Article 1: Compliance with Laws and Regulations

Article 2: Personal Information Handled by the Company

1. The Company handles the following types of personal information:
   • (1) Personal information related to the Company’s business as specified in Article 3, Paragraph 1, is properly acquired and strictly managed in accordance with the Act on the Protection of Personal Information and other relevant laws and this policy. In principle, such information will not be used for purposes other than those specified in this policy.
   • (2) For the smooth execution and safety of the Company's operations and employees, the Company may collect, store, and use information such as telephone recordings, web access logs, emails, and inquiry data. These will be properly acquired and strictly managed in compliance with relevant laws and this policy, and will not be used beyond the specified purposes.
2. Collected personal information will be retained for a period specified internally by the Company. Employee information will be retained for the period required by law and then promptly deleted. Resumes and related documents of unsuccessful job applicants will be immediately discarded and not retained.

Article 3: Purpose of Use of Personal Information

1. The Company uses personal information within the scope of its business and methods:
   • (1) Scope of Business:
     i. Information services
     ii. Internet-related services
     iii. Other activities as defined in the Articles of Incorporation
   • (2) Methods of Use:
     i. To provide information regarding the Company's operations, products, services, and related matters
     ii. To verify and authenticate customer identities
     iii. To improve services through marketing, sales, advertising conducted independently or jointly with third parties, and for conducting surveys
     iv. For the smooth execution of Company operations
     v. For purposes related or incidental to items i–iv above
2. If the Company intends to use personal information beyond the necessary scope of the specified purposes, it will obtain prior consent from the individual.
3. Notwithstanding the above, the Company may use personal information beyond the specified scope in the following cases:
   • (1) When required by law
   • (2) When it is necessary to protect a person’s life, body, or property and obtaining the individual’s consent is difficult
   • (3) When it is especially necessary for public health or for the sound development of children, and obtaining the individual's consent is difficult
   • (4) When it is necessary to cooperate with a government agency or local authority in the execution of legally prescribed duties, and obtaining the individual's consent may impede such duties

Article 4: Proper Acquisition and Principle of Minimum Collection

1. The Company acquires personal information lawfully and fairly, and not through deception or other wrongful means.
2. The Company does not acquire sensitive personal information without prior consent unless permitted by law.
3. The personal information collected is limited to what is necessary and minimal to achieve the purposes of use.
4. Notwithstanding the above, when entering into contracts or acquiring personal information directly in writing (including electronic records), the Company will clearly state the purpose of use to the individual in advance.

Article 5: Security Control Measures

Article 6: Selection and Supervision of Contractors

Article 7: Provision to Third Parties

1. In principle, the Company will not provide personal data to third parties without the individual’s consent, except in the cases listed in Article 3, Paragraph 3.
2. In addition to the above, the Company may provide personal information without the user’s consent in the following cases:
   • (1) When the user causes or may cause harm to a third party
   • (2) When the user explicitly requests disclosure or provision to a third party
   • (3) When disclosure or provision is permitted by law

Article 8: Inquiries Regarding Personal Information

Article 9: Types of Information Held

1. The Company holds the following information:
   • (1) Personal information (name, age, gender, date of birth, address, phone number, email address, etc.)
   • (2) Email communication records (including signature information, etc.)
   • (3) Automatically collected technical information such as domain names, IP addresses, search queries, and browser user agent strings. Cookies are limited to improving usability and do not contain any personal information.
   • (4) Contact information (including business cards)

Article 10: Requests for Disclosure, Correction, or Deletion

1. To request notification of the purpose of use, disclosure, correction, addition, deletion, suspension of use, or erasure of personal information held by the Company, please send a written request with the following:
   • The individual’s information (address, name, phone number, email address)
   • The content of the request
   • A copy of official ID (resident record issued within 3 months)
   • A stamped return envelope
   If the request is made by a proxy, please also include:
   • The proxy’s information (address, name, phone number, email address)
   • A letter of attorney verifying legal authority
   • (1) The Company will use the personal information obtained through the request solely for processing the request.
   • (2) If there is any uncertainty in the request, the Company or a third party appointed by the Company may contact you at the provided phone number or email address.
   Disclosure Request Contact 3F Oak Sakuragicho Building,
   6-113 Aioi-cho, Naka-ku, Yokohama, Kanagawa 231-0012
   Miraibox Inc. - Disclosure Request Desk
2. A fee of 1,000 yen (incl. tax) must be paid via postal money order. If this fee is not enclosed, the request will be deemed invalid.
3. The Company will respond in writing to the address listed on the disclosure request form within 30 days.