PRIVACY POLICY

POLICY FOR PROTECTION OF
PERSONAL INFORMATION

YA-MAN Ltd. (Address: 1-4-4, Furuishiba, Koto-ku, Tokyo Representative Director Kimiyo Yamazaki hereinafter referred to as the “Company”) conducts business activities that mainly consist of research and development, manufacturing, import, export, and sales of beauty and health equipment. The Company stipulates this policy for the protection of personal information received from companies, individuals, and the Company’s employees for corporate activities and accomplishing the mission of social contribution, and will strictly fulfill its responsibilities for management of such personal information.

THE COMPANY’S POLICY

In some cases, the Company will clarify the purpose of use of personal information for performing work, and then obtain by appropriate methods, possess, manage and use the personal information of its customers or employees. The Company will use personal information within the scope of the purpose of use as stated below and take appropriate measures to prevent using for other purpose.
The Company will comply with laws, regulations, guidelines and other standards related to handling of personal information. In addition, in the event that the Company consigns a part or all of personal information, the Company will select a company or a party that fulfills management standards, conclude contracts with them, and implement appropriate measures and management of personal information.
The Company’s personal information management system conforms with Japan Industrial Standard JIS Q15001.
The Company will implement sufficient and safe preventive management and measures against dangerous situations, such as unauthorized access to personal information, as well as data loss, alteration, leaks, and destruction of personal information, and will implement corrective measures.
The Company will reply to requests for disclosure of personal information that are made by the person who provided the personal information. The Company will also establish a consultation office for complaints and consultations about management of personal information and will sincerely and promptly handle matters for which replies should be made.
The Company will continuously reconsider the Company’s personal information management system and improve it.

Date of formulation: November 1, 2005: Date of revision: February 18, 2023
YA-MAN Ltd.
Kimiyo Yamazaki, Representative Director

Desk for consultations and inquiries concerning personal information (9:00 to 17:00, closed Saturdays, Sundays, National Holidays, and New Year’s Holidays): Shingu Bldg 4F, 2-4-2 Toyo, Koto-ku, Tokyo 135-0016 Japan
Consultation desk: Person in charge of personal information protection in the General Affairs Department, Administration Division
Telephone: +81-3-5665-7330

HANDLING OF PERSONAL INFORMATION

1. Purpose of use

The purposes of use of personal information by our company shall be as follows:

Customer information: To send purchased products, prizes, promotional products, free samples, catalogues, DMs, information magazines and other information; To appropriately respond to and provide information for inquiries from the customer about our products and services; For data analysis such as marketing

Personal information related to IR inquiries: To appropriately respond to inquiries about our IR

Employee information: For employee management

Shareholder information: To send the convocation notice to general shareholders’ meetings and proxy cards; To pay dividends; To create a shareholder registry and give notice to transfer agents; Other; To exercise the rights and execute the obligations under the Commercial Law; To provide benefits from our company to persons with status as a shareholder; To implement a variety of measures for a smooth relationship between shareholders and our company; To manage shareholders by creating shareholder data based on the designated criteria under the related laws and regulations

Information about job applicants: To give notice about the decision to hire or not to hire, respond to inquiries, and make other administrative communication

Information about resigned employees: To provide information to resigned employees

Information about the employees of a business partner: To negotiate and communicate

Information about the persons who made a request for disclosure of personal information: To appropriately respond to the request

Information about persons who made an inquiry or filed a complaint in relation to personal information: To appropriately respond to the inquiries and complaints

Personal information of persons who applied to purchase products or receive samples through our e-commerce website: To send the purchased products and samples; To respond to inquiries and provide necessary information in relation to the above; For data analysis such as marketing

Information about our company’s email magazine: To send email magazines

Information about support card registration: To provide appropriate warranties for the products; To manage the registrants

Information of recorded telephone calls: To accurately grasp the requests and desires of the customers

Information about the company’s product apps: To show the user’s face on the camera and link it with the app using the AR function for correct use of the facial care device *However, the facial data will not be stored when using the app.Also, facial data will not be collected. The app uses the camera mode as a mirror.

Personal information directly acquired by a method other than in writing (information about the purchaser provided from the shopping mall): To ship the purchased products; To respond to inquiries and provide necessary information in relation to the above

Personal information directly acquired by a method other than in writing (information about persons who requested a repair of the beauty and health device provided from the wholesaler and others): To manage the repair history

Personal information directly acquired by a method other than in writing (profile information such as facial photographs provided from social media): To manage registrants; To provide information about products and promotion; To distribute step mails

2. Matters concerning the procedure for responding to requests for disclosure

The company will, in accordance with the provisions of the laws and regulations concerning the handling of personal information, respond to the requests from the subject individual who provided the personal information for disclosure of the personal information, notification of the purpose of use, correction/addition/deletion of the personal information, suspension of use/elimination of the personal information, disclosure of the record of providing the personal information to third parties (hereinafter referred to as “Disclosure etc.”).

(1) Point of contact for requests for Disclosure etc. of personal information

Please direct requests for Disclosure etc. of personal information to the company’s personal information consultation desk (hereinafter referred to as “Consultation Desk”). Also, regarding disclosure and changes to the information about the company’s shareholders, please confirm with Sumitomo Mitsui Trust Bank, the administrator of the company’s shareholder registry. Concerning the shares owned by the account at a securities company, please make the request to the securities company.

(2) Documents to be submitted when requesting Disclosure etc. of personal information

When requesting Disclosure etc. of personal information, fill out the required matters in the Request for Disclosure etc. form and send it to the Consultation Desk by postal mail.

(3) Fees required for the requests for Disclosure etc. of personal information

For each disclosure of personal information, notification of the purpose of use and disclosure of the record of providing the personal information to third parties, the amount equivalent to the actual cost of postal mail up to 1,000 yen (a total amount of the postage, registered mail cost, and cost of the registered mail to be signed by the addressee only) will be charged. Enclose postal stamps for the amount of the fees when sending the Request for Disclosure form by postal mail.

(4) Persons eligible to request Disclosure etc. of personal information

Persons who are eligible to request Disclosure etc. of personal information are as follows:

The subject individual (the person identified with the personal information subject to Disclosure etc.)
A proxy (the person entrusted by the subject individual or the legal representative, such as a guardian)

(5) Documents used for confirmation of the subject individual and proxy

When requesting Disclosure etc. of personal information, the documents for confirming that the person who made the request is the subject individual or proxy will need to be submitted.

When the person who makes the request for Disclosure etc. of personal information is the subject individual
One of the following (that can be used to confirm the name, address, and date of birth)
1. 1) Copy of the certificate of residence (issued within the past three months)
2. 2) Copy of the driver’s license, health insurance card, or other public document
When the person who makes the request for Disclosure etc. of personal information is a proxy
One of the documents stated in 1) or 2) above and a letter of proxy written by the subject individual (The subject individual is required to affix the seal and submit the certificate of seal registration of that seal. When the proxy is a legal representative, such as a guardian, in lieu of the letter of proxy, submit a copy of family register or the abstract of family register that shows the relationship with the subject individual)

Desk for consultations and inquiries concerning personal information: Shingu Bldg 4F, 2-4-2 Toyo, Koto-ku, Tokyo 135-0016 Japan
Consultation desk: Person in charge of personal information protection in the General Affairs Department, Administration Division
Telephone: +81-3-5665-7330 (9:00 to 17:00, closed Saturdays, Sundays, National Holidays, and New Year’s Holidays)

(6) Responses

Regarding requests for Disclosure etc. of personal information, after confirming the subject individual (after confirming the authority in the case of a request by a proxy), a response will be made in writing to the address of the subject individual (of the proxy in the case of a request made by the proxy). Also, in the following cases, disclosure will not be made.

When the subject individual or the authority of the proxy cannot be confirmed
When the life, physical well-being, property, or other rights and interests of the subject individual or a third party will likely be harmed
When appropriate execution of the business by the company will likely be significantly hindered
When the provisions of other laws and regulations will be violated
In addition to the above, when the Act on the Protection of Personal Information stipulates that Disclosure etc. is not required

3.Security management measures

The company implements the following measures for preventing the leak, loss, or damage of personal information and other measures for the appropriate management of personal data.

Formulation of a basic policy: - We have set forth this Privacy Policy in order to secure the appropriate handling of personal information and to notify the point of contact for inquiries and complaints.

Establishment of rules on the handling of personal data: - We have established the Rules on the Protection and Management of Personal Information and designated the handling method for each step, including the acquisition, use and provision of personal data, as well as the responsible person and person in charge and their duties.

Organizational security management measures: - We have appointed a person responsible for the handling of personal data.; - We have clarified the person in charge of handling personal data and the scope of personal data handled by the person in charge.; - We conduct regular self-inspections on the status of personal information handling, as well as audits by other divisions.

Human security management measures: - We provide regular training to employees on the points to note concerning the handling of personal information.; - We have set forth matters concerning the confidentiality of personal information in our Work Rules.

Physical security management measures: - We manage the entry/exit of employees in the areas where personal information is handled and at the same time implement measures to prevent viewing of personal information by unauthorized persons.; - We take measures to prevent the theft or loss of devices, recording media and documents containing personal information.; - We take measures to prevent personal information from being easily known when carrying around devices, recording media, and documents containing personal information.

Technical security management measures: - We limit access to persons who handle personal information and the scope of personal information handled by the persons in charge of handling personal information.; - We implement measures to protect the systems used for handling personal information from unauthorized access by external parties and unauthorized software.

4. Joint use of personal information

The company jointly uses customer information acquired by the company stores with the companies that correspond to the following scope of joint users.

Scope of joint users: - Hankyu Department Store Umeda Main Stores

Items of personal information for joint use: - Name, address, telephone number, gender, date of birth, email address, purchase history, treatment history, and counseling details

Purpose of use by the joint user: - To provide members-only services, such as beauty counseling

Name of the administrator of the personal information for joint use: - YA-MAN LTD.
Address: 1-4-4, Furuishiba, Koto-ku, Tokyo
Representative Director Kimiyo Yamazaki

Method of acquiring personal information for joint use: Acquisition through documents, electronic media, and other sources
*When handing over personal information, appropriate security management measures will be implemented.

5.Matters concerning the point of contact for complaints and consultations

For complaints and consultations about the handling of personal information by the company, please contact the following:

Direct inquiries to

Shingu Bldg 4F, 2-4-2 Toyo, Koto-ku, Tokyo 135-0016 Japan
Personal information consultation desk, YA-MAN Ltd.
Telephone: +81-3-5665-7330 (9:00 to 17:00, closed Saturdays, Sundays, National Holidays, and New Year’s Holidays)
E-mail : privacy@ya-man.com

Name of the certified personal information protection organization and the recipient of requests for the resolution of complaints: We do not belong to any certified personal information protection organizations.
Please note that we do not accept inquiries from visitors to the company.

6.About cookies

In order to research the access history by the customers who visited our website and the status of use, as well as otherwise provide the best service to customers, the company collects information about the IP address used when the customer accesses our server and information about the individual device identification number of the mobile device when accessing with a mobile device. At the same time, the company uses cookies to collect information about the access history of the customer.

Cookies are data files sent and saved on the customer’s computer when the customer visits our website. Customers are able to choose the Web browser settings related to sending and receiving cookies. Please note that if the customer chooses to refuse all cookies, the use of Internet services may be restricted, such as the inability to receive services that require certification.

The company uses cookies for the following purposes: - When the customer logs in to the service, the company references the registered information about the customer stored with cookies to enable the provision of service that is customized to each customer; - To display the most appropriate advertisements on external websites based on the customer’s interests and the status of use of the website; - To improve the company’s services

The company may provide the identifier stored in the cookies to the company’s third party contractor who distributes advertisements and may use the information for the distribution of advertisements through the third party.
Also, upon consent from the customer, the company may acquire the browsing history collected by cookies from the data management platform operated by a third party and the analysis results thereof and use it for the distribution of advertisements after linking such data to the customer’s personal data.