Privacy Policy

Article 1 (Definition of Personal Information)

In this Policy, "personal information" means personal information as defined in Article 2, Paragraph 1 of the Personal Information Protection Act: information about a living individual that can identify a specific individual by name, date of birth, address, telephone number, contact details or other descriptions contained in it, and information that contains an individual identification code.

Article 2 (Scope of This Policy)

This Policy applies to personal information that the Group obtains, uses and manages through all of its business activities, including the following.

(1) Internet services provided through websites, applications, social media, online shops and other electronic means

(2) Sales of alcoholic beverages and related products (including online sales, the airport store "PRIME SAKE", pop-up stores, fairs and sales at department stores)

(3) Operation of restaurants, tasting spaces, experience facilities and other stores

(4) Planning, hosting, operating and accepting registrations for events, celebrations, festivals, tours and seminars (including "Wakate no Yoake")

(5) Planning, hosting, operating, accepting entries for and judging awards, contests and recognition programs (including "Sakaya Taisho")

(6) Management and operation of sake breweries and other companies, M&A, business succession, group company management and holding company operations

(7) Communication and transactions with business partners, alliance partners, sponsors, media, performers, speakers, lecturers, judges and others

(8) Recruitment, staff development, training and internships

(9) Communication with and responses to shareholders, investors, financial institutions and government agencies

(10) All work incidental or related to the items above

Article 3 (Personal Information We Obtain)

The personal information the Company obtains, depending on how it is obtained and the purpose of use, is as follows.

(1) Name, phonetic reading of name, date of birth, gender, age and nationality

(2) Address, telephone number, email address, employer, organization and job title

(3) Credit card number, bank account number and payment information (including information obtained through payment service providers)

(4) Delivery information, purchase history, transaction history and store visit history

(5) Registration information for events and awards, entries, comments and survey responses

(6) Account information for web services (login ID, password, nickname, profile image and the like)

(7) Cookies, access logs, IP addresses, device information, browser information and location information

(8) Photographs, video and audio (including recordings at events and stores, and social media posts)

(9) Résumés, CVs and interview records submitted when applying for a job

(10) Other information necessary to achieve the purposes of use set out in this Policy

Article 4 (How We Obtain Personal Information)

The Company obtains personal information in the following ways.

(1) When users enter or submit information on the Company's websites, applications, application forms, inquiry forms and the like

(2) Through procedures such as purchasing products or tickets, registering for events, entering awards, using stores and entering into business contracts

(3) Through exchanging business cards, meetings, telephone, email, post, messages via social media and the like

(4) Automatically, through cookies, access logs, analytics tools and the like when websites are used

(5) Through photography, audio and video recording, visitor management and the like at event venues, stores and fairs

(6) By receiving information from business partners, joint venture partners, payment service providers, delivery companies and other business partners of the Company

(7) From publicly available information (registration information of public bodies, news reports, corporate websites, social media and the like)

(8) By receiving résumés, CVs and the like from job applicants

Article 5 (Purposes of Use)

The Company uses the personal information it obtains for the following purposes.

(1) To provide and operate the Group's services, products, events, awards, stores and other businesses

(2) Sales of products, tickets and participation rights, order processing, payment processing, delivery and after-sales support

(3) Planning, operating, accepting registrations for, holding drawings for, notifying winners of, presenting awards at, announcing results of, recording, publicizing and reporting on events, awards and fairs

(4) Reservation management, visitor service, identity verification and safety management at stores, restaurants and experience facilities

(5) Communication with and performance of contracts with business partners, alliance partners, sponsors, performers, lecturers, judges and others

(6) Responding to inquiries, requests, complaints and disputes from users (including identity verification)

(7) To inform users of new services, new products, campaigns, events, email newsletters, direct mail and the like

(8) For maintenance, important notices, emergency contact and product recalls

(9) Responding to violations of the terms of use, individual terms or laws, unauthorized use and use for improper purposes

(10) Billing, collection of unpaid amounts and credit management for paid services

(11) Analysis for marketing, market research, product development and service improvement (including processing into statistical data that does not identify individuals)

(12) Recruitment, personnel management, staff development and training

(13) Providing information to shareholders and investors, shareholder management, investor relations and reporting required by law

(14) Age verification in the sale of alcoholic beverages, the duties of liquor sales managers, and compliance with the Liquor Tax Act and other related laws

(15) Safety management, prevention of unauthorized use, crime prevention, dispute handling and legal compliance

(16) Joint use within the Group (as set out in Article 8)

(17) Purposes incidental or related to the items above

Article 6 (Changes to Purposes of Use)

1. The Company may change the purposes of use of personal information to the extent that the new purposes are reasonably recognized as related to the previous purposes.

2. If the Company changes the purposes of use, it will notify the individual of the new purposes by a method prescribed by the Company, or publish them on the Company's website.

Article 7 (Provision of Personal Information to Third Parties)

1. The Company will not provide personal information to a third party without the prior consent of the individual, except in the following cases.

(1) When required by law

(2) When it is necessary to protect a person's life, body or property and it is difficult to obtain the individual's consent

(3) When it is especially necessary to improve public health or promote the healthy development of children and it is difficult to obtain the individual's consent

(4) When it is necessary to cooperate with a national agency, local government or a party entrusted by them in carrying out duties prescribed by law, and obtaining the individual's consent is likely to interfere with those duties

(5) When permitted by the Personal Information Protection Act or other laws, such as provision to academic research institutions

2. Notwithstanding the preceding paragraph, recipients of information in the following cases are not considered third parties.

(1) When the Company entrusts all or part of the handling of personal information within the scope necessary to achieve the purposes of use (see Article 9)

(2) When personal information is provided as part of a business succession due to a merger, company split, business transfer or other reason

(3) When personal information is jointly used with Group companies (see Article 8)

Article 8 (Joint Use of Personal Information)

1. The Company may jointly use users' personal information with Group companies (including the Company's parent company, subsidiaries, affiliates and brewery companies under its umbrella) as follows.

(1) Items of personal information jointly used: the items set out in Article 3

(2) Scope of joint users: Group companies (the current list of companies will be posted on the Company's website)

(3) Purposes of joint use: the purposes of use set out in Article 5

(4) Party responsible for managing the jointly used information: camo Inc. (address and representative as stated at the end of this Policy)

2. If the scope of joint users or the purposes of use change, the Company will notify the individual by a method prescribed by the Company, or publish the change on the Company's website.

Article 9 (Entrusting the Handling of Personal Information)

Within the scope necessary to achieve the purposes of use, the Company may entrust all or part of the handling of personal information to delivery companies, payment service providers, printing companies, system operators, event operation contractors, call centers, recruitment agencies, accounting firms, law firms and other contractors. In such cases, the Company will exercise necessary and appropriate supervision so that the contractor handles personal information appropriately.

Article 10 (Provision to Third Parties in Foreign Countries)

1. Within the scope necessary to achieve the purposes of use, the Company may provide personal information to third parties in foreign countries (including cloud service providers, SaaS providers and overseas contractors).

2. In doing so, in accordance with the Personal Information Protection Act and other related laws, the Company will take the necessary steps, such as obtaining the individual's consent, providing information on how the third party in the foreign country handles personal information, or confirming that the third party has taken measures equivalent to those required by the Personal Information Protection Act.

3. The name of the recipient's country, information on that country's personal information protection system and similar information will be disclosed at the request of the individual.

Article 11 (Handling of Personally Referable Information)

The Company may handle personally referable information such as cookies, access logs, IP addresses, device identifiers, browsing history and location information. If such information is to be provided to a third party and the third party is expected to obtain it as personal data, the Company will confirm the individual's consent before providing it, in accordance with the Personal Information Protection Act and other related laws.

Article 12 (Handling of Pseudonymously and Anonymously Processed Information)

1. The Company may process personal information to create and use pseudonymously processed information or anonymously processed information.

2. The Company will appropriately create, use, provide and securely manage pseudonymously processed information in accordance with the Personal Information Protection Act and other related laws.

3. When creating anonymously processed information, the Company will process it appropriately so that no specific individual can be identified and the original personal information cannot be restored, and will publish the categories of information about individuals contained in it.

Article 13 (Handling of Cookies and Similar Technologies)

1. The Company's websites and applications use cookies, local storage, analytics tools (including Google Analytics) and advertising services to provide services, analyze usage, optimize advertising, prevent unauthorized use and for similar purposes.

2. Users can refuse cookies through their browser settings, but some features of the services may then become unavailable.

3. The use of Google Analytics is subject to Google's privacy policy and terms of use. For details, please see Google's website.

Article 14 (Security Measures)

To prevent leakage, loss or damage of personal information and otherwise manage it securely, the Company takes necessary and appropriate measures, including the following.

(1) Organizational measures: appointing a personal information protection manager, establishing handling rules, clarifying who is responsible and who handles information, and conducting regular inspections and audits

(2) Human measures: education and training for employees, and imposing confidentiality obligations

(3) Physical measures: controlling entry to work areas, locking up documents and electronic media, and preventing theft or loss of equipment and media

(4) Technical measures: access control, protection against unauthorized access, encryption of communications, protection against malicious software, and recording and analyzing access logs

Article 15 (Retention Period)

1. The Company retains personal information only for as long as necessary to achieve the purposes of use.

2. Where a retention period is set by law, the Company retains the information for that period in accordance with the law.

3. If a user requests deletion of personal information, the Company will delete it without delay in accordance with Article 16. However, information that must be retained by law may not be deleted during the required retention period.

Article 16 (Requests for Disclosure, Correction, Suspension of Use and the Like)

1. Users may request the Company to disclose, correct, add to, delete, suspend the use of, erase, or stop providing to third parties, their own personal information held by the Company ("Disclosure and Related Requests").

2. Disclosure and Related Requests must be made to the contact point stated at the end of this Policy, following the Company's prescribed procedure, with documents confirming that the requester is the individual or their representative.

3. The fee for a disclosure or related request is 1,000 yen per request (excluding consumption tax). However, requests to suspend use, erase or stop provision to third parties are free of charge.

4. When the Company receives a Disclosure and Related Request, it will carry out the necessary investigation without delay and respond based on the results, in accordance with the Personal Information Protection Act and other related laws. However, the Company may decline to disclose all or part of the information if disclosure would fall under any of the following.

(1) It is likely to harm the life, body, property or other rights or interests of the individual or a third party

(2) It is likely to seriously interfere with the proper conduct of the Company's business

(3) It would otherwise violate the law

5. As a rule, the Company does not disclose information other than personal information, such as history information and attribute information.

Article 17 (Handling of Age Verification Information)

1. When selling, serving or offering tastings of alcoholic beverages, or providing alcohol-related services, the Company may obtain personal information such as date of birth, age and identification documents in order to comply with related laws, including the Act Prohibiting Minors from Drinking Alcohol, the Liquor Tax Act and the Act on Liquor Business Associations.

2. Such information is used only for age verification, liquor sales management, compliance with related laws and prevention of unauthorized use, and is deleted or anonymized without delay once the purpose has been achieved.

Article 18 (Personal Information Protection Manager)

The person responsible for managing the handling of personal information at the Company is the Company's Representative Director. Complaints, consultations and inquiries are accepted at the contact point stated at the end of this Policy.

Article 19 (Changes to This Policy)

1. The Company may change this Policy due to amendments to laws, changes in its business or other reasons.

2. When making a material change to this Policy, the Company will announce the new content and its effective date before the effective date, by posting on the Company's website, sending emails or other appropriate methods.

3. For minor changes, posting on the Company's website will serve as notice.

4. The revised Policy takes effect when it is posted on the Company's website or at a time specified by the Company.