1．We will handle the following types of personal information:

1. （1）Personal information related to business activities
   We will properly obtain and strictly manage personal information in accordance with the Act on the Protection of Personal Information and other relevant laws and regulations as well as this Policy, and we will not use such information for any purpose other than the purpose of use stipulated in this Policy, in principle.
2. （2） Personal information collected for the sake of our management and security
   In order for us to carry out our business smoothly, as well as for the security of our business and staff, we may collect, store and use information, such as that sent by email or that related to requests for repair and other inquiries. Such information will be properly obtained and strictly managed in accordance with the Act on the Protection of Personal Information and other relevant laws and regulations as well as this Policy, and it will not be used for any purpose other than the purpose of use stipulated in this Policy, in principle.

2．Personal information collected shall be retained for a period specified by us and then disposed of in regular order. Records, such as resumes of persons who are not employed through our recruitment activities, will be immediately disposed of, and we will not retain this information.
Employee information will be stored for the period we are obliged to store it under the relevant laws and regulations and disposed of in regular order after the period.

1．We will use the personal information obtained by us within the following scope of business activities and through the following means according to the classifications of personal information listed in the items of paragraph 1 of this Article:

• （1）Personal information related to business activities
  1. a. Scope of business activities for which information is used
     Development, design, manufacturing and sale of long-term care and welfare devices
     Development, design, manufacturing and sale of special industrial devices
     Discovery of device development technology seeds and commercialization consulting
     Acquisition, maintenance and management of intellectual property rights in and to device development technology seeds
     Acquisition, maintenance and management of product authorization
     To the extent necessary for our management, sales activities and technologies incidental to the above
  2. b. Means of using information
     (i) To respond to inquiries and requests
     (ii) To inform customers of our business
     (iii) To provide reports of our business activities, communication and information on our business activities
     (iv) To conduct a questionnaire survey for reasons such as to improve the services provided by us and to provide staff education
     (v) To facilitate our business
     (vi) To carry out other business in connection with the preceding items (i) through (v)
• （2）Personal information collected for the sake of our management and security
  1. a. Scope of business activities for which information is used
     Sales activities for and sale and repair of our products
     Quality control and quality improvement for our products
  2. b. Means of using information
     (i) To send catalogs, e-mail newsletters, direct mail, etc.
     (ii) To respond to inquiries
     (iii) To refer to the content of past inquiries
     (iv) To respond to requests for trying on clothes or placement of orders
     (v) To carry out after-sales services, repairs, etc.
     (vi) To plan measures to improve customer satisfaction
     (vii) To respond to issues accurately at the contact desk and to improve the quality of our responses
     (viii) To request cooperation with questionnaire surveys
     (ix) To send alerts
     (x) To provide information on events
     (xi) To provide information on benefits and to send benefits
     (xii) For distributors to carry out sales activities

2．If personal information is handled beyond the scope necessary to achieve the purpose of use specified under the provisions of the preceding paragraph, we shall obtain the prior consent of the person whose information is to be handled.

3．Notwithstanding the provisions of the preceding two paragraphs, we may use personal information beyond the scope necessary to achieve the specified purpose of use in any of the following cases:

1. （1）When the use is based on laws and regulations;
2. （2）When the use is necessary to protect the life, body or property of any person and it is difficult to obtain the consent of the person whose information is to be used;
3. （3）When the use is particularly necessary to improve public health or promote the sound upbringing of children and it is difficult to obtain the consent of the person whose information is to be used; or
4. （4）When the use is necessary to cooperate with a state agency, a local government or any person entrusted by the agency or government with administrative affairs, in performing the administrative affairs provided by laws and regulations, and the performance of such administrative affairs is likely to be hindered if we obtain the consent of the person whose information is to be used.

4．We may change the purpose of use of personal information to the extent reasonably deemed relevant to the original purpose of use. When we change the purpose of use, we will make public the purpose so changed in this Policy, except as otherwise provided for in laws and regulations.

1．We will legally and properly obtain personal information and not obtain any such information by fraudulent or other wrongful means.

2．Personal information obtained via this Website will be encrypted using SSL and sent to a server.

3．Except as otherwise provided for in laws and regulations, we shall not obtain personal information requiring special care without the prior consent of the person whose information is to be obtained.

4．We will obtain personal information only to the minimum extent necessary to achieve our purpose of use. We will also collect personal information through means such as questionnaires only to the extent necessary to obtain the results to be collected.

5．Notwithstanding the provisions of the preceding Chapter III, when we enter into an agreement with a person and on that occasion, obtain the person's personal information stated in the agreement or other documents (including electromagnetic records; hereinafter the same shall apply in this paragraph), or otherwise when we obtain a person's personal information stated in writing directly from the person, we will clearly explain to such person the purpose of use of the information in advance. However, if it is urgently necessary to protect the life, body or property of any person or if it is provided for in laws and regulations, we may not clearly explain the purpose of use.

1．We may outsource to external business operators any services such as procedural, research or public relations services in the course of our business activities. When we outsource to an external business operator all or part of services handling personal data, we will establish the criteria for selecting an outsourcer from among business operators that are deemed to be able to properly and securely handle such data, and then we will select according to the criteria and enter into an appropriate outsourcing agreement with the outsourcer.

2．When we outsource all or part of services handling personal data, we will exercise necessary and appropriate supervision over the outsourcer to ensure the security control of the personal data for which the handling has been outsourced.

1. （1）When the provision is based on laws and regulations;
   
2. （2）When the provision is necessary to protect the life, body or property of any person and it is difficult to obtain the consent of the data subject;
   
3. （3）When the provision is particularly necessary to improve public health or promote the sound upbringing of children and it is difficult to obtain the consent of the data subject; or
   
4. （4）When the provision is necessary to cooperate with a state agency, a local government or any person entrusted by the agency or government with administrative affairs, in performing the administrative affairs provided by laws and regulations, and the performance of such administrative affairs is likely to be hindered if we obtain the consent of the data subject.

1．The following personal data shall be retained by us:

1. （1）Customer list file;
   
2. （2）File of emails received and sent;
   
3. （3）Contact information file (personal data of persons who have contacted us and exchanged business cards with us); and
   
4. （4）Purchase history file.

2．The business operator retaining such data shall be Innophys Co., Ltd.

3．Purpose of use of retained personal data

1. Disclosure of retained personal data to the data subject
A data subject may request the disclosure of the data subject's personal data retained by us. However, we may not disclose retained personal data in whole or in part in any of the following cases:

1. （1）When the disclosure is likely to damage the life, body, property or other rights or interests of the data subject or a third party;
   
2. （2）When the disclosure is likely to significantly hinder the proper conduct of our business; or
   
3. （3）When the disclosure results in a violation of other laws and regulations.

2．Correction, etc., of retained personal data
If a data subject considers that the content of the data subject's personal data retained by us is not true, the data subject may make a request for correction, addition or deletion (hereinafter referred to as the "Correction, etc.") of such retained personal data. However, as a result of the necessary investigation conducted by us without delay, if the content of the data is not incorrect or we determine that the Correction, etc., is not necessary for the achievement of the purpose of use, we may not make the Correction, etc.

3．Suspension of use, etc. of retained personal data
If a data subject's personal data retained by us is handled beyond the scope necessary to achieve the purpose of use, obtained by fraudulent or other wrongful means, or provided to third parties without the consent of the data subject or other justifiable grounds, the data subject may make a request for suspension of use or erasure (hereinafter referred to as the "Suspension of Use, etc.") of such retained personal data. However, if a large amount of expenses are required for the Suspension of Use, etc., or it is difficult to carry out the Suspension of Use, etc., we may not carry out the Suspension of Use, etc., and take alternative measures.

4．Procedures for disclosure, etc.
A data subject who requests the disclosure, Correction, etc., or Suspension of Use, etc., of retained personal data shall make the request to the following point of contact for requesting disclosure, etc., using the form provided by us. At that time, please also present any document by which the data subject can be identified.

5．We are making public the purpose of use of retained personal data, and accordingly, we will not individually deal with a request for disclosure.

• （1）Request form for disclosure, etc., of the retained personal data
  Matters required to be stated
  (i) Name of the data subject and seal identical to such name affixed
  (ii) Address of the data subject
  (iii) Classification of the identity verification document
  (iv) Requested matter
  (v) Reasons for the request: In cases of a request for disclosure, state information on the data subject who is requesting disclosure and specify the time of provision to us (as far as possible); in cases of a request for the Correction, etc., state accurate information on the Correction, etc.; and in cases of a request for the Suspension of Use, etc., the reasons for the request
  (vi) Name of the agent and seal identical to such name affixed
  (vii) Address of the agent The above items (vi) and (vii) are not required in cases of a request by the data subject.
  
• （2）Identity verification document (an original copy of the data subject's resident card, or a copy of the data subject's driver's license, passport or certificate of the insured person of health insurance)
  
• （3）Return envelope (with the address that is stated on the identity verification document, such as the data subject's resident card)
  
• （4）In cases of a request by an agent, a document certifying proxy (a certified copy of the family register in cases of a statutory agent, or a power of attorney in cases of any agent)

1. We will continuously examine, review and improve the handling of personal information by us to put the above clauses into practice.

2. We will review this Policy from time to time to properly handle personal information, and on modifying this Policy, we will promptly make the modified Policy public.