Privacy Policy

Eight Co., Ltd. (hereinafter referred to as "the Company") and its group companies deeply recognize the importance of personal information received from customers and business partners. We will comply with the Act on the Protection of Personal Information and other relevant laws and regulations, and strive to handle and protect personal information appropriately in accordance with the following policy.

Article 1 (Definition of Personal Information)

"Personal Information" in this Privacy Policy refers to "information about a living individual" as defined in the Act on the Protection of Personal Information, and specifically refers to information that can identify a specific individual or information that can be easily collated with other information to identify a specific individual.

Article 2 (Scope of Application)

This Privacy Policy applies to the handling of all personal information falling under the following categories:

・Personal information acquired and used by the Company for business purposes regarding customers, business partners, contractors, and job applicants.
・Personal information acquired through websites, online services, SNS, campaigns, questionnaires, etc., operated by the Company.
・All other personal information acquired by the Company during its business activities (regardless of whether the medium is paper or digital).

The Company assumes no responsibility for the handling of personal information on external websites linked from the Company's website. Please check the privacy policies of each respective external site.

Article 3 (Method of Acquiring Personal Information)

he Company shall acquire personal information in an appropriate and fair manner through the following methods:

・Input into websites and forms.
・Collection via contracts, application forms, business card exchanges, questionnaires, etc.
・Collection through business negotiations and inquiries via face-to-face meetings, telephone, email, and SNS.
・Applicant information through recruitment activities (resumes, curriculum vitae, etc.).
・Recordings by equipment installed in offices, such as security camera footage and entry/exit records.
・Other methods necessary for the execution of business.

Article 4 (Items of Personal Information to be Acquired)

The personal information acquired by the Company is as follows:

・Information related to identity verification:
Name, address, postal code, phone number, date of birth, gender, email address, account ID and password, information related to official certificates such as driver's licenses or resident records, etc.
・Information related to payment:
Information regarding financial institution accounts, information regarding payment methods, etc.
・Information acquired regarding service use:
Online identifiers such as Cookie IDs, device information, location information, browsing history, and other service usage status (including access logs, IP addresses, browser information, browser language settings, etc.).
・Other information:
Information related to inquiries and communications to the Company.

Article 5 (Purpose of Use of Personal Information)

The Company uses the acquired personal information for the following purposes:

・User registration, identity verification, and account management.
・Order processing, payment processing, and delivery arrangements.
・Support, after-sales service, and handling of returns, exchanges, and complaints.
・Contacting users (service changes, failure information, important notices, etc.).
・Providing information via email newsletters, campaigns, etc.
・Displaying recommendations based on purchase and browsing history.
・Questionnaires and marketing analysis for service improvement and new service planning.
・Security measures such as countermeasures against unauthorized access, fraudulent use, and spam.
・Use based on laws and regulations (accounting, tax response, cooperation with authorities, etc.).
・Record-keeping for second-hand dealer transactions as stipulated by the Secondhand Articles Dealer Act.
・Communication, meetings, and business negotiations with business partners.
・Conclusion of various contracts with business partners.
・Handling selections for job applicants.
・Entry/exit management for Company facilities.
・Verification of legality and transaction management for personal information acquired from third parties.
・Creation and storage of third-party provision records based on laws and regulations.
・Providing information to third parties by the methods described in this Privacy Policy.
・Other duties incidental or related to the above purposes of use.

Article 6 (Third-Party Provision of Personal Information)

1. The Company will not provide acquired personal information to third parties except in the following cases:

・When the individual's consent has been obtained.
・When based on laws and regulations (requests from tax offices, courts, police, etc.).
・When necessary for the protection of a person's life, body, or property, and it is difficult to obtain the individual's consent.
・When necessary for improving public health or promoting the healthy development of children, and it is difficult to obtain the individual's consent.
・When necessary for national or local government agencies to execute duties prescribed by law.
・When entrusting business such as product delivery or payment for the execution of business.
・When the sensitive personal information in question is made public by the individual, a national agency, a local government, or parties listed in the Personal Information Protection Act.
・Other cases equivalent to the above as stipulated by the Cabinet Order. Furthermore, when personal data is provided to or received from a third party based on laws, the Company will perform the necessary confirmation and create/store records.

2. The Company may provide personal information or personally referable information to third parties in foreign countries in connection with the use of advertisement distribution, access analysis, cloud services, etc. In such cases, the Company will take necessary measures in accordance with the Act on the Protection of Personal Information and other relevant laws.

3. The Company may jointly use personal data as follows:
(1) Items of personal data for joint use: Name, address, phone number, email address, transaction history, etc.
(2)Scope of joint users: The Company and its group companies.
(3)Purpose of joint use: Service provision, customer support, marketing analysis, etc.
(4)Entity responsible for management: GT Holdings Co., Ltd.

Article 7 (Use of Cookies and Similar Technologies)

The Company uses Cookies and similar technologies (Web beacons, local storage, etc.) for the following purposes:
・Purpose of Cookies: Improving site convenience (maintaining login status, shopping carts, etc.).
・Analysis of service usage: Access analysis (Google Analytics, etc.).
・Measurement and optimization of advertising effectiveness: Google Ads, Meta Ads, LINE Ads, etc.
・Provision to third parties: Cookie information may be shared with third-party services (Google LLC, Meta Platforms, etc.) for the purpose of ad distribution and measurement. The information contained in Cookies only relates to access to the Company's or other sites and does not include personal information such as name, address, email address, or phone number. Therefore, individuals cannot be identified from the information stored in Cookies. You can restrict the use of Cookies through your browser settings, though some services may become unavailable. The Company treats information acquired through Cookies as "personally referable information" and may use it in association with personal information as necessary.

Article 8 (Management and Protection Measures for Personal Information)

The Company manages and protects personal information appropriately by implementing the following safety management measures:

・Organizational measures: Appointment of responsible persons, authority management, and system development.
・Personnel measures: Employee education and acquisition of pledge letters.
・Physical measures: Entry/exit management and management of equipment/documents.
・Technical measures: Access control, encryption, and countermeasures against unauthorized access.
・Supervision of contractors: Appropriate supervision of external contractors.

Article 9 (Retention Period of Personal Information)

The Company retains personal information only for the period necessary to achieve the purpose of use. When it is no longer necessary to use the information, it will be promptly deleted or erased, except where preservation is required by law.

Article 10 (Disclosure of Personal Information)

When requested by an individual to disclose their personal information, the Company shall disclose it to them without delay. However, the Company may not be able to fulfill requests for disclosure, correction, or suspension of use if any of the following apply (please note that fees and submitted documents cannot be returned even if a request is denied):

・If the identity of the requester cannot be confirmed.
・If requested by an agent and proper power of attorney cannot be confirmed.
・If there are deficiencies in the submitted documents that are not corrected within the specified period.
・If the required fee is not paid.
・If disclosure poses a risk of harming the life, body, property, or other rights and interests of the individual or a third party.
・If disclosure poses a risk of significant hindrance to the Company's business operations.
・If disclosure poses a risk of violating other laws such as the Secondhand Articles Dealer Act.
・If there is no obligation to disclose under the Personal Information Protection Act.

[Disclosure Request Procedure] 
To request disclosure, please contact the email address in Article 18, provide the specified details, and send the necessary documents to the Company.

・User name, address, phone number
・ Content of the disclosure request.
・Identity verification documents

Please submit a copy of one of the following:
・Driver’s License
・Passport (page with photo and name)
・MyNumber Card (Front side only; do not include the side with the ID number)
・Certificate of Residence (issued within 3 months, without the individual identification number)

In addition to the identification documents for the individual, please submit the following original documents:
・Power of Attorney (stamped with the individual's registered seal).
・Seal Registration Certificate of the individual (for the seal used on the Power of Attorney).
・For legal representatives: Original or copy of documents proving the legal representative status.
・Identity verification documents for the representative (one of: Driver’s License, Passport, MyNumber Card front side only, or Certificate of Residence without the ID number).

Please mail the required documents to our inquiry desk. Note that a prescribed fee may apply. Our response will be sent via a method that allows for confirmation of receipt (such as registered mail)

Article 11 (Correction and Deletion of Personal Information)

If the personal information held by the Company is incorrect, the user may request correction, addition, or deletion ("Correction, etc.") according to the Company's procedures. If the Company determines it is necessary to respond to the request, it will perform the Correction, etc., without delay and notify the user.

Article 12 (Suspension of Use, etc. of Personal Information)

Users may request the suspension of use or erasure ("Suspension of Use, etc.") of their personal information if it is being used beyond the scope of the purpose of use or was acquired by fraudulent means. The Company will conduct an investigation and, if necessary, perform the Suspension of Use, etc., without delay. If such action is too costly or difficult, alternative measures to protect the user's rights may be implemented.

Article 13 (Personal Information of Minors)

Minors using this service must provide personal information only after obtaining the consent of a parent or guardian. If consent cannot be confirmed, the provision of services may be restricted.

Article 14 (Disclaimer)

While the Company takes every precaution to protect personal information, it assumes no responsibility for leakage caused by unauthorized access by third parties or viruses, unless there is intentional misconduct or gross negligence by the Company. The Company is not responsible for the handling of information on external websites linked from this site. The Company also assumes no responsibility for information voluntarily disclosed by the user (posts on SNS, message boards, etc.).

Article 15 (Changes to and Notification of Privacy Policy)

The Company may change the contents of this Privacy Policy as necessary due to changes in laws or business operations. Important changes will be announced on the Company's website and will take effect at the time they are posted.

Article 16 (Personal Information Protection System)

The Company will appoint a Chief Information Officer and establish a system for personal information protection to ensure appropriate management.

Article 17 (Response to Leakage, etc. of Personal Information)

In the event of leakage, loss, or damage to personal information, the Company will promptly investigate the facts in accordance with laws, strive to prevent further damage, determine the cause, and prevent recurrence. We will also promptly report to the Personal Information Protection Commission and notify individuals as required by law.

Article 18 (Inquiry Desk)

For inquiries regarding this policy, please contact:
Eight Co., Ltd. General Affairs Department
Address: 5F WES Bldg., 4-2-12 Jingumae, Shibuya-ku, Tokyo 150-0001
E-mail: company@eight-inc.co.jp
TEL: 03-6804-6992

Established: July 1, 2025 
Revised: May 1, 2026