CHARLE CO.,LTD. (hereinafter referred to as "our company") recognizes that it is a social responsibility to handle your personal information with proper protection and management in order to conduct business activities. In accordance with the following policy, we will endeavor to protect personal information.

1. Our company recognizes that personal information is crucial information that constitutes privacy, and we strive to protect privacy. When it is necessary to acquire, use, or provide personal information, our company will handle it rigorously under the laws and guidelines established by the country regarding the protection of personal information, as well as our personal information protection management system.

2. Our company endeavor to prevent and rectify unauthorized access, loss, destruction, alteration, leakage, and other risks associated with acquired personal information. Our company implements rigorous management practices to ensure the security of the information.

3. Our company complies with laws related to the protection of personal information and other relevant regulations, guidelines, and the like.

Our company strives to appropriately protect and manage the personal information of our business partners in accordance with our privacy policy.

When obtaining personal information, our company will inform you in advance about the purpose of use of the personal information and whether it will be provided to third parties. Additionally, the personal information obtained from you will not be used for purposes other than the following objectives:

• ① For business-related communications, contract fulfillment, business negotiations, etc.
• ② For management of business partner information
• ③ For entry/exit management and history management of facilities managed by our company
• ④For investigations, records, and notifications and reports to government agencies based on various laws and regulations.

2. Safety management measures for personal information

Regarding personal information, our company takes the following measures to prevent leakage, loss, or damage, and to properly manage personal information.

(1) Formulation of basic policy

To ensure the proper handling of personal information, we have established a personal information protection policy (privacy policy) with regard to "compliance with relevant laws and guidelines," "desktop for questions and complaints," etc.

(2) Establishment of regulations regarding the handling of personal information

We have established "Personal Information Protection Regulations" regarding handling methods, persons in charge and their duties, etc. for each stage of personal information acquisition, use, storage, provision, deletion/disposal, etc.

(3) Organizational safety management measures

• ① We have appointed a person responsible for handling personal information (personal information protection manager).
• ② We clarify the employees who handle personal information and the scope of personal information handled by those employees.
• ③ We have established a system for reporting to the personal information protection manager in the event that we become aware of facts or signs of violation of laws, regulations, etc. and internal regulations.
• ④ We conduct regular self-checks on the handling of personal information and also undergo audits by other departments to assess the situation regarding the handling of personal information.

(4) Personnel safety management measures

• ① Regular education is provided to directors, etc., and employees on matters to be noted regarding the handling of personal information.
• ② Confidentiality provisions regarding internal confidential matters, including personal information, are documented in our internal regulations.

(5) Physical safety management measures

• ① We take measures to prevent personal information from being viewed by anyone who does not have the authority to handle it.
• ② We take measures to prevent the theft or loss of devices, electronic media, documents, etc. that handle personal information.
• ③ When carrying devices, electronic media, documents, etc. that handle personal information, we take measures to prevent personal information from being easily revealed.

(6) Technical safety management measures

• ① We take access control to restrict the scope of personal information handled by employees and other relevant personnel.
• ② We have introduced a mechanism to protect information systems that handle personal information from unauthorized external access or software.

3. Disclosure and provision of personal information to third parties

Our company will not disclose or provide personal information to a third party without the prior consent of the person, except in the following cases.

• (1) When we have obtained prior consent from the individual concerned.
• (2) When it is necessary to outsource within the scope required to achieve the intended purpose.
• (3) When disclosure or provision is required based on legal obligations.
• (4) When it is necessary to protect human life, body, or property, and obtaining consent from the individual is difficult.
• (5) When it is particularly necessary for the improvement of public health or the promotion of healthy upbringing of children, and obtaining consent from the individual is difficult.
• (6) When it is necessary to cooperate with a national or local government entity, etc., in carrying out affairs prescribed by law, and obtaining consent from the individual may impede the execution of such affairs.

4. Entrustment of personal information

| Our company may entrust personal information to third parties to achieve the purposes of use as described in "1. Acquisition and Use of Personal Information." In such cases, even when entrusting to deemed trustworthy business partners, our company will comply with the laws regarding the protection of personal information. Necessary and appropriate management and supervision will be conducted on the entrusted parties under our company's personal information protection management system to ensure the protection of personal information.

5. Acquisition, use, and provision of information linked to identifiers such as cookies

A Cookie is a piece of text information that is sent from a website and stored in a web browser when you browse the website. Additionally, a web beacon is a mechanism where small images are embedded in web pages or emails to transmit information when you view those pages or emails. On this website, we use Cookies, web beacons, or similar technologies (hereinafter referred to as "Cookies, etc.") to store and use information from users.

Our company provides the identifiers stored in Cookies, etc. to the following advertising delivery service companies and uses them for advertising delivery.

(1) Yahoo! Japan

If you want to opt out of Yahoo! Japan advertisements, you can do so by visiting the following link: https://btoptout.yahoo.co.jp/optout/index.html

(2) Google

If you want to opt out of Google advertisements, you can do so by visiting the following link: https://support.google.com/ads/answer/2662922?hl=ja

(3) Criteo

If you want to opt out of Criteo advertisements, you can do so by visiting the following link: https://store.charle.co.jp/ec/contents/utility/guide/environment.html

6. Handling of pseudonymized information

Our company may create pseudonymized information, which is processed to prevent identification unless matched with other information, and use it for the purpose of analyzing and developing new products or services. When handling pseudonymized information, we adhere to the "Pseudonymized Information Handling Manual" and take security measures for safety management.

7. Handling of anonymously processed information

When creating anonymously processed information that has been processed so that you cannot be identified and providing it to a third party, our company will comply with the "Anonymously Processed Information Handling Manual" and take security measures for safety management.

(1) Items of personal information included in the anonymously processed information to be created

Gender, year of birth, and purchased product name and quantity

(2) Items of personal information included in the anonymously processed information provided

Gender, year of birth, and purchased product name and quantity

(3) Method of Provision

Upload anonymously processed information to a server so that it can be used by a third party

8. Request for notification of the purpose of use of personal information, disclosure, correction, addition or deletion of the content, suspension of use or erasure, suspension of provision to a third party, or disclosure of records provided to a third party

When we receive a request from a person or his or her representative to notify us of the purpose of use of the personal information or to disclose the content, we will respond without delay, except in the following cases.

If the personal information is not disclosed or if the personal information does not exist, we will respond to that effect.

• (1) In cases where there is a risk of harming the life, body, property, or other rights and interests of the person or a third party.
• (2) In cases where there is a risk of significant hindrance to the proper implementation of our business.
• (3) In cases where it would violate laws and regulations.

In addition, if there is a request from the person or his/her representative to correct, add or delete, stop using or erase the personal information, stop providing it to a third party, or disclose records provided to a third party, after confirming that the request is from the person in question or his/her representative, we will respond within reasonable limits in accordance with laws and regulations.

Please note that a handling fee may be charged for requests for notification of the purpose of use of personal information and disclosure of such content.

9. Contact point for inquiries, complaints, and consultations regarding personal information

For inquiries, complaints, and consultations regarding our company's personal information protection, please contact the following:

For inquiries regarding our company's Privacy Policy and the handling of personal information, please contact:

New Business Division, Overseas Business Project: 078-792-9046

※Office hours: 9:30 AM to 5:00 PM (Excluding Saturdays, Sundays, and public holidays)

※To further ensure the protection of your personal information, our company may revise the Privacy Policy in accordance with legal enactments or changes, among other reasons.

Enactment date: September 1, 2023

3-1-2 Yasakadai, Suma-ku, Kobe, Hyogo, Japan

CHARLE CO.,LTD.

President Katsuya Hayashi