In view of the importance of protecting personal information, EXYOSE Inc. (hereinafter referred to as "EXYOSE") complies with the "EU General Data Protection Regulation (GDPR)" and related laws (hereinafter referred to as "Laws"), properly handles personal information provided by customers located within the European Economic Area (EEA), and strives to protect customer privacy.
Please read this GDPR Privacy Policy to the end before using the websites or various services provided by EXYOSE.
Personal information refers to address, name, telephone number, email address, and other information that can identify a customer as a specific individual (including those corresponding to "Personal Data" defined in GDPR Article 4).
Collection of Personal InformationEXYOSE may collect the following personal information from customers.
■ Name, address, date of birth, telephone number, email address, occupation, age, username
■ Access history information such as IP address and Cookie information associated with access to the website
■ Purchase information, inquiry content, customer account information, order and contract information, delivery details, billing information, financial institution account information, transaction and communication history, and information regarding transactions such as interactions on EXYOSE's website
■ Device unique identification information and location information
EXYOSE collects personal information from customers mainly in the following cases. The purposes of use of collected personal information and their legal bases are as follows.
■ Registration procedures and provision of services in various services (Performance of Contract)
■ Confirmation of orders for products and paid services, payment settlement, and product shipping (Performance of Contract)
■ When EXYOSE provides services jointly with business partners and the customer uses said services, to provide the minimum necessary user information to the business partner for the provision of the service (Performance of Contract)
■ Job application procedures, hiring decisions, and information on job seminars (Legitimate Interests)
■ Providing recommended information and information on new products and services based on various histories (Legitimate Interests)
■ Marketing research, planning, and research and development (Legitimate Interests)
■ Development of new products and services (Legitimate Interests)
■ Improving convenience, such as customizing advertisements and content that customers see on the website or services for each customer (Legitimate Interests)
■ Provision of services based on visits, purchases, browsing, action history, or location information, and understanding and analysis of usage status (Legitimate Interests)
■ Creating statistical materials that cannot identify individuals by aggregating personal information for marketing, development of new products and services, and improvement of our service quality (Legitimate Interests)
EXYOSE may share personal information with the following business partners and third parties.
■ Service Providers
EXYOSE may use third parties such as marketing companies and IT service providers to conduct business operations. In such cases, sharing of personal information may be necessary to provide services. The shared personal information will be used in accordance with the original purpose under the instructions of EXYOSE.
■ Legal Obligations
In accordance with legal provisions, EXYOSE may disclose personal information to public authorities related to law enforcement in response to legal requirements, court orders, or requests from government or law enforcement agencies (including requirements related to national security or law enforcement measures, and requests from government agencies and courts in the countries where we operate). Where permitted by law, we may disclose personal information to third parties (including legal counsel) as necessary to establish, pursue, or defend legal claims, exercise rights, protect our property or the rights, property, or safety of others, or to support external audit, compliance, and corporate governance functions.
If EXYOSE needs to internationally transfer personal information of customers within the EEA to a third country outside the EEA, it will take appropriate protective measures required for international data transfer.
Important NoticeWebsites on the Internet operated by EXYOSE may contain links to external sites. Please note that EXYOSE cannot be held responsible for the handling of your personal information on such external websites. In addition, third parties other than us may independently collect personal information through advertisements, etc. Please note that EXYOSE cannot be held responsible for the handling of your personal information in such cases either.
Rights of Customers within the EEACustomers within the EEA have the following rights regarding their personal information held by EXYOSE.
■ Right to access their own personal data.
■ Right to request correction of inaccurate personal data.
■ Right to request deletion of their own personal data.
■ Right to restrict processing of their own personal data.
■ Right to receive their own personal data in a structured, commonly used, and machine-readable format.
■ Right to object to the processing of their own personal data.
■ Right to withdraw consent related to their own personal data at any time, if processing is based on consent.
We accept enquiries regarding opinions, questions, and complaints about your personal information via the form below.
After receiving your request, EXYOSE will ask you to present documents necessary to verify your identity as specified by EXYOSE to confirm that the request is from you. EXYOSE will respond to your request upon completion of this verification. If the request is made by a representative other than yourself, you must submit documents proving the right of representation.
Contact Information of the AdministratorEXYOSE has appointed a Personal Information Protection Administrator to appropriately deal with issues regarding the protection of personal information. The contact information of the Personal Information Protection Administrator is as follows:
337-13 Ishiharadacho, Kashihara, Nara, 634-0014, JAPAN.
EXYOSE Inc. Personal Information Inquiry Desk
Handling of Personal Data of Persons Under 16 Years of AgePlease note that for the provision of personal data of persons under 16 years of age, we may obtain the consent of a parent or guardian if necessary.
Retention PeriodEXYOSE will not retain personal information beyond the purpose for which it was obtained or the requirements of applicable laws.
CookiesLike many other websites, EXYOSE's website may use Cookies and other automatic information collection programs, subject to consent where necessary.
Cookies are a function that allows user information to be saved to the user's browser or hard drive through EXYOSE's website. By using Cookies, the trouble of manually re-entering information saved on the hard drive can be saved. Also, Cookies are useful for improving the convenience of the website by recording when and how EXYOSE's website was used. You can disable the Cookie function depending on your browser settings, but some specific functions of EXYOSE's website may not work.
EXYOSE's website may use IP addresses, analyze trends, administer EXYOSE's website, track user movements and online activities, and collect demographic information such as age and gender for the same purposes as above.
EXYOSE may access and set Cookies using Web beacons on the website. We may also collect information on how users transition through the website. Information provided by Web beacons includes the computer's IP address, the browser used, and the time the website was viewed. It also includes information on when emails or newsletters were opened using Web beacons.
For details on how to use Cookies, please refer to the
Cookie Policy.
OthersThe Japanese version of this GDPR Privacy Policy shall be the governing text.
Please note that if you do not provide your own information in an up-to-date and accurate manner, you may not be able to receive appropriate services.
You have the right to lodge a complaint with the data protection authority having jurisdiction over your place of residence regarding the processing of personal information related to you.
Changes to Privacy PolicyEXYOSE may change or update this GDPR Privacy Policy without limiting the individual rights described in the Privacy Policy. If EXYOSE changes this GDPR Privacy Policy, we will state the update date.
End
1 December 2025
EXYOSE Inc.
