommunications carrier
• Information concerning the User’s usage of the Service and behavioral history, such as access logs
• Location information (only when the User has given consent)
• Information specified for each service
• Other information related to each of the items of information above

(3) Information obtained from third parties

• Information provided by the User on SNS with which the User is registered or on other services provided by third parties in connection with the Service (only when the User has given consent)
• Information concerning the User, such as behavioral history including cookies, held by third parties who do not possess information identifying the individual, such as the User’s name (personally referable information)*
  (*In such cases, the Company will obtain such personally referable information as personal information by linking it with the User’s personal information managed by the Company.)
• Information specified for each service
• Other information related to each of the items of information above

3 Purposes of Use of Personal Information

1. The Company will obtain and use Users’ personal information within the scope of the following purposes of use (except when the purpose of use is evident from the circumstances of collection), and will not use such information for any other purpose except when the User has given consent or when permitted by laws and regulations.

• (1) To register the User for the Service and to verify the User’s identity
• (2) To provide the Service, to provide user support conducted on the Service, and to carry out after-sales services relating to the Service
• (3) To give notice of matters necessary for the operation of the Service
• (4) To distribute information concerning the Service and other businesses of the Company by email or other means
• (5) To respond to inquiries from Users
• (6) To analyze information such as Users’ browsing history and purchase history and to conduct marketing tailored to Users’ interests and preferences
• (7) To conduct campaigns and prize competitions
• (8) For analysis and research necessary for improving the Service and developing new services
• (9) For billing, refunds, payments, etc. of fees for the Service and related administrative processing
• (10) To respond to acts that violate the terms of service of the Service or other rules established by the Company, and otherwise to investigate, detect, and prevent unauthorized use of the Service
• (11) To provide personal data to third parties as set forth in this Policy or an Individual Policy
• (12) To give notice of amendments to this Policy or an Individual Policy
• (13) For the purposes of use set forth in an Individual Policy

4 Provision of Personal Data to Third Parties

1. Except as set forth in this Policy or as set forth in any of the following items, the Company will not provide Users’ personal data to third parties without obtaining the prior consent of the User.

• (1) When personal data is provided in connection with the entrustment of all or part of the handling of personal data within the scope necessary to achieve the purposes of use
• (2) When the provision is based on laws and regulations
• (3) When the provision is necessary for the protection of the life, body, or property of an individual, and it is difficult to obtain the User’s consent
• (4) Where the provision is particularly necessary for improving public health or promoting the sound development of children, and it is difficult to obtain the User’s consent
• (5) Where it is necessary to cooperate with a national government organ, a local government, or a person entrusted by either of them in performing the affairs prescribed by laws and regulations, and obtaining the User’s consent is likely to interfere with the performance of such affairs
• (6) Where the third party is an academic research institution, etc., and it is necessary for such third party to handle the personal data for academic research purposes (including cases where part of the purpose of handling the personal data is academic research, and excluding cases where there is a risk of unjustly infringing the rights and interests of individuals)
• (7) When otherwise permitted under the APPI or other laws and regulations

2. Notwithstanding the preceding paragraph, the Company may provide Users’ personal data to third parties for the purpose of analyzing information such as Users’ browsing history and conducting marketing tailored to Users’ interests and preferences.

3. Where the Company provides Users’ personal data to a third party located in a foreign country, except when permitted by laws and regulations, the Company will provide the obtained information only to a party that has established a system conforming to the standards required under the APPI of Japan, and will take necessary measures to ensure that such conforming system is continuously maintained.

5 Security Control Measures for Personal Data

1. The Company will take necessary and appropriate measures for the security control of the personal data it handles, including the prevention of leakage, loss, or damage of such personal data. In addition, when having its employees or contractors (including subcontractors, etc.) handle personal data, the Company will exercise necessary and appropriate supervision over such employees and contractors so that the security control of such personal data is ensured.

6 Disclosure, Correction, etc., and Suspension of Use, etc. of Retained Personal Data, etc.

1. When a User requests the disclosure of retained personal data or records of provision to third parties pursuant to the provisions of the APPI, or the notification of the purposes of use of retained personal data, the Company will, after confirming that the request has been made by the User themselves, make such disclosure or notification without delay. However, this shall not apply where the Company is not obligated to make such disclosure or notification under the APPI or other laws and regulations.

2. When a User requests, pursuant to the provisions of the APPI, the correction, addition, or deletion of the content of retained personal data (the “Correction, etc.”) on the grounds that the content of such retained personal data is not factual, the Company will, after confirming that the request has been made by the User himself or herself, conduct the necessary investigation without delay and, based on the results thereof, make the Correction, etc. However, this shall not apply where the Company is not obligated to make the Correction, etc. under the APPI or other laws and regulations.

3. When a User requests the suspension of use or deletion of retained personal data pursuant to the provisions of the APPI, or the suspension of provision thereof to third parties (the “Suspension of Use, etc.”), the Company will, after confirming that the request has been made by the User himself or herself, carry out the Suspension of Use, etc. without delay. However, this shall not apply when the Company is not obligated to carry out the Suspension of Use, etc. under the APPI or other laws and regulations.

4. If a User wishes to make any of the requests set forth in the preceding three paragraphs, the User should contact the contact point set forth in section “7. Contact Point for Inquiries.”

7 Contact Point for Inquiries

1. For inquiries regarding the Company’s handling of personal information, please contact the following contact point.
https://www.danitori.com/contact/form-9.html

8 Amendments to this Policy

1. The Company may review the content of this Policy from time to time and amend it as necessary. In such cases, the amended Policy shall apply from the effective date separately determined by the Company.