FinTech Global Incorporated (hereafter, “the Company”) recognizes the importance of personal information and that appropriate handling of personal information is an imperative corporate responsibility, and is committed to safeguarding personal information, personal identification numbers and specific personal information (hereafter, personal identification numbers and specific personal information are collectively referred to as “specific personal information, etc.”), based on the policy content outlined below.
For details, please read “About the handling of personal information and specific personal information, etc. (Japanese only)”

The Company complies with Japan’s Act on the Protection of Personal Information and other related legislation, the Act on the Use of Numbers to Identify a Specific Individual in Administrative Procedures and other related legislation, and guidelines and other standards set by the government for which compliance is required, and properly handles personal information and specific personal information, etc.

When collecting personal information and specific personal information, etc., the Company will clearly describe the purpose of use and obtain and utilize it through fair and lawful means and within the scope necessary to conduct business or else the scope set forth under legislation for specific personal information, etc.

The Company will provide notification or make an announcement regarding purpose of use for personal information and specific personal information, etc., and use such information within the scope of said purpose of use. The Company will not use such information for any other purposes, except in situations required by laws and regulations. Note that the Company will only use specific personal information, etc., within the scope authorized by laws and regulations.

The Company will not provide personal data to any third party without obtaining prior consent of the individual(s) concerned, except where permitted or required by laws and regulations. However, if the handling of personal data and specific personal information, etc., is entrusted to an external service provider, if it is provided parallel to business succession caused by a merger or other reason, or if it is used jointly with a certain person who is determined separately, then personal information received by the Company from an individual may be provided to a third party without obtaining prior consent.
For specific personal information, etc., the Company will not provide any details to a third party, whether consent is given or not, except where required under the Act on the Use of Numbers to Identify a Specific Individual in Administrative Procedures.

The Company will strive to ensure that personal data and specific personal information, etc., are accurate and up-to-date and will also take the necessary and appropriate steps to safeguard the personal data it handles, including efforts to prevent leaks, loss or damage.

The Company may entrust administrative tasks related to personal data and specific personal information, etc., but will select a service provider deemed to have sufficient personal data protection capabilities, such as the ability to manage personal data, maintain confidentiality, limit re-entrusting and prevent leaks of personal data, and, through contracts or other agreements clearly stating the obligations that the service provider must fulfill, and will exercise appropriate supervision over the service provider (including any provider entrusted by the chosen service provider) to achieve secure information management.

The Company recognizes that individuals have the right to request notification pertaining to purpose of use, disclosure and correction of information (including information to be added or deleted), suspension of use (including permanent removal), suspension of provision to a third parties and disclosure of record of provision to third parties regarding retained personal data and specific personal information, etc., about them, and has set up a helpdesk to address comments pertaining to retained personal data and specific personal information. The Company will respond quickly, in accordance with prevailing laws, when such requests are received. The Company will also respond swiftly to comments and inquiries regarding the handling of personal information and specific personal information, etc.

The Company will draw up a personal information protection compliance program (including the Personal Information Protection Policy, Rules for Handling Personal Information, Rules for Handling Specific Personal Information, etc., and other rules and regulations) to realize this policy, and will promote widespread awareness in-house through seminars and training and put the program into practice, with constant revisions to improve content.