(1) Collecting personal information
The Company shall collect personal information through lawful and appropriate means. When asking a user to provide personal information, we shall first notify the user of the purpose of collecting the information and the details of its use. The Company shall collect personal information to the extent necessary to achieve such purposes within the scope of its proper business activities.

(2) Use and joint use of personal information
Personal information entrusted to the Company shall be used within the scope of the purpose of its collection, to the extent that the provider of the personal information has consented. With regard to the purposes of use, matters necessary to achieve the purposes of our business within our proper business activities and within the following ""Scope of purposes of use", shall be set up as the purposes of use.

● Scope of purposes of use
･ For business communications
･ To provide information on products and services offered by the Company
･ To respond to inquiries, requests, etc. from users
･ For other purposes of which users were notified and to which they have consented in advance

● Use for other than the above purposes
If there is a need to use users' personal information for purposes other than the above, we will obtain the consent of the users to such use, except where such use is authorized by laws or regulations.

(3) Provision of personal information to third parties
The Company will not provide users' personal information to third parties without the users' consent, except in special cases such as when the Company is obligated to provide such information under laws or other rules applying to personal information.

(4) Procedures for disclosure, correction, etc. of personal information
Users who desire to inquire into, correct, or delete personal information they have provided are requested to direct such requests to the contact point identified below. We will disclose, correct, or delete the user's personal information within a reasonable timeframe after first verifying the identity of the requesting user, except in cases such as when doing so would markedly impede the Company's business operations.

(5) Compliance with laws, regulations, and rules on protection of personal information
The Company will comply with laws, regulations, and standards on personal information that apply to the personal information it holds. In addition, this Policy shall be interpreted in accordance with the laws and other standards of Japan. This Policy establishes basic policies on the Company's handling of personal information. In accordance with this Policy, the Company shall strive to protect personal information pursuant to the Act on Protection of Personal Information and other laws, regulations, and standards.

(6) Security measures for personal information
The Company shall maintain management structures and implement appropriate security measures to protect personal information from improper access, loss, damage, unauthorized alteration, leakage, and other threats, and to maintain its accuracy and security. In addition to restricting access by outsiders inside offices where personal information is handled and providing educational and awareness-raising activities for all executives, employees, and other personnel regarding the Company's protection of personal information, a person responsible for management shall be appointed to manage personal information appropriately.

(7) Continual improvement
The Company shall continually review and improve its efforts to protect personal information, so that we can respond to amendments to applicable laws and regulations in Japan and changes in methods of handling personal information and related environments.

July 1, 2021
CaRepo Corporation
Yoichiro Akasu, Representative Director