Basic policy on the protection of personal information

The Company will acquire, use, provide, and outsource personal information only to the extent necessary to carry out business. We will acquire Personal Information by fair and legitimate means. We will not acquire personal Information unless the purpose of the use is clearly stated and prior consent of the individual to whom such Personal Information pertains.
The acquired personal information will be used only within the scope of the purpose of use and will not be used for any other purpose.As a measure to prevent the use of personal information for other purposes, education and training regarding the protection of personal information will be conducted within the company regularly.
In addition, except as provided by laws and regulations, we will not provide personal information to any third party without the prior consent of the individual to whom such personal data pertains.
When entrusting the handling of personal information to a third party, we will conduct a strict and appropriate investigation and supervision of the third party.

1. We shall establish an information security management system and strive to prevent unauthorized access, leakage, loss, falsification, and destruction of all information and information systems related to the Company.
2. Establish an Information Security Committee to evaluate the implementation status and effectiveness of information security activities, and continuously improve them.
3. We will comply with laws and regulations, contractual requirements, other social norms, and internal rules related to information security.
4. We will continuously provide employees and others with education related to information security necessary for their duties, and demand clear responsibility for any violations of this basic policy and internal regulations.

The Company will comply with laws and regulations, guidelines established by the government, and other standards regarding the handling of personal information.

The Company has established "compliance programs" for the protection of personal information. While implementing and maintaining the program, we make regular reviews of the program as part of our efforts for continuous improvement.