Personal Information Protection Policy

We recognize our responsibility to protect all personal information handled by the Company. We respect the rights of individuals and comply with applicable laws, regulations, and guidelines concerning the protection of personal information.
To implement the following policies, we have established a Personal Information Protection Management System and continuously improve it by staying aware of advances in IT, evolving social expectations, and changes in our business environment.

1. 1. Purpose and Scope of Use
   We collect, use, and provide personal information only to the extent necessary for legitimate business purposes—including marketing research and consulting, digital marketing, restaurant operations, and rental space services—as well as for employment and HR management.
   We do not use personal information for purposes beyond those specified and take appropriate measures to prevent such use.
2. 2. Compliance
   We comply with all applicable laws, national guidelines, and other relevant standards related to personal information protection.
3. 3. Security and Risk Management
   We implement reasonable and appropriate security measures to prevent unauthorized access, leakage, loss, or damage of personal information.
   Should an issue be identified, we take prompt corrective action and continue to strengthen our data protection practices.
4. 4. Complaints and Inquiries
   We respond promptly, sincerely, and appropriately to complaints or inquiries regarding our handling of personal information.
5. 5. Continuous Improvement
   We review and enhance our Personal Information Protection Management System as necessary to ensure it remains effective and appropriate in light of environmental and organizational changes.

Contact for Inquiries

Personal Information Disclosure Statement

Handling of Personal Information

Purposes of Use of Personal Information

1. (1) For personal information obtained directly from individuals (including via our website or email), the purpose of use will be clearly stated in writing prior to collection.
2. (2) For personal information obtained by other means, the purposes of use are as follows:

Notice Regarding Retained Personal Data

With respect to retained personal data held by the Company, individuals or their representatives may request notification of purpose of use, disclosure, correction, addition or deletion of content, suspension of use, erasure, suspension of provision to third parties, or disclosure of records of third-party provision (collectively, “Requests for Disclosure, etc.”).
The Company responds in accordance with the following procedures.

(a) Business Name

10 Inc.

(b) Personal information protection manager

Yoshiki Koya
Administration Department
E-mail: yoshiki.koya@10inc.co.jp

(c) Purposes of Use for Retained Personal Data

(d) Contact for Complaints Regarding Retained Personal Data

• Same as the Personal Information Inquiry Desk above.

(e) Authorized Personal Information Protection Organization

Currently, the Company is not a member of any authorized personal information protection organization.

(f) Voluntary Provision of Personal Information

Providing personal information to the Company is voluntary. However, if certain required items are not provided, the Company may be unable to adequately respond to inquiries or deliver services.

(g) Procedures for Requests for Disclosure, etc.

1. Contact for Requests
Requests for disclosure, correction, or deletion of retained personal data should be addressed to the Personal Information Inquiry Desk listed above.
* If you wish to make your request through electronic means, please let us know. As a general rule, the Company will accommodate such requests whenever possible.

2. Request Procedure
① Upon receipt of your request, the Company will send by mail the prescribed “Request Form for Disclosure of Retained Personal Data.”
② Please mail the completed request form to the Inquiry Desk. If a representative makes the request, include documents verifying both the representative’s identity and authority, and a postal money order for the handling fee (for requests for notification of purpose of use and disclosure only).
③ Upon receiving the request form, the Company will confirm your identity by verifying approximately two registered details (e.g., telephone number and date of birth).
④ As a general rule, responses will be provided to the individual in writing (by sealed postal mail).

3. Requests by Representatives
If a request is made by a representative, include documents verifying the representative’s identity and authority. Please redact personal identification numbers and any portion of the permanent domicile address beyond the prefecture.
① Documents verifying representative authority
・If authorized by the individual: Original letter of attorney
・If the representative is a legal guardian of a minor: Copy of family register, certificate of residence (showing relationship), or other official document verifying legal authority
・If the representative is a legal guardian of an adult ward: Copy of certificate of registered matters regarding guardianship, or other official document verifying legal authority
② Documents verifying representative’s identity
・Driver’s license
・Passport
・Health insurance card (please black out all symbols/numbers)
・Certificate of residence

4. Fee
A handling fee of JPY 1,000 applies per request for notification of purpose of use or disclosure.

If submitting a written request, please enclose a postal money order with the form. If submitting by other means, please consult with us at the time of your request.

(h) Management System and Security Measures for Retained Personal Data

The Company implements the following measures to ensure proper management of retained personal data:
1. Formulation of Basic Policy
To ensure proper handling of retained personal data, the Company has established a Personal Information Protection Policy addressing compliance with relevant laws, regulations, and guidelines, and specifying a contact point for questions and complaints.

2. Rules for Handling Personal Information
The Company has established internal regulations defining handling methods and the roles and responsibilities of personnel for each stage of the information lifecycle—acquisition, use, storage, provision, deletion, and disposal.

3. Organizational Security Controls
① The Company designates a responsible person for handling retained personal data, clarifies authorized personnel and the scope of data handled, and maintains a reporting structure to the responsible person when noncompliance or risk is identified.
② The Company conducts regular self-inspections and audits by other departments and external parties.

4. Human Security Controls
① The Company provides regular training to employees regarding proper handling of retained personal data.
② All employees sign confidentiality agreements covering retained personal data.

5. Physical Security Controls
① In areas handling retained personal data, the Company controls entry/exit, restricts devices brought into the area, and implements measures to prevent viewing by unauthorized persons.
② The Company prevents theft or loss of devices, electronic media, and documents handling retained personal data. When such items are carried within or outside the office, measures are taken to ensure that the data cannot be easily identified.

6. Technical Security Controls
① The Company implements access control to limit authorized personnel and the scope of databases handled.
② The Company protects its information systems against unauthorized external access and malware.