SORAIRO Visa and Accounting

Privacy Policy

Seido Co., Ltd. (hereinafter referred to as "our company") recognizes the importance of protecting personal information and strives to properly handle and protect such information in accordance with the Act on the Protection of Personal Information (hereinafter referred to as the "Personal Information Protection Act") and the following privacy policy (hereinafter referred to as "this Privacy Policy"). Unless otherwise specified in this Privacy Policy, the definitions of terms used in this Privacy Policy are as defined in the Personal Information Protection Act.

1. Definition of Personal Information

In this Privacy Policy, "personal information" means personal information as defined in Article 2, Paragraph 1 of the Personal Information Protection Act.

2. Purpose of Use of Personal Information

Our company will use personal information for the following purposes.

1. To provide our services, products, etc. (hereinafter referred to as "Our Services, etc.").

2. To provide information about Our Services, etc. and respond to inquiries, etc.

3. To provide information about Our Services, etc.

4. To respond to behavior that violates our terms, policies, etc. (hereinafter referred to as "Terms, etc.") regarding Our Services, etc.

5. To notify you of changes to the terms, etc. regarding Our Services, etc.

6. To use this information to improve Our Services, etc. and develop new services, products, etc.

7. To understand and analyze acquired browsing history, behavioral history, purchase history, etc. information to improve Our Services, add features, and develop and advertise new products and services tailored to your interests and preferences.

8. For employment management and internal procedures (regarding personal information of executives and employees).

9. For shareholder management and procedures under the Companies Act and other laws and regulations (regarding personal information of shareholders, stock acquisition rights holders, etc.).

10. To create statistical data related to Our Services, etc., processed into a format that does not identify individuals.

11. To provide information (including advertising) from our company.

12. For other purposes incidental to the above purposes of use.

3. Changes to the Purpose of Use of Personal Information

We may change the purpose of use of personal information to the extent that it is reasonably deemed relevant. If we make such changes, we will notify or publicly announce the individual to whom the personal information relates (hereinafter referred to as the "person").

4. Restrictions on the Use of Personal Information

Except as permitted by the Personal Information Protection Act or other laws and regulations, we will not handle personal information beyond the scope necessary to achieve the purpose of use without the consent of the individual. However, this does not apply in the following cases.

1. When required by law

2. When necessary to protect a person's life, body, or property, and it is difficult to obtain the individual's consent

3. When particularly necessary to improve public health or promote the healthy development of children, and it is difficult to obtain the individual's consent

4. When cooperation is required for a national or local government agency, or a party commissioned by them, to carry out duties prescribed by law, and obtaining the individual's consent would likely impede the performance of such duties

5. When personal data is provided to an academic research institution, etc., and the academic research institution, etc., needs to use the personal data for academic research purposes (including cases where part of the purpose of using the personal data is academic research, excluding cases where there is a risk of unjustly infringing an individual's rights and interests).

5. Appropriate Acquisition of Personal Information

5.1

We will acquire personal information appropriately and will not acquire it through false or other fraudulent means.

5.2

We will not acquire sensitive personal information (as defined in Article 2, Paragraph 3 of the Personal Information Protection Act) without the individual's prior consent, except in the following cases:

1. Cases falling under any of Paragraph 4, Items 1 to 4.

2. When acquiring sensitive personal information from an academic research institution, etc., and when it is necessary to acquire such sensitive personal information for academic research purposes (including cases where academic research purposes are a part of the purpose of acquiring such sensitive personal information, excluding cases where there is a risk of unjustly infringing an individual's rights and interests) (limited to cases where our company and the academic research institution, etc. are conducting academic research jointly).

3. When such sensitive personal information has been made public by the individual, a national government agency, a local government, an entity listed in any of the items of Article 57, Paragraph 1 of the Personal Information Protection Act, or another entity specified by the Personal Information Protection Commission Rules.

4. When sensitive personal information is acquired by visually inspecting or photographing the individual, and its appearance is obvious.

5. When sensitive personal information is provided in a manner that does not constitute a third-party provision pursuant to the proviso of Paragraph 7.1.

6. Security Management of Personal Information

We will provide necessary and appropriate supervision to our employees to ensure the security of personal information against risks such as loss, destruction, falsification, and leakage. Furthermore, if we outsource all or part of the handling of personal information to a third party, we will provide necessary and appropriate supervision to ensure that the outsourced party manages personal information safely. Our safety management measures are outlined below.

1. We comply with the Personal Information Protection Act and related laws and regulations, as well as applicable guidelines, and will accept questions, consultations, and complaints regarding the handling of personal data at the contact point specified in Section 15.

2. We will define the handling methods, responsible persons/staff, and their duties for each stage of data collection, use, storage, provision, deletion/disposal, etc.

3. We will appoint a person responsible for handling personal data, and that person will verify that personal data is being handled in accordance with the established handling methods. We will also establish a system for employees to report to the responsible person if they become aware of any actual or potential violations of laws, regulations, or internal rules. Furthermore, the responsible person will regularly inspect the status of personal data handling.

4. We will provide employees with necessary training on important points to note regarding the handling of personal data. Furthermore, we will include matters related to confidentiality of personal data in our work rules.

5. We will implement measures to ensure that personal data cannot be easily accessed by anyone other than employees authorized to handle it or the person themselves. Furthermore, to prevent theft or loss of devices, electronic media, documents, etc. that handle personal data, electronic media on which personal data is recorded, or documents containing personal data, will be stored in lockable cabinets, filing cabinets, etc. Furthermore, if the information system that handles personal data is operated solely with devices, such devices will be secured with security wire, etc. In addition to the above, we will take necessary measures to prevent theft or loss of devices, electronic media, documents, etc. that handle personal data, and will implement measures to prevent personal data from being easily identified when such devices, electronic media, etc. are carried, including when moving within the workplace.

6. We will clarify the devices that can handle personal data and the employees who handle them, and prevent unnecessary access to personal data. We will implement mechanisms to protect devices that handle personal data from unauthorized external access or malware.

7. A responsible person will confirm the deletion of personal data or the disposal of devices, electronic media, etc. on which personal data is recorded.

7. Provision to Third Parties

7.1

Except in cases falling under any of the items in Section 4, we will not provide personal information to third parties without the prior consent of the individual. However, the following cases do not constitute provision to third parties as defined above.

1. When personal information is provided in connection with the Company outsourcing all or part of its handling of personal information to the extent necessary to achieve the purpose of use.

2. When personal information is provided in connection with business succession due to a merger or other reason.

3. When personal information is jointly used in accordance with the provisions of the Personal Information Protection Act.

7.2

Notwithstanding the provisions of Section 7.1, except in cases falling under any of the items of Section 4, when providing personal information to a third party (excluding those who have established a system that complies with the standards specified in the Personal Information Protection Commission Rules pursuant to Article 28 of the Personal Information Protection Act) in a foreign country (excluding countries designated by the Personal Information Protection Commission Rules pursuant to Article 28 of the Personal Information Protection Act), the Company will obtain the individual's prior consent to the provision to a third party in a foreign country and take other measures pursuant to the Personal Information Protection Act.

7.3

When personal information is provided to a third party, the Company will create and maintain records in accordance with Article 29 of the Personal Information Protection Act.

7.4

When receiving personal information from a third party, we will conduct necessary verifications in accordance with Article 30 of the Personal Information Protection Act and will create and maintain records of such verifications.

7.5

Notwithstanding the provisions of Section 7.1, we may provide user information to affiliated companies pursuant to the terms of use and other special provisions of our services.

8. Personal Information

1. When obtaining personal information (as defined in the Personal Information Protection Act; the same applies hereinafter) from a third party and using it as personal data, we will take measures such as obtaining the individual's consent to our obtaining such information as personal data, and will use it within the scope of the purposes of use set forth in Section 2.

2. When providing personal information to a third party, if it is expected that the third party will use the personal information as personal data, we will confirm that the third party has obtained the individual's consent to obtaining the personal information as personal data in advance.

9. Disclosure of Personal Information

When an individual requests disclosure of their retained personal data or records of third-party provision pursuant to the Personal Information Protection Act, we will disclose the information to them without delay after confirming that the request is from them (if the retained personal data or records of third-party provision do not exist, we will notify them of this). However, this does not apply if we are not obligated to disclose the information under the Personal Information Protection Act or other laws and regulations.

10. Correction, etc. of Personal Information

If an individual requests us to correct, add, or delete (hereinafter referred to as "Correction, etc.") their personal information pursuant to the Personal Information Protection Act because the personal information is inaccurate, we will confirm that the request is from the individual, conduct any necessary investigation without delay to the extent necessary to achieve the purpose of use, and correct, etc. the personal information based on the results. If an individual requests us to correct, add, or delete (hereinafter referred to as "Correction, etc.") their personal information pursuant to the Personal Information Protection Act because the personal information is inaccurate, we will confirm that the request is from the individual, conduct any necessary investigation without delay to the extent necessary to achieve the purpose of use, and correct, etc. the personal information based on the results, and notify the individual of the correction, etc. (If we decide not to make the correction, etc., we will notify the individual of the correction, etc.). However, this does not apply if we are not obligated to make the correction, etc. under the Personal Information Protection Act or other laws and regulations.

11. Suspension of Use of Personal Information, etc.

If an individual requests the suspension of use or deletion (hereinafter referred to as "suspension of use, etc.") of their personal information in accordance with the Personal Information Protection Act on the grounds that their personal information is being handled beyond the scope of the purpose of use previously announced or that it has been obtained by false or other wrongful means, or if the Company believes that their personal information has been provided to a third party without their consent, the Company will suspend or delete such use.If we are requested to stop providing personal information (hereinafter referred to as "suspension of provision") pursuant to the provisions of the Personal Information Protection Act for the following reasons, and if it is determined that the request is justified, we will, after confirming that the request is made by the individual himself, suspend the use, etc. of the personal information or suspend the provision without delay and notify the individual to that effect. However, this does not apply if we are not obligated to suspend the use, etc. or suspend the provision under the Personal Information Protection Act or other laws and regulations. If an individual requests us to suspend use, etc. or provision of their personal information pursuant to the Personal Information Protection Act for reasons such as the fact that we no longer need to use their personal information, the occurrence of an incident related to the leakage, loss, or damage of personal data as stipulated in the Personal Information Protection Act, or other incident related to ensuring the security of personal data that identifies the individual and is specified in the rules of the Personal Information Protection Commission as posing a high risk to the rights and interests of individuals, or the fact that the handling of retained personal data that identifies the individual may harm the individual's rights or legitimate interests, and if we find that the request is justified, we will confirm that the request is made by the individual themselves, and then suspend use, etc. or provision of the personal information without delay and notify the individual to that effect. However, this does not apply if we are not obligated to suspend use, etc. or provision under the Personal Information Protection Act or other laws and regulations.

12. Handling of Anonymously Processed Information

12.1

When creating anonymously processed information (meaning information as defined in Article 2, Paragraph 6 of the Act, and limited to information constituting an anonymously processed information database, etc., as defined in Article 16, Paragraph 6 of the Act; the same applies hereinafter), we will process personal information in accordance with the standards set forth in the Personal Information Protection Commission's rules.

12.2

When creating anonymously processed information, we will take measures to ensure its security in accordance with the standards set forth in the Personal Information Protection Commission's rules.

12.3

When creating anonymously processed information, we will publicly disclose the items of personal information contained in the anonymously processed information in accordance with the Personal Information Protection Commission's rules.

12.4

When providing anonymously processed information (including information created by us and information provided by third parties; the same applies hereinafter unless otherwise specified) to a third party, we will publicly announce in advance the types of personal information contained in the anonymously processed information provided to third parties and the method of providing such information, pursuant to the rules of the Personal Information Protection Commission, and will clearly inform such third parties that the information provided is anonymously processed.

12.5

When handling anonymously processed information, we will not (1) compare the anonymously processed information with other information, or (2) obtain information regarding descriptions, etc., or individual identification codes deleted from such personal information, or the method of processing performed pursuant to Article 43, Paragraph 1 of the Personal Information Protection Act, in order to identify the individual(s) related to the personal information used to create the anonymously processed information ((2) applies only to anonymously processed information provided by third parties).

12.6

We will take necessary and appropriate measures for the secure management of anonymously processed information, handle complaints regarding the creation or other handling of anonymously processed information, and take other necessary measures to ensure the proper handling of anonymously processed information, and will strive to make the details of such measures public.

13. Use of Cookies and Other Technologies

Our services may use cookies and similar technologies. These technologies help us understand the usage status of our services and contribute to improving our services. Users who wish to disable cookies may do so by changing their web browser settings. However, disabling cookies may prevent you from using some of the features of our services.

14. Use of External Services

Our services use the following services for the following purposes. Please refer to the respective providers' websites for their privacy policies, etc.

1) Understanding User Visits

We may use the access analysis services "Google Analytics" and "Google Analytics Advertising Features" provided by Google.

The features used are as follows.

・ Google Analytics Remarketing

・ Google Display Network Impression Report

・ Google Analytics User Demographics and Interest Category Report

15. Name, Address, and Name of Representative of Personal Information Handling Business

Seido Co., Ltd.

Address: 2F, 2-4-10 Kojimachi, Chiyoda-ku, Tokyo

Representative Director: Seo Jong-seok

16. Contact Information

For requests for disclosure, opinions, questions, complaints, or other inquiries regarding the handling of personal information, please contact the following by phone or email.

Personal Information Inquiry Desk

Telephone Number: 03-6877-8052

Email: xxxxxx@xxxxxx

17. Continuous Improvement

We will appropriately review our operations regarding the handling of personal information, strive for continuous improvement, and may modify this Privacy Policy as necessary.

Established December 25, 2025