PRIVACY POLICY

Definition of Personal Information

"Personal Information" as used herein refers to information about a living individual, which contains the name, the date of birth and/or any other descriptions, personally-allocated number, image, or voice by which a specific individual can be identified (including information that cannot be identified with itself alone, but can be easily collated with other information so that a specific individual can be identified. )

Compliance with Law

CMF complies with this Privacy Policy, in addition to laws, regulations, guidelines and other standards as stipulated by the government in regard to safeguarding of Personal Information.

Collection of Personal Information and its purpose

CMF defines the purpose of collecting Personal Information clearly, and collects Personal Information within the scope necessary for the achievement of the purpose.

Utilization and Provision of Personal Information

CMF will use Personal Information only within the scope of purposes of utilization presented beforehand, and provide Personal Information appropriately. CMF will also prohibit non-compliant utilization for unintended purposes, and take necessary and appropriate measures.

Management of Personal Information

CMF shall take necessary and appropriate action for the security control of Personal Information including preventing the leakage, loss or damage, and exercise necessary and appropriate supervision over its employees, while taking corrective actions.

Cookies and other advertising identifiers

Our service may use cookies for the following purposes.

• Authentication of users to use services
• Distribution of behavioral personalized advertisements
• To check conversions

In addition, the websites, applications, and other services operated by CMF may use Google Analytics from Google, Inc. to improve services. For data usage by Google, Inc., please see his Data usage by Google when the user uses his Google partner's sites and apps.

Supervision of contractors

When consigning all or part of Personal Information processing to a contractor, CMF will enter into a contract including non-disclosure agreement with the contractor, and will conduct necessary and appropriate supervision of the contractor for the appropriate security control.

Inquiries

CMF receives requests from the person themselves to disclose, to correct, add, delete, to erase , to notice purpose of use, or for refusal of use or provision of their Personal Information to a third party, complaints or queries, CMF will provide a prompt response after verifying their identity.

Revision

CMF may revise all or part of its Privacy Policy. For important changes, CMF will provide notice on CMF's Web site pages in a comprehensible way.

Last revised on October 1, 2023

Matters concerning public announcement of the purpose of utilization of Personal Information

When CMF acquires Personal Information as is written in a document (including a Web page) directly from a customer or other person (direct acquisition of document), CMF will expressly show the purpose of utilization on such document. When having acquired Personal Information by other means, CMF will handle Personal Information within the following scope of restrictions of purposes of utilization. However, this provision shall not apply to the item (2) for cases in which it is considered that the purpose of utilization is clear in consideration of the circumstances of the acquisition.

(1) Purpose of Utilization of Personal Information acquired by other means than direct acquisition of document

When CMF acquires Personal Information directly without using documents, or indirectly, except in cases in which purpose of utilization has already been publicly announced in CMF's home page, etc., CMF will notify or publicly announce the purpose of utilization in each case. However, cases for (2) shall be excluded.

(2) Purpose of Utilization of entrusted Personal Information

Personal information entrusted to CMF will be utilized for fulfillment of such consignment contract.

Matters concerning public announcement of the purpose of utilization of personal information and Matters that shall be put in an accessible condition for the person with respect to the retained personal data

Shared Use of Personal Information

CMF may share Personal Information about business partners with CARTA HOLDINGS, INC., our parent company. Please refer to the privacy policy of CARTA HOLDINGS, INC. our parent company, for the items of Personal Information to be shared, the purpose, the scope, and the manager.

Matters concerning provision of Personal Information to a third party

CMF will appropriately manage personal data acquired from customers and other person themselves, and will not, except in the following cases, provide personal data to a third party without obtaining the prior consent of the person:

1. (1) Cases in which the provision of personal data is based on laws and regulations
2. (2) Cases in which the provision of personal data is necessary for the protection of the life, body, or property of an individual and in which it is difficult to obtain the consent of the person
3. (3) Cases in which the provision of personal data is specially necessary for improving public health or promoting the sound growth of children and in which it is difficult to obtain the consent of the person
4. (4) Cases in which the provision of personal data is necessary for cooperating with a state organ, a local government, or an individual or a business operator entrusted by one in executing the affairs prescribed by laws and regulations and in which obtaining the consent of the person are likely to impede the execution of the affairs

Matters concerning Procedures to Meet Requests for Disclosure and Others

1. Disclosure of retained personal data

When CMF is requested by a customer or other person themselves to disclose the record of provision to a third party or such retained personal data as may lead to the identification of the person, CMF will disclose the record of provision to a third party or the retained personal data without delay. However, in falling under any of the following items, CMF may keep all or part of the retained personal data undisclosed. When CMF has decided not to disclose data, CMF will notify the person of that effect with reasons. In making a request for disclosure, please notify the name of the service to identify the record of provision to a third party or the retained personal data in question.

1. (1) Cases in which disclosure is likely to harm the life, body, property, or other rights or interests of the person or a third party
2. (2) Cases in which disclosure is likely to seriously impede the proper execution of the business of CMF
3. (3) Cases in which a request for disclosure is not concerned with retained personal data
4. (4) Cases in which whether the request is made by the person themselves cannot be verified
5. (5) In a request made by a representative, cases in which the authority of representation cannot be verified
6. (6) Cases in which any of the prescribed procedures for request includes a flaw
7. (7) Cases in which disclosure violates other laws and regulations

2. Correction, etc. of retained personal data

When CMF is requested by a customer or other person themselves to correct, add, or delete such retained personal data as may lead to the identification of the person on the ground that the retained personal data is contrary to the fact, CMF will, except in cases in which special procedures are prescribed by any other laws and regulations for such correction, addition, or deletion, make a necessary investigation without delay within the scope necessary for the achievement of the purpose of utilization and, on the basis of the results, correct, add, or delete the retained personal data, and will notify the person of that effect.

3. Discontinuance of the Utilization, etc. of retained personal data

Where CMF is requested by a customer or other person themselves to discontinue using or to erase such retained personal data as may lead to the identification of the person on the ground that the retained personal data is being handled violation of law or regulation, CMF will make a necessary investigation without delay and, on the basis of the results, discontinue using or erase the retained personal data, or cease to provide a third party, and will notify the person of that effect. However, in cases in which it costs large amount or otherwise difficult to discontinue using or to erase the retained personal data, CMF will take necessary alternative measures.

Notification of a Purpose of Use

Where CMF is requested by a customer or other person themselves to notice the purpose of use for such retained personal data as may lead to the identification of the person on the ground, CMF will notify without delay the person of the purpose of use. However, in falling under any of the following items, CMF will notify the person that the purpose of use will not be notified, along with the reason.

1. (i)notifying the identifiable person of the purpose of use is likely to harm the life, wellbeing, property, or other rights or interests of the identifiable person or a third party;
2. (ii)notifying the identifiable person of the purpose of use is likely to harm the rights or legitimate interests of CMF or a third party;
3. (iii)it is necessary for the business to cooperate with a national government organ or a local government in performing the functions prescribed by laws and regulations, and notifying the identifiable person of the purpose of use is likely to interfere with the performance of those functions; and
4. (iv)the purpose of use for retained personal data is already disclosed to the public.

Where to submit requests for disclosure, etc. of retained personal data

The contact for requests for disclosure, etc. of retained personal data is the same as the contact for complaints regarding the handling of personal information below.

Matters concerning the point of contact for complaints

Contact for complaints regarding the handling of personal information