Privacy Policy | NEXT WORLD Inc.

Article 1 (Information Collected)

1.1
The Company may collect the following information in connection with the use of this Website, inquiries, consultations, contracts, transactions, and other business activities of the Company:
1. name;
2. company name, organization name, department, and job title;
3. e-mail address, telephone number, and other contact details;
4. the content of inquiries, consultations, or requests;
5. information necessary for the performance of contracts, transactions, invoicing, payment, and other operations;
6. the date and time of sending and receiving e-mail, e-mail headers, and other information incidental to communications;
7. IP addresses, browser types, access dates and times, referrer URLs, and other access logs recorded in connection with browsing this Website;
8. other information provided to the Company by the individual;
9. information necessary for preliminary screening, including information concerning relationships with anti-social forces, information concerning corporations and other organizations, and information concerning commercial creditworthiness, lawfully obtained from information published by governmental agencies and other bodies, credit research companies, database services, or other third parties; and
10. where meetings, business discussions, or other consultations are audio- or video-recorded, such audio and video and any records prepared on the basis thereof.
1.2
The Company collects personal information and other information by lawful and fair means and within the scope necessary to achieve the purposes of use.
1.3
Where the Company makes an audio or video recording under Section 1.1(10), the Company shall give prior notice to that effect.
1.4
The Company does not collect special care-required personal information, except with the prior consent of the individual or where permitted by laws and regulations.

Article 2 (Purposes of Use)

2.1
The Company uses the personal information and other information it collects for the following purposes:
1. to respond and communicate in relation to inquiries, consultations, or requests;
2. to confirm the content of a request, the nature of the matter, its compatibility with the Company’s services, conflicts of interest, legal compliance, information management, and other matters, and to conduct a preliminary review and consider whether to respond;
3. to conclude contracts, verify identity, perform transactions, communicate in the course of business, deliver work product, invoice, receive payment, and otherwise manage transactions;
4. to provide, in accordance with applicable laws and regulations, information regarding the Company’s services, materials, meetings, and other communications relating to the content of an inquiry or consultation;
5. to accurately record meetings, business discussions, and other consultations, prepare minutes and other records, and verify relevant facts, agreed matters, instructions, and the course of communications and actions taken;
6. to improve the quality of the Company’s services, improve its operations, refine its research and analysis methods, and improve its inquiry-handling framework;
7. to operate, maintain, address failures in, manage access to, and ensure the security of this Website and the Company’s information systems;
8. to prevent, investigate, and respond to unauthorized access, fraudulent conduct, security threats, and other acts that harm the rights or interests of the Company or any third party;
9. to comply with laws and regulations and to respond to lawful requests from administrative agencies, courts, or other public authorities;
10. to exercise the Company’s rights or perform its obligations; and
11. to carry out operations incidental or related to any of the foregoing.
2.2
The Company does not handle personal information beyond the scope necessary to achieve the purposes set out in the preceding paragraph, except with the prior consent of the individual or where permitted by laws and regulations.
2.3
Where the Company changes a purpose of use, it shall do so within a scope reasonably related to the purpose of use before the change, and shall announce the changed purpose of use by posting on this Website or by other appropriate means.
2.4
If you do not wish to receive e-mail sent for the purpose set out in Section 2.1(4), please notify the contact point set out in Article 13 or the contact details indicated in the relevant e-mail. The Company will cease sending such information, except for communications required by laws and regulations or necessary for the performance of a contract.

Article 3 (Inquiries and Transmission of Information)

3.1
Inquiries through this Website shall be accepted via the e-mail address designated by the Company or by such other method as the Company designates.
3.2
The Company handles inquiries it receives and their content within the scope of the purposes of use set out in this Policy.
3.3
Users should not transmit the following information before concluding a non-disclosure agreement or other agreement with the Company:
1. trade secrets and other material confidential information;
2. Japan’s Individual Number (“My Number”), passwords, authentication codes, or other authentication credentials;
3. information subject to a confidentiality obligation owed to a third party;
4. information whose transmission or disclosure is restricted by laws, regulations, or contract; and
5. personal information or material information exceeding the scope necessary for an ordinary inquiry.
3.4
For other conditions relating to inquiries, please refer to the separately established Website Terms of Use.
3.5
As of the present time, this Website does not require the entry of personal information into any external inquiry form operated by a third party.
3.6
E-mails sent to or from the Company may pass through servers operated by providers of the e-mail-related services used by the Company.
3.7
The Company may use services of external providers it has selected for the operation of this Website and its servers, security measures, data storage, communications, and other operations.
3.8
In the cases set out in the preceding two paragraphs, the Company exercises necessary and appropriate supervision over its service providers in accordance with laws and regulations.

Article 4 (Provision of Personal Data to Third Parties)

4.1
The Company does not provide personal data to third parties, except with the prior consent of the individual or in any of the following cases:
1. where required by laws or regulations;
2. where necessary to protect the life, body, or property of a person and it is difficult to obtain the consent of the individual;
3. where specially necessary to improve public health or promote the sound development of children and it is difficult to obtain the consent of the individual;
4. where it is necessary to cooperate with a national government organ, a local government, or a party entrusted thereby in carrying out affairs prescribed by laws or regulations, and obtaining the consent of the individual is likely to impede the performance of such affairs; and
5. where otherwise permitted under the APPI or other laws and regulations.
4.2
The following cases do not constitute provision of personal data to a third party under the APPI:
1. where the handling of personal data is entrusted within the scope necessary to achieve the purposes of use;
2. where personal data is provided in connection with a merger, corporate split, business transfer, or other succession of business; and
3. other cases that do not constitute provision to a third party under laws and regulations.
4.3
As of the present time, the Company does not provide personal data to third parties under the opt-out method prescribed in Article 27, Paragraph 2 of the APPI.
4.4
Where the Company provides personally referable information to a third party and it is anticipated that the third party will acquire such information as personal data, the Company shall take the confirmations and other measures required under the APPI and other applicable laws and regulations.
4.5
Where the Company creates or handles pseudonymously processed information or anonymously processed information, it shall do so appropriately in accordance with the APPI and other applicable laws and regulations.

Article 5 (Entrustment of the Handling of Personal Information)

5.1
The Company may entrust all or part of the handling of personal information or personal data to external service providers within the scope necessary to achieve the purposes of use.
5.2
The Company appropriately selects service providers after confirming their information management framework, the content of their services, and other necessary matters.
5.3
The Company confirms, by contract, terms of service, published security documentation, or other appropriate means, matters concerning the handling of personal information, security control, confidentiality, sub-entrustment, incident response, and other necessary matters, and exercises necessary and appropriate supervision over its service providers.

Article 6 (Handling of Personal Data in Foreign Countries)

6.1
Personal data may be handled in foreign countries in connection with the provision, maintenance, support, data storage, or other operations of external services used by the Company.
6.2
Where personal data is handled in a foreign country, the Company ascertains the personal information protection system of that country and other necessary information, and takes necessary and appropriate security control measures in accordance with laws and regulations.
6.3
Where the Company provides personal data to a third party located in a foreign country, it shall do so by obtaining the prior consent of the individual, by providing the data to a third party that has established a system conforming to the standards prescribed under the APPI, or by another method permitted under applicable laws and regulations.
6.4
Upon a request made by the individual pursuant to laws and regulations, the Company shall provide information regarding the handling of personal data in foreign countries in accordance with laws and regulations.

Article 7 (Security Control Measures)

7.1
The Company takes necessary and appropriate measures for security control, including the prevention of leakage, loss, or damage of the personal information and personal data it handles.
7.2
An outline of the security control measures taken by the Company is as follows:
1. establishment of a basic policy and internal rules regarding the handling of personal information;
2. clarification of the persons responsible for and in charge of handling personal information and of their authority;
3. training for officers, employees, and other relevant persons who handle personal information, and measures to ensure confidentiality;
4. confirmation, inspection, and review of the status of the handling of personal information;
5. appropriate management of areas, equipment, documents, and recording media in which personal information is handled;
6. measures against theft, loss, unauthorized removal, and other risks relating to equipment and media in which personal information is handled;
7. technical security control measures, including access control, user authentication, protection of communications, anti-malware measures, and measures against unauthorized access;
8. appropriate selection and supervision of service providers;
9. understanding of the external environment: where personal data is handled in a foreign country, the Company ascertains the personal information protection system of that country and takes necessary and appropriate measures for security control; and
10. establishment of a framework for reporting, investigating, preventing the spread of damage, preventing recurrence, and responding in accordance with laws and regulations in the event of a leakage or other incident.
7.3
Where a leakage, loss, damage, or other situation involving personal data occurs and a report or notification is required under the APPI or other laws and regulations, the Company shall report to the Personal Information Protection Commission, notify the individual, and take other necessary action.
7.4
Where the Company receives an inquiry from an individual regarding its security control measures, it shall respond in accordance with applicable laws and regulations. However, the Company may decline to disclose matters that may interfere with security control or that are otherwise not required to be disclosed under applicable laws and regulations.

Article 8 (Cookies, Access Logs, and External Services)

8.1
As of the present time, this Website does not conduct behavioral analysis, advertising delivery, or access analysis using cookies.
8.2
For the provision and display of this Website, ensuring security, preventing unauthorized access, and other purposes, the following information may be automatically recorded on the web server and elsewhere:
1. IP addresses;
2. browser and device types;
3. operating systems;
4. access dates and times;
5. pages viewed;
6. referrer URLs;
7. information regarding communications or errors; and
8. other access logs ordinarily recorded by a web server.
8.3
The information set out in the preceding paragraph is used for the operation, maintenance, and failure response of this Website, confirmation of usage status, ensuring security, and responding to fraudulent conduct.
8.4
The information set out in Section 8.2 may constitute personal information where it can be readily collated with other information held by the Company to identify a specific individual. Where it constitutes personal information, the Company handles it in accordance with this Policy.
8.5
This Website may load web fonts and other display resources from the servers of external services. In such cases, communication occurs from your device to the relevant service provider, and IP addresses, information regarding your browser and device, access dates and times, information regarding the requested resource, and other information necessary for the communication may be transmitted. Such information is handled in accordance with the privacy policy and other conditions established by each service provider.
8.6
If the Company introduces or changes cookies, access analysis tools, advertising delivery services, external content delivery services, or other external services in the future, the Company shall announce the information collected or transmitted, the recipient, the purposes of use, and the method of disabling such services in this Policy or on this Website.

Article 9 (Requests Concerning Retained Personal Data)

9.1
In accordance with the APPI, individuals may make the following requests with respect to retained personal data held by the Company:
1. notification of the purpose of use;
2. disclosure;
3. correction, addition, or deletion of content;
4. suspension of use or erasure;
5. suspension of provision to third parties; and
6. disclosure of records of provision to third parties.
9.2
If you wish to make a request, please contact the contact point set out in Article 13. The Company will inform you of the request procedure, the required documents, and the identity verification method.
9.3
In order to confirm that the requesting party is the individual or a lawful agent, the Company requires submission of a copy of an identification document designated by the Company. In the case of a request by an agent, the Company additionally requires a power of attorney prepared by the individual and a copy of the agent’s identification document.
9.4
Where an identification document contains a registered domicile, an Individual Number, a health insurance insured-person symbol or number, or other information unnecessary for identity verification, please redact such information before submission.
9.5
After conducting the confirmations set out in the preceding two paragraphs, the Company shall respond without delay in accordance with laws and regulations, and shall communicate the result by postal mail or e-mail.
9.6
The Company may decline all or part of a request where it is not obliged to comply under laws or regulations, where compliance is likely to harm the rights or interests of the individual or a third party, where compliance is likely to seriously impede the proper execution of the Company’s business, or in other cases prescribed by laws and regulations. In such cases, the Company shall notify the individual to that effect and of the reasons therefor in accordance with laws and regulations.
9.7
The Company does not, in principle, charge a fee for requests concerning retained personal data. However, where postage or other actual costs arise, the Company will inform you in advance.

Article 10 (Accuracy and Retention Period of Personal Information)

10.1
The Company endeavors to keep personal data accurate and up to date within the scope necessary to achieve the purposes of use.
10.2
The Company does not retain personal information beyond the period necessary to achieve the purposes of use, except where retention is required by laws or regulations, by contract, or for business purposes.
10.3
The Company sets and manages appropriate retention periods in consideration of the type of information collected, the purposes of use, retention periods required by laws, regulations, or contract, and other relevant circumstances.
10.4
Where personal information is no longer required, the Company erases or disposes of it by a method appropriate to the nature of the information and the storage medium.

Article 11 (Personal Information of Minors)

11.1
Where a minor provides personal information to the Company, the minor should obtain the consent of a person with parental authority or another statutory representative where necessary, taking into account the minor’s age and capacity to understand and the nature of the information to be provided.
11.2
Where the Company considers it necessary, it may confirm whether such consent has been obtained.

Article 12 (Revision of this Policy)

12.1
The Company may revise this Policy in response to amendments to laws or regulations, changes in the Company’s business activities, the functions of this Website, the methods of handling information, or otherwise.
12.2
Except where laws or regulations require otherwise, the revised Policy shall be announced by posting on this Website or by other appropriate means, and shall apply from the effective date indicated in the revised Policy.
12.3
This Policy indicates the date of enactment, the date of the most recent revision, and, where necessary, the effective date.
12.4
With respect to changes for which the consent of the individual is required under laws and regulations, the Company shall obtain the necessary consent in accordance with those laws and regulations.

Article 13 (Company Information and Contact Point)

Company name: NEXT WORLD Inc.
Address: Ginza MADISON Building 4F
8-5-4 Ginza, Chuo-ku
Tokyo 104-0061, Japan
Representative: Takashi Hayashi
Contact point for the handling of personal information, requests concerning retained personal data, complaints, and consultations: NEXT WORLD Inc., Personal Information Inquiry Desk
Telephone: +81-3-5568-0123 (main)
Hours: 9:00 to 17:00 on weekdays
(excluding Saturdays, Sundays, national holidays, and Company holidays)
E-mail: info@nextworld.co.jp
Date of enactment: March 5, 2026