[ Notice on Items Required to Be Disclosed under the APPI ]

Personal Information Protection Policy

Last updated: Jan 14, 2025

AYROM Inc. and AYROM-related brands recognize that our customers' personal information is a valuable asset. In holding and using such information to provide better products and services, we strive to protect personal information in accordance with the common privacy policy of AYROM Inc. and to earn our customers' trust.

Under the Act on the Protection of Personal Information (APPI) (hereinafter, the "Act"), personal information handlers such as our company (name: AYROM Inc.) are required to make prescribed matters concerning personal information they obtain—such as the purposes of use—publicly available or readily accessible to the individuals concerned. We set forth items 1 through 6 below as follows (terms are the same as in the common privacy policy).

1. Information Obtained

As described in paragraph 1 of Articles 1 and 2 below.

2. Purposes of Use

The purposes of use of personal information at the time of acquisition (related to Article 21, paragraph 1 of the Act) and the purposes of use of retained personal data (related to Article 32, paragraph 1 of the Act) (collectively, the "Purposes of Use"). As described in paragraph 2 of Articles 1 and 2 below.

3. Joint Users of Personal Information and Business Entrustees (hereinafter, "Recipients of Personal Information")

Where a recipient of personal information is a third party located in a foreign country, information on systems for the protection of personal information in the country to which the information is transferred. Joint users are described in Article 3, paragraph 2 below. Where business entrustees exist for the items in Articles 1 and 2, they are described in paragraph 3 of each article below.

4. Matters Concerning Security Control Measures

Measures taken for the security management of retained personal data as prescribed in Article 10 of the Enforcement Order of the Act on the Protection of Personal Information. As described in paragraph 4 of Articles 1 and 2 below.

5. Contact Point for Inquiries

The contact point for complaints regarding the handling of retained personal data as prescribed in Article 10 of the Enforcement Order of the Act on the Protection of Personal Information. As described in paragraph 5 of Articles 1 and 2 below.

6. Procedures for Responding to Requests for Disclosure, etc.

Procedures for responding to inquiries regarding notification of purposes of use of retained personal data (related to Article 32, paragraph 2 of the Act), disclosure (related to Article 33, paragraph 2 of the Act), correction, etc. (related to Article 34, paragraph 2 of the Act), suspension of use, etc. (related to Article 35, paragraph 2 of the Act), and suspension of provision to third parties (related to Article 35, paragraph 4 of the Act) (collectively, "Requests for Disclosure, etc."). As described in paragraph 6 of Articles 1 and 2 below.

(End)

Article 1 (Provision of Services in Our Business)

  1. Information Obtained
    We set forth items 1 through 6 below as follows (terms are the same as in the common privacy policy).
  2. Purposes of Use
    1. Sale or licensing of products and provision of services
    2. Advertising, publicity, and sales promotion activities related to products and services (including use for information analysis and marketing purposes; we may provide information on products, services, and various events by email, direct mail, or other means)
    3. After-sales service and other customer support (including use for registration, identity verification, emergency contact, etc.)
    4. Product and service development
    5. Auditions hosted by our company
  3. Recipients of Personal Information
    To the extent necessary to achieve the purposes of use set forth in Article 1, paragraph 2 above, we may provide part of the information obtained under Article 1, paragraph 1 to business entrustees in Japan and the United States. Such business entrustees include IT service providers and data hosting providers. Where we entrust operations to overseas business operators for other reasons, or provide obtained information to overseas business operators for other reasons, we will state this in the privacy policy or terms of use for the relevant product or service. An overview of the personal information protection legal systems in the relevant countries may be confirmed here. Joint users are described in Article 3, paragraph 2 below.
  4. Matters Concerning Security Control Measures
    We implement rigorous security measures for personal information we obtain and retain. These measures include implementation and periodic review of organizational information security management, periodic training and education for employees, periodic inventory of information assets, physical security control measures (management of employee entry and exit, terminal management, etc.), encryption of communications, strict access controls, and periodic vulnerability management for information systems. We may also store part of the information obtained from customers with data hosting providers located in the United States and elsewhere (see "Recipients of Personal Information" above). In such cases, we store the information after confirming that the provider takes necessary and appropriate measures for the security management of the information.
    We also set forth basic policies regarding the handling of personal information in our common privacy policy. Please refer to that policy for an overview of our security control measures.
  5. Contact Point for Inquiries
    AYROM Inc. Personal Information Inquiry Desk
    Address: 〒142-0063 東京都品川区荏原4-4-3 大塚ビル 4F
    Contact: https://ayrom.io/form/inquiry/
    Hours: Monday–Friday (10:00–17:00), excluding public holidays and year-end/New Year holidays
  6. Procedures for Responding to Requests for Disclosure, etc.
    For details of the procedures, please contact the inquiry desk above.

Article 2 (Public Relations Activities)

  1. Information Obtained
    Name, address, date of birth, gender, telephone number, occupation, employer, email address, content and history of opinions and inquiries, and other information obtained in connection with providing information and various communications
  2. Purposes of Use
    Providing information to journalists and others and various communications in connection with public relations activities
  3. Recipients of Personal Information
    To the extent necessary to achieve the purposes of use set forth in Article 2, paragraph 2 above, we may provide part of the information obtained under Article 2, paragraph 1 to business entrustees in Japan and the United States. Such business entrustees include IT service providers and data hosting providers. An overview of the personal information protection legal systems in the relevant countries and regions may be confirmed here.
  4. Matters Concerning Security Control Measures
    Same as Article 1, paragraph 4 above.
  5. Contact Point for Inquiries
    Same as Article 1, paragraph 5 above.
  6. Procedures for Responding to Requests for Disclosure, etc.
    For details of the procedures, please inquire here.
    (Matters concerning personal information of job applicants and our employees will be notified or publicly announced to the individuals concerned separately.)

Article 3 (Matters Concerning Joint Use)

Article 27, paragraph 5, item 3 of the Act provides that, as an exception to provision to third parties, where personal data used jointly with specified persons (excluding sensitive personal information) is provided to such specified persons, and where that fact and certain matters are readily accessible to the individual, the joint users do not constitute "third parties" under provision to third parties, and personal data may be provided to such joint users without obtaining the individual's prior consent. In this regard, we may jointly use obtained personal data in accordance with the following matters.

  1. Categories of Personal Data Subject to Joint Use
    Personal data provided through contact with customer service desks related to our products and services (including contact via inquiry forms on our website, telephone, or other means, as well as requests for business meetings), or through customer registration procedures (inquiry history, name, address, contact information such as telephone number and email address, product serial numbers, purchase and service usage history, and other information), and information collected in connection with the items in Articles 1 and 2 above
  2. Scope of Joint Users
    AYROM Inc. group companies and brand list
    Fixville
    Related business operators of group companies and brands related to services operated by our company (limited to cases where consent to joint use with the business operator expressly identified for the relevant service has been obtained.
  3. Purposes of Use by Joint Users
    The following business activities relating to products and services:
    1. Responding to consultations and other inquiries to customer service desks
    2. Related business operators such as talent agencies of performers related to services operated by our company (limited to cases where consent to joint use with the business operator expressly identified for the relevant service has been obtained.
    3. Reference for product development and service improvement
    4. Advertising, publicity, and sales promotion activities for products and services (including use for information analysis and marketing purposes; we may provide information on products, services, and various events by email, direct mail, or other means)
  4. Person Responsible for Management of Personal Data
    AYROM Inc.

Article 4 (Protection of Personal Information of Minors)

We strive to comply with all laws applicable to the collection, retention, and use of personal information relating to customers under 15 years of age. If you become aware that your child has provided personal information to us without the consent of a parent or guardian, please contact the inquiry desk set forth in this policy.

Article 5 (Supplementary Provisions)

Where we separately indicate purposes of use, etc., by notification to the individual, approval of terms of use, or other means, the content of such individual purposes of use, etc., shall take precedence over the above. Thank you for your understanding.