Privacy Policy

1. Purpose of Use of Personal Information

We will use personal information such as names, email addresses, and other information relating to individuals (hereinafter referred to as "Personal Information") provided by users within the scope necessary for the following purposes, and will not use such information for any other purposes without the consent of the individual.
① For the provision of our services
② For notifications regarding our services and information on related services
③ For information regarding events organized, co-organized, or sponsored by us
④ For requests for surveys conducted by us and for the development of better services
⑤ For responding to inquiries, document requests, and other requests
⑥ For other purposes for which prior consent has been obtained

2. Provision of Personal Information to Third Parties

We will not provide or entrust the handling of Personal Information entrusted to us to third parties, except in the following cases.
① When entrusting the handling of Personal Information within the scope necessary to achieve the purposes of use set forth in the preceding section
② When Personal Information is provided in connection with business succession due to merger or other reasons
③ When cooperation is required with a national government agency, local government, or a person entrusted by them to perform affairs prescribed by laws and regulations, and obtaining the consent of the individual would be likely to impede the performance of such affairs
④ Other cases permitted under the Act on the Protection of Personal Information and other applicable laws and regulations

3. Provision to Third Parties Located Abroad

When providing Personal Information to third parties located abroad in accordance with laws and regulations, we will take necessary measures such as providing information. We may also entrust the handling of Personal Information to third parties located abroad in accordance with laws and regulations pursuant to Section 2, item ①.

4. Disclosure of Personal Information

When a user requests disclosure of Personal Information in accordance with the Act on the Protection of Personal Information, we will, after confirming that the request is from the individual concerned, disclose the information to that individual without delay (or notify that such Personal Information does not exist). However, this does not apply when we are not obligated to disclose such information under the Act on the Protection of Personal Information or other applicable laws and regulations. Please note that a fee (1,000 yen per request) is charged for the disclosure of Personal Information.

5. Correction and Suspension of Use of Personal Information

1. When a user requests correction of the content of Personal Information on the grounds that it is not factual in accordance with the Act on the Protection of Personal Information, or requests suspension of use on the grounds that it is being handled beyond the scope of the publicly announced purposes of use or was collected through deception or other wrongful means in accordance with the Act on the Protection of Personal Information, we will, after confirming that the request is from the individual concerned, conduct necessary investigation without delay and, based on the results, correct or suspend the use of the Personal Information and notify the individual accordingly. If we decide not to make corrections or suspend use based on reasonable grounds, we will notify the individual of that decision.
2. When a user requests deletion of Personal Information and we determine that it is necessary to respond to such request, we will, after confirming that the request is from the individual concerned, delete the Personal Information. If we decide not to delete based on reasonable grounds, we will notify the individual of that decision.
3. The provisions of the preceding two paragraphs do not apply when we are not obligated to make corrections or suspend use under the Act on the Protection of Personal Information or other applicable laws and regulations.

6. Implementation of Security Control Measures

We implement necessary and appropriate security control measures to prevent unauthorized access, falsification, leakage, loss, or damage to Personal Information in our possession, such as the following. For details regarding security control measures, please contact us using the contact information in Section 7.

• Establishment of the scope of information collected for each plan and methods for handling such information
• Appointment of an ISMS officer and establishment of a reporting and communication system in the event of information leakage
• Regular education for employees regarding the handling of personal data, and establishment of provisions regarding confidentiality of personal data in work rules and confidentiality agreements with employees
• Restrictions on access to server rooms and measures to prevent employees without authorization from accessing personal data
• Encryption, use of serverless architecture, granting limited access privileges, etc.
• Establishment of confidentiality clauses in contracts with third parties
• Establishment of an ISMS committee and periodic review of security control measures by the ISMS committee

7. Contact

For opinions, questions, and other inquiries regarding the handling of Personal Information, please contact us at the following address.
(Contact)
info@microcms.io

8. Procedures for Changing the Privacy Policy

We will periodically review our operational handling of Personal Information and strive for continuous improvement, and may change this Policy as necessary. When changes are made, notification will be provided by posting on this website. However, when changes require the consent of the individual under laws and regulations, we will obtain such consent through the method prescribed by us.