Privacy Policy

J-One Logistics Inc. (hereinafter, the “Company”) recognizes the importance of protecting personal information and complies with the Act on the Protection of Personal Information of Japan (hereinafter, the “APPI”). The Company endeavors to handle and protect personal information appropriately in accordance with the following privacy policy (hereinafter, this “Privacy Policy”). Unless otherwise provided herein, the definitions of terms used in this Privacy Policy shall be as provided in the APPI.

1. Definition of Personal Information

In this Privacy Policy, “Personal Information” means personal information as defined in Article 2, Paragraph 1 of the APPI.

2. Purposes of Use of Personal Information

The Company will use Personal Information for the following purposes:

• For the provision of the Company’s services and products (collectively, the “Company Services, etc.”);

• For providing guidance on, and responding to inquiries regarding, the Company Services, etc.;

• For providing notices and information regarding the Company Services, etc.;

• For responding to acts that violate the Company’s terms, policies and other rules (collectively, the “Terms, etc.”) in relation to the Company Services, etc.;

• For notifying changes to the Terms, etc. related to the Company Services, etc.;

• For improving the Company Services, etc. and developing new services and products;

• For grasping and analyzing obtained information such as browsing history, behavioral history and purchase history in order to implement improvements and feature additions to the Company Services, and to develop and advertise new products and services tailored to interests and preferences;

• For employment management and internal procedures (with respect to personal information of officers and employees);

• For shareholder management and procedures under the Companies Act and other applicable laws and regulations (with respect to personal information of shareholders, stock acquisition right holders, etc.);

• For creating statistical data processed into a format that does not identify individuals, in connection with the Company Services, etc.;

• For providing information from the Company (including advertisements); and

• For other purposes incidental to the above purposes of use.

3. Changes to the Purposes of Use of Personal Information

The Company may change the purposes of use of Personal Information within a scope reasonably recognized as having relevance. In the event of such changes, the Company will notify the individual who is the subject of the Personal Information (hereinafter, the “Individual”) or make a public announcement.

4. Restrictions on the Use of Personal Information

Except as permitted under the APPI and other applicable laws and regulations, the Company will not handle Personal Information, without the Individual’s consent, beyond the scope necessary to achieve the purposes of use. However, this shall not apply in the following cases:

• When required by laws and regulations;

• When it is necessary for the protection of the life, body, or property of a person and it is difficult to obtain the Individual’s consent;

• When it is particularly necessary for improving public health or promoting the sound growth of children and it is difficult to obtain the Individual’s consent;

• When it is necessary to cooperate with a national government organ, a local government, or a person entrusted by them in performing affairs prescribed by laws and regulations, and obtaining the Individual’s consent may impede the performance of such affairs; or

• When providing personal data to an academic research institution, etc., and such institution needs to handle the personal data for academic research purposes (including cases where part of the purpose of handling the personal data is for academic research; excluding cases where there is a risk of unduly infringing the rights and interests of individuals).

5. Proper Acquisition of Personal Information

5.1

The Company will acquire Personal Information properly and will not acquire it by deception or other wrongful means.

5.2

Except in the following cases, the Company will not acquire Sensitive Personal Information (meaning the information defined in Article 2, Paragraph 3 of the APPI) without obtaining the Individual’s prior consent:

• When any of Items (1) through (4) of Section 4 applies;

• When acquiring Sensitive Personal Information from an academic research institution, etc., and it is necessary to acquire such Sensitive Personal Information for academic research purposes (including cases where part of the purpose of acquisition is for academic research; excluding cases where there is a risk of unduly infringing the rights and interests of individuals), and only when the Company and such academic research institution, etc. jointly conduct academic research;

• When such Sensitive Personal Information has been made public by the Individual, a national government organ, a local government, a person listed in each item of Article 57, Paragraph 1 of the APPI, or a person specified by rules of the Personal Information Protection Commission;

• When acquiring, by visual observation or photographing the Individual, Sensitive Personal Information that is clearly apparent from the Individual’s external appearance; or

• When receiving the provision of Sensitive Personal Information in a manner that is deemed not to constitute a third-party provision pursuant to the proviso of Section 7.1 below.

6. Security Control Measures for Personal Information

The Company will take necessary and appropriate supervisory measures to ensure the secure management of Personal Information against risks such as loss, destruction, alteration, and leakage. When entrusting the handling of Personal Information in whole or in part, the Company will also take necessary and appropriate supervisory measures to ensure that the entrusted party securely manages the Personal Information.
An outline of the Company’s security control measures is as follows:

• The Company complies with the APPI and related laws, regulations, and applicable guidelines, and accepts questions, consultations, and complaints concerning the handling of personal data through the contact point set forth in Section 15.

• The Company establishes methods of handling, persons responsible and in charge, and their duties for each stage of acquisition, use, storage, provision, deletion, and disposal.

• A person responsible for handling personal data shall be appointed. The responsible person confirms that personal data is being handled in accordance with the established procedures. The Company also establishes a reporting and communication system whereby employees report to the responsible person any facts or potential violations of laws, regulations, or internal rules. Furthermore, the responsible person conducts regular inspections of the handling status of personal data.

• The Company provides necessary training to employees concerning precautions in handling personal data and includes confidentiality obligations regarding personal data in its employment regulations.

• The Company implements measures to ensure that only authorized employees can handle personal data, and that persons other than the Individual cannot easily access such data. The Company stores electronic media and documents containing personal data in lockable cabinets or document storage areas to prevent theft or loss. Where information systems handling personal data are operated solely on devices, such devices are physically secured with security wires. In addition, the Company takes necessary measures to prevent theft or loss of devices, electronic media, and documents handling personal data and ensures that personal data cannot be easily identified when such items are carried, including within business premises.

• The Company identifies devices and personnel authorized to handle personal data and prevents unnecessary access. It also introduces mechanisms to protect devices handling personal data from unauthorized access and malicious software from outside the Company.

• When deleting personal data or disposing of devices or electronic media containing personal data, the responsible person confirms that such deletion or disposal has been properly conducted.

7. Provision to Third Parties

7.1

Except where any of the items of Section 4 apply, the Company will not provide Personal Information to third parties without the prior consent of the Individual. However, the following cases do not constitute provision to a third party as defined above:

• When the Company provides Personal Information in connection with outsourcing all or part of its handling of Personal Information within the scope necessary to achieve the purposes of use;

• When Personal Information is provided as a result of succession of business due to a merger or other reason; or

• When Personal Information is jointly used in accordance with the provisions of the APPI.

7.2

Notwithstanding Section 7.1, except where any of the items of Section 4 apply, when providing Personal Information to a third party located in a foreign country (excluding those designated by rules of the Personal Information Protection Commission under Article 28 of the APPI, and excluding those with systems conforming to standards specified by such rules), the Company will obtain the Individual’s prior consent for such provision or take other measures required by the APPI.

7.3

When the Company provides Personal Information to a third party, it will prepare and retain records in accordance with Article 29 of the APPI.

7.4

When the Company receives Personal Information from a third party, it will make necessary confirmations in accordance with Article 30 of the APPI and prepare and retain records of such confirmations.

7.5

Notwithstanding Section 7.1, the Company may provide users’ information to partner companies in accordance with the terms of use or special agreements of the Company Services.

8. Personally Related Information

When the Company obtains personally related information (as defined under the APPI) from a third party and uses it as personal data, the Company will obtain the Individual’s consent in advance and use it only within the scope of the purposes set forth in Section 2.
When the Company provides personally related information to a third party, and it is anticipated that such third party will use the information as personal data, the Company will confirm that the third party has obtained the Individual’s prior consent for such acquisition.

9. Disclosure of Personal Information

When the Individual requests disclosure of retained personal data or records of provision to third parties under the APPI, the Company will confirm that the request is made by the Individual and will disclose the relevant data without delay (or notify the Individual if such data or records do not exist). However, this does not apply when the Company has no obligation to disclose under the APPI or other laws and regulations.

10. Correction, etc. of Personal Information

When the Individual requests correction, addition, or deletion (“Correction, etc.”) of Personal Information under the APPI on the grounds that it is inaccurate, the Company will confirm that the request is made by the Individual, conduct necessary investigation within the scope required to achieve the purposes of use, and based on the results, promptly make the Correction, etc., and notify the Individual of the outcome (or notify the Individual if the Company decides not to make the Correction, etc.). However, this does not apply when the Company has no obligation to make such Correction, etc. under the APPI or other laws and regulations.

11. Suspension of Use, etc. of Personal Information

If the Individual requests the suspension of use or deletion (“Suspension of Use, etc.”) of Personal Information under the APPI on the grounds that it is being handled beyond the scope of the publicly announced purposes of use or that it was acquired by deception or other wrongful means, or requests the suspension of provision (“Suspension of Provision”) on the grounds that it has been provided to third parties without consent, and if such request is found to be justified, the Company will confirm that the request is made by the Individual, promptly implement the Suspension of Use, etc. or Suspension of Provision, and notify the Individual thereof. However, this does not apply where the Company has no obligation to implement such measures under the APPI or other laws and regulations.

Furthermore, if the Individual requests the Suspension of Use, etc. or Suspension of Provision of retained personal data on the grounds that (1) the Company no longer needs to use such data, (2) a situation defined by the rules of the Personal Information Protection Commission has occurred, such as a leakage, loss, or damage of personal data likely to harm the rights and interests of individuals, or (3) the Individual’s rights or legitimate interests are likely to be harmed by the handling of retained personal data, and if such request is found to be justified, the Company will confirm that the request is made by the Individual, promptly implement the Suspension of Use, etc. or Suspension of Provision, and notify the Individual thereof. However, this does not apply where the Company has no obligation to do so under the APPI or other laws and regulations.

12. Handling of Anonymously Processed Information

12.1

When creating anonymously processed information (as defined in Article 2, Paragraph 6 of the APPI and limited to those constituting an anonymously processed information database, etc. as set forth in Article 16, Paragraph 6 of the APPI), the Company will process personal information in accordance with the standards prescribed by the rules of the Personal Information Protection Commission.

12.2

When creating anonymously processed information, the Company will take necessary measures for security management in accordance with the standards prescribed by the rules of the Personal Information Protection Commission.

12.3

When creating anonymously processed information, the Company will disclose the items of information relating to individuals included in such anonymously processed information in accordance with the standards prescribed by the rules of the Personal Information Protection Commission.

12.4

When providing anonymously processed information (including those created by the Company and those provided by third parties) to third parties, the Company will, in accordance with the standards prescribed by the rules of the Personal Information Protection Commission, publicly announce the items of information relating to individuals included in such anonymously processed information and the method of provision in advance, and will clearly indicate to the recipient that the information provided constitutes anonymously processed information.

12.5

When handling anonymously processed information, the Company will not (1) collate such information with other information or (2) acquire deleted descriptions, individual identification codes, or information on processing methods under Article 43, Paragraph 1 of the APPI, for the purpose of identifying individuals to whom the personal information used for creation of the anonymously processed information pertains. (Item (2) applies only to anonymously processed information provided by third parties.)

12.6

The Company will take necessary and appropriate measures to ensure the secure management of anonymously processed information, handle complaints regarding such information, and take other necessary steps to ensure its proper handling. The Company will also endeavor to publicly disclose the contents of such measures.

13. Use of Cookies and Other Technologies

The Company’s services may use cookies and similar technologies. These technologies help the Company understand how its services are used and contribute to improving service quality. Users who wish to disable cookies may change the settings in their web browsers. However, please note that disabling cookies may result in the inability to use certain features of the Company’s services.

14. Use of External Services

The Company’s services may use the following external services for the purposes described below. For each service’s privacy policy and other details, please refer to the respective provider’s website.

(1) Understanding user visit status

The Company may use “Google Analytics” and “Google Analytics Advertising Features,” provided by Google LLC. The following functions may be utilized:

• Google Analytics Remarketing

• Google Display Network Impression Reporting

• Google Analytics Demographics and Interest Reports

15. Name, Address, and Representative of the Business Operator Handling Personal Information

J-One Logistics Inc.
Address: Pacific Century Place Marunouchi 13F, 1-11-1 Marunouchi, Chiyoda-ku, Tokyo 100-6213, Japan
Representative Director: Junichi Watanabe

16. Contact Information

For requests for disclosure, opinions, questions, complaints, or other inquiries regarding the handling of Personal Information, please contact the following office by phone or email:

J-One Logistics Inc. – Personal Information Inquiry Desk
Phone: 080-5497-7878
E-mail: jun.watanabe@j-one-logistics.com
(Business hours: Weekdays 10:00 a.m. to 6:00 p.m.)

17. Continuous Improvement

The Company will review the operational status of the handling of Personal Information from time to time, strive for continuous improvement, and may revise this Privacy Policy as necessary.

Enacted on October 1, 2025