English translation of the Japanese text, provided for reference. Read the Japanese original
IndieSquare Co., Ltd. (the “Company”) regards the protection of personal information as an important responsibility and sets out the following common policy for handling personal information in its business activities.
01Scope and collection of personal information
This Policy applies to personal information the Company handles in connection with its websites, products, services, inquiries and business dealings. Please also read any specific purposes or notices provided for a particular service or at the point of collection. “Personal information,” “personal data” and “retained personal data” have the meanings given in Japan’s Act on the Protection of Personal Information.
The Company collects information lawfully and fairly, to the extent necessary for the stated purposes. Depending on how you interact with us, this may include your name, organization, contact details, account and permission information, inquiry, contract and transaction records, and access and activity logs. Not all of this information is collected in every interaction.
02Purposes of use
The Company uses personal information only as necessary for the applicable purposes below and those explained when the information is collected.
• Responding to inquiries, consultations, requests for materials, partnership or media requests, and related communications.
• Processing service applications, managing accounts, authenticating Users, checking permissions, providing service functions and supporting their use.
• Entering into and performing contracts, administering invoices and payments, maintaining transaction records and making necessary operational communications.
• Maintaining systems, investigating and resolving incidents, preventing unauthorized access and misuse, and reviewing usage and activity records to maintain security and service quality.
• Sending newsletters and information about the Company’s products, services and events to people who request or consent to those communications.
• Meeting legal requirements and handling individual rights requests, complaints and disputes.
You may stop newsletters and similar communications using the method stated in the email or by contacting us below. An inquiry or request for materials alone does not constitute consent to receive marketing communications. We may continue to send notices necessary for secure service use or performance of a contract.
03Personal data entrusted by Customers
Where the Company processes personal data about a Customer’s counterparties, investors, personnel or other individuals submitted to its services, it does so only as necessary for the entrusted work, under its agreement with the Customer and lawful instructions. Such data is not repurposed for the Company’s own advertising or marketing.
If the Company lacks authority to decide a request for access, correction or other action concerning entrusted data, it will explain this, identify the appropriate contact and assist the Customer as necessary. The Company will itself handle requests for which it is legally responsible.
04Disclosure to third parties and outsourcing
The Company does not disclose personal data to third parties without the individual’s consent, except where permitted by law.
The Company may outsource activities such as system operation, information storage and email delivery as necessary for the stated purposes. It selects appropriate providers and exercises necessary and appropriate supervision through contractual and other safeguards addressing security and use outside the agreed purposes.
Where personal data is transferred to a provider in another country, including through outsourcing, the Company will assess the relevant legal framework and recipient’s safeguards and take the steps required by applicable law, such as providing information and obtaining consent or ensuring continued equivalent safeguards at the recipient.
05Management, security and retention
The Company endeavors to keep personal data accurate and current to the extent necessary for its purposes and implements safeguards appropriate to the processing and risks to prevent leakage, loss, damage and unauthorized access.
Safeguards are based on defined responsibilities and access permissions, personnel awareness and training, management of equipment and media, authentication, access controls and communication protection, provider supervision, and incident reporting and response arrangements. You may contact us below for further information that can be disclosed without compromising security.
Retention periods take account of the purposes, contractual needs and legal retention duties. The Company endeavors to appropriately erase or dispose of personal data that is no longer needed. If a data incident occurs, it will investigate, limit harm and make notifications to supervisory authorities and affected individuals as required by law.
06Access, correction and other rights requests
Subject to applicable law, you may request notification of purposes, access, correction, addition, deletion, cessation of use, erasure or cessation of third-party disclosure of your retained personal data held by the Company, and disclosure of relevant third-party provision records.
Please email the contact below with the relevant service or interaction, the action requested and your contact details. The Company will verify your identity or your representative’s authority by necessary and appropriate means. Do not include original identity documents, unnecessary identification numbers or passwords in the initial email. Any information needed for verification will be explained separately.
For access requests, the Company will confirm your preferred electronic, written or other disclosure method and respond in accordance with law. It will notify you of the outcome without delay and explain any lawful reason for declining all or part of a request. If a fee is set for notification of purposes or disclosure, the reasonable amount permitted by law and its collection will be explained before the procedure.
07Company information and privacy contact
Personal information handling business operator: IndieSquare Co., Ltd.
Address: 2-2-17 Shibuya, Shibuya-ku, Tokyo, Japan
Representative: Yuta Hoshino
For privacy questions, complaints, consultations or rights requests, please use the email address below. Including “Privacy inquiry” in the subject line helps us identify your request.
08Compliance and revisions to this Policy
The Company complies with applicable privacy laws and guidelines and reviews this Policy and its management arrangements as its processing activities or the legal framework change. The updated Policy and revision date will be announced on this website or through another appropriate channel.
Changes to purposes of use are limited to those reasonably related to the original purposes and will be notified or published. Use beyond that scope requires prior consent unless permitted by law. Publishing this Policy does not by itself constitute consent to use previously collected personal information for a new purpose.