1. Scope

This Policy applies to personal information we obtain in connection with providing the Service, including when users access the Service, register an account, request delivery, or contact us.

2. Information We Collect

We collect the following information to the extent necessary to operate the Service:

• Name and nickname
• Age category and information required for age verification
• Address and shipping information
• Email address
• Service usage history and acquired-item history
• Coin purchase history and balance
• Logs and records used to prevent fraudulent use
• Details of inquiries
• Usage information collected through access analytics and advertising measurement, including cookies

Payment information such as card numbers may be managed by payment service providers and may not be held directly by us.

3. How We Collect Information

We collect personal information through the following methods:

• Information entered during registration, delivery requests, and inquiries
• Identity documents presented during age-verification procedures
• Operation history and logs recorded while the Service is used
• Automatic collection through access analytics and measurement tags

These activities are carried out within the scope of the procedures established in our Terms of Service.

4. Purposes of Use

We use collected personal information for the following purposes:

1. Providing and operating the Service and shipping acquired items
2. Responding to inquiries, verifying identity, and managing age categories
3. Preventing fraudulent use, multiple accounts, and impersonation
4. Investigating and recording incidents and other problems
5. Determining and implementing measures under the Terms of Service
6. Delivering advertisements, notices, and campaign information concerning the Service
7. Using information for advertising and promotion of the Service and related services
8. Performing access analytics and advertising measurement to improve the Service and analyze demand

For purposes 6 through 8, information may be processed into statistics that do not identify individuals.

5. Joint Use

We may jointly use information with group companies and business partners within the following scope:

• Information jointly used
  Name, age category, email address, usage history, acquired-item information, inquiry information, and statistical information
• Parties jointly using the information
  Our group companies and business partners associated with the Service
• Purposes of joint use
  Service operation, customer support, advertising and promotion, analysis, and improvement
• Party responsible for management
  MIX Co., Ltd. (株式会社ミックス)

Joint use is limited to the extent necessary to achieve these purposes.

6. Possible Provision or Sale to Third Parties

We may provide or sell personal information, or statistical or anonymized data, to third parties only in the following cases:

• When required by law
• When provision to advertising, shipping, payment, or other service providers is necessary to perform business operations
• When necessary to prevent or investigate fraudulent use
• When providing or selling statistical data or anonymously processed information

If information is sold or provided in a form that can identify an individual, we will do so only after implementing appropriate contractual controls and security measures.

7. Outsourcing

We may outsource some shipping, payment processing, system operation, advertising delivery, analytics, and other activities to external service providers. We appropriately supervise such providers.

8. Access Analytics and Advertising Measurement

We use access analytics and advertising measurement tools in the Service for the following purposes:

• Understanding usage
• Improving convenience
• Optimizing advertising delivery
• Preventing fraudulent use

These tools may collect information through cookies and similar technologies. Users may be able to disable them through browser or other settings.

9. Retention Period

• While the account remains active
• For the period required by law or to handle disputes

Information that no longer needs to be retained will be deleted or anonymized in due course.

10. Security Measures

We appropriately manage personal information through measures including:

• Access-control management
• Account management and fraud-detection operations
• Management of outsourced service providers
• Log management

11. Information Concerning Minors

• We handle such information in accordance with our age-verification procedures.
• Consent by a legal representative is handled as provided in the Terms of Service.

12. Disclosure, Correction, Deletion, and Other Requests

Users may request the following through our prescribed procedures:

• Disclosure
• Correction
• Suspension of use or deletion

We may be unable to comply where permitted or required by law.

13. External Services

Each provider's own policy applies to the handling of information within services offered by payment providers, advertising providers, and other external providers.

14. Revisions

We may revise this Privacy Policy in response to changes in laws or the Service. Revisions will be announced within the Service.

15. Contact

For inquiries concerning the handling of personal information, please contact:

• Operator: MIX Co., Ltd. (株式会社ミックス)
• Email: support@orista.jp