Privacy Policy

Article 1 (Scope)

1. This Policy applies to the handling of users’ personal information and related information that the Company obtains in connection with the use of the Service, account registration, payment, acquisition and delivery of items, responses to inquiries, and the provision of the Service in other respects.
2. The Company will handle personal information and related information appropriately in accordance with the Act on the Protection of Personal Information (the “Act on the Protection of Personal Information”), other applicable laws and regulations, and this Policy.

Article 2 (Information We Collect)

The Company may collect the following information to the extent necessary to operate the Service.

1. Registration information: Name, nickname, user ID, email address, phone number, date of birth, age category, and other registration information
2. Identity verification information: Identity documents, age verification materials, and other information necessary for identity verification
3. Delivery-related information: Name, address, phone number, delivery destination, delivery history, delivery status, and information necessary for customs procedures
4. Service usage information: Login history, operation history, history of acquiring, exchanging, storing, and delivering items, and history of purchasing, granting, spending, balance, and expiration of coins
5. Payment-related information: Payment amount, payment date and time, payment result, transaction identifiers, refund history, chargeback information, and information about payment methods
6. Credit card-related information: Card brand, last four digits of the card number, expiration date, payment method identifiers, and other portions of card information provided by payment service providers
7. Technical information: IP address, device information, browser information, OS information, cookies, advertising identifiers, access date and time, access logs, and other information about the usage environment
8. Fraud prevention information: Relationships among multiple accounts, identifiers related to payment methods, and information necessary for detecting and investigating unauthorized use
9. Inquiry information: Content of inquiries, response history, submitted materials, and other information necessary for customer support
10. Advertising and analytics information: History of viewing and clicking advertisements, on-site behavior history, advertising effectiveness measurement information, and other information necessary for marketing
11. Other information: Information necessary for providing and properly operating the Service

The full credit card number and security code are managed by payment service providers, and the Company does not directly collect or store them. The Company may collect, store, and display a portion of the card information provided by payment service providers.

Article 3 (Methods of Collecting Information)

The Company collects information by the following methods.

1. Information that users enter or submit when registering an account, making a payment, requesting delivery, making an inquiry, and in similar situations
2. Information submitted through identity verification, age verification, and other procedures prescribed by the Company
3. Automatic collection of operation history, access logs, and similar information in connection with use of the Service
4. Collection through cookies, access analysis tools, advertising measurement tags, and similar technologies
5. Collection, to the extent necessary, from payment service providers, delivery carriers, authentication providers, and other external providers
6. Other lawful and fair methods

Article 4 (Purposes of Use)

The Company uses the information it collects for the following purposes.

1. Providing, operating, maintaining, and improving the Service
2. Account registration, identity verification, age verification, and account management
3. Purchasing, granting, and spending coins, managing balances, managing expiration, and managing transaction history
4. Acquiring, exchanging, storing, and shipping items, confirming delivery status, and handling customs procedures for international delivery
5. Payment processing, managing payment methods, displaying and selecting registered payment methods, and simplifying payment procedures
6. Detecting, investigating, and preventing fraudulent payments, chargebacks, impersonation, multiple accounts, bot activity, and other unauthorized use
7. Verifying violations of the Terms of Service, restricting use of accounts, investigating transactions, and handling disputes
8. Responding to inquiries, complaints, refund requests, and other customer support matters
9. Responding to system failures, security issues, and other problems
10. Providing notices of advertisements, campaigns, events, and various information relating to the Service and related services
11. Communicating by email, SMS, push notifications, in-service notifications, and other methods
12. Improving the Service by analyzing usage history, purchase trends, access conditions, and similar data, optimizing advertisement delivery, and carrying out marketing measures
13. Preparing statistical information, analyzing demand, and planning and developing services
14. Fulfilling legal obligations, responding to administrative agencies and others, and exercising or protecting rights
15. Other purposes incidental to the above purposes of use

Article 5 (Joint Use)

When the Company jointly uses personal data with group companies or business partners, it will, in accordance with the Act on the Protection of Personal Information, publish in advance, through the Service or other appropriate means, or otherwise make readily accessible to the individual, the necessary matters concerning the categories of information jointly used, the scope of joint users, the purposes of use, and the person responsible for management.

Article 6 (Provision to Third Parties)

1. Except as provided by laws and regulations, the Company will not provide personal data to third parties without obtaining the individual’s prior consent.
2. Notwithstanding the preceding paragraph, the Company may provide personal data without the individual’s consent in the following cases, in accordance with laws and regulations.
   • Cases based on laws and regulations
   • Cases where it is necessary for the protection of a person’s life, body, or property and it is difficult to obtain the individual’s consent
   • Cases where it is particularly necessary for improving public health or promoting the sound upbringing of children and it is difficult to obtain the individual’s consent
   • Cases where cooperation is necessary with a national government agency, a local government, or another body in performing affairs prescribed by laws and regulations, and obtaining the individual’s consent is likely to interfere with the performance of those affairs
   • Other cases permitted by laws and regulations
3. The Company may prepare statistical information and similar data that does not identify individuals, and may provide or sell it to third parties in accordance with laws and regulations.
4. Provision of personal data in connection with entrusting its handling, and other cases that do not constitute provision to a third party under laws and regulations, are not included in the provision to third parties under this Article.

Article 7 (Outsourcing)

1. To the extent necessary to operate the Service, the Company may outsource payment processing, delivery, system operations, identity authentication, customer support, advertisement delivery, access analysis, fraud prevention, and other operations to external providers.
2. The Company will conduct necessary and appropriate supervision of its contractors in accordance with laws and regulations.
3. Where a contractor subcontracts further, the Company will also endeavor to manage this appropriately to the extent necessary.

Article 8 (Handling of Payment Information and Credit Card Information)

1. For payment processing in the Service, the Company uses payment services provided by Stripe and other payment service providers.
2. As a general rule, the full credit card number and security code are managed by payment service providers, and the Company does not directly collect or store them.
3. The Company may obtain, store, and use from payment service providers the card brand, the last four digits of the card number, the expiration date, payment method identifiers, payment history, and other information related to payments.
4. For a payment method that the user has duly agreed to have saved and reused, the Company may provide a feature that displays that payment method in the Service as a registered payment method and allows it to be used for subsequent payments.
5. In displaying and reusing registered payment methods, the Company may refer to information managed by payment service providers and use identifiers and other information necessary for payment processing.
6. The Company may use payment information for purposes such as preventing unauthorized use in connection with payments, investigating transactions, responding to chargebacks, and other necessary purposes.
7. The privacy policies and other terms established by payment service providers may apply to their handling of information.

Article 9 (Cookies, Access Analysis, and Advertising Measurement)

1. The Company may use cookies, advertising identifiers, access logs, and similar technologies to understand how the Service is used, improve convenience, measure advertising effectiveness, optimize advertisement delivery, prevent unauthorized use, and otherwise improve the Service.
2. The Company may use access analysis providers, advertisement delivery providers, and other external services to analyze users’ browsing history, operation history, responses to advertisements, and other usage conditions.
3. The information obtained may be used for providing information tailored to users’ interests, optimizing advertisement delivery, planning campaigns, and other marketing activities.
4. Users may be able to restrict the use of cookies through browser settings or other means. However, some features may not function properly as a result.
5. In accordance with applicable laws and regulations, the Company will notify or publish the necessary matters regarding transmission of information to external services, such as the recipients, the information transmitted, and the purposes of use.

Article 10 (Handling of Personal Information Outside Japan)

1. The Company may use services of providers located outside Japan for providing the Service, payment processing, identity authentication, delivery, system operations, access analysis, customer support, and other necessary operations.
2. For international delivery, the Company may provide delivery destination information and other necessary information to delivery carriers, customs brokers, local delivery providers, and other relevant parties.
3. When providing personal data to a third party in a foreign country, the Company will, in accordance with the Act on the Protection of Personal Information and other applicable laws and regulations, provide the necessary information, obtain the individual’s consent, implement appropriate protective measures, and take other necessary actions.

Article 11 (Retention Period)

1. The Company retains the information it collects for the period necessary to achieve the purposes of use.
2. Even after an account is closed or the usage agreement ends, the Company may retain information to the extent necessary where there is a legitimate reason, such as legal retention obligations, accounting and tax processing, investigation of unauthorized use, dispute resolution, or protection of rights.
3. The Company will endeavor to delete or anonymize information that no longer needs to be retained by appropriate means, except where retention is required by laws and regulations.

Article 12 (Security Control Measures)

1. The Company will implement necessary and appropriate security control measures to prevent leakage, loss, damage, unauthorized access, unauthorized use, and similar incidents involving personal information and related information.
2. The Company will implement measures such as managing access rights of personnel handling information, managing accounts, managing access logs, supervising contractors, and other necessary measures.
3. The Company will review the status of its handling of personal information and related information as appropriate, and will revise and improve its management framework as necessary.

Article 13 (Information of Minor Users)

1. In connection with the use of the Service, the Company may collect users’ dates of birth and other information necessary for age verification.
2. In accordance with the Terms of Service of the Service, the Company restricts users under 18 years of age from purchasing coins and from using other features designated by the Company.
3. Where the Company deems it necessary for age verification or prevention of unauthorized use, it may request the submission of identity verification materials and other necessary information.
4. The Company will handle the personal information of minor users appropriately in accordance with laws and regulations.

Article 14 (Disclosure, Correction, Deletion, etc.)

1. Under the Act on the Protection of Personal Information, users may make requests concerning their retained personal data held by the Company, such as notification of the purposes of use, disclosure, correction, addition, deletion, suspension of use, erasure, suspension of provision to third parties, and other requests prescribed by laws and regulations.
2. Users may request disclosure of records of provision to third parties that are subject to disclosure under laws and regulations.
3. Upon receiving a request, the Company will verify the identity of the requester as necessary and respond appropriately in accordance with laws and regulations.
4. Where the Company is not obligated by laws and regulations to comply with a request, or in other cases permitted by laws and regulations, the Company may be unable to comply with all or part of the request.
5. For the request procedure and other details, please contact the inquiry contact in Article 18.

Article 15 (Use of External Services)

1. In providing the Service, the Company may use external services for payment, authentication, delivery, advertisement delivery, access analysis, and other purposes.
2. The privacy policies and other terms of external providers may apply to information that they collect themselves.
3. The Company and the relevant external provider will each handle information necessary for integration with external services in accordance with the laws and regulations applicable to them.

Article 16 (Response to Leakage and Similar Incidents)

1. If an incident such as leakage, loss, or damage of personal information or related information occurs or may have occurred, the Company will conduct the necessary investigation and take measures to prevent the damage from spreading.
2. Where required by laws and regulations, the Company will report to the Personal Information Protection Commission, notify the affected individuals, and take other necessary actions.
3. The Company will investigate the cause of the incident and take measures to prevent recurrence as necessary.

Article 17 (Revisions to This Policy)

1. The Company may revise this Policy as necessary, including in response to changes in laws and regulations, changes to the content of the Service, or reviews of its information management framework.
2. The revised Policy takes effect when it is posted on the Service or on the effective date separately specified by the Company. However, where laws and regulations require the individual’s consent or other procedures, the Company will carry out those procedures.
3. When making a material change, the Company will notify users, depending on the nature of the change, through an announcement on the Service or other appropriate means.

Article 18 (Business Operator Information and Inquiries)

For inquiries about this Policy and the handling of personal information and related information, and for requests for disclosure and similar requests, please contact the following.

• Company: MIX Co., Ltd. (株式会社ミックス)
• Address: Miyamasuzaka Building 609, 2-19-15 Shibuya, Shibuya-ku, Tokyo 150-0002, Japan
• Representative: Yasunori Yamashita (山下恭典)
• Service name: ORISTA
• Contact: support@orista.jp