Privacy Policy

The following is an English translation for reference only, and if there are any differences in content from the original text at the bottom of this page, the Japanese text will take precedence.


Imiron Co., Ltd. (hereinafter referred to as the “Company”) recognizes the importance of protecting personal information and, in compliance with the Act on the Protection of Personal Information (hereinafter the “Personal Information Protection Act”), strives to handle and protect personal information appropriately in accordance with the following Privacy Policy (hereinafter this “Privacy Policy”). Unless otherwise provided in this Privacy Policy, the definitions of terms used herein shall be in accordance with the Personal Information Protection Act.

1. Definition of Personal Information

In this Privacy Policy, “personal information” means personal information as defined in Article 2, Paragraph 1 of the Personal Information Protection Act.

2. Purposes of Use of Personal Information

The Company uses personal information for the following purposes:

  1. To appropriately provide the Company’s products or services;
  2. To respond to, communicate with, and otherwise handle inquiries, requests, and other matters from customers directed to the Company;
  3. For research, research and development, and quality improvement relating to the Company’s products or services;
  4. To provide information regarding the Company’s various products, services, events, seminars, and the like;
  5. To conduct the selection and hiring decisions of job applicants and to communicate with them in connection therewith;
  6. For employment and personnel management;
  7. For other purposes incidental to the above purposes of use.

3. Changes to the Purposes of Use of Personal Information

The Company may change the purposes of use of personal information to the extent reasonably considered to be relevant to the original purposes, and in the event of such a change, the Company will notify the individual who is the subject of the personal information (hereinafter the “Data Subject”) thereof or make a public announcement thereof.

4. Use of Personal Information

  1. Except as permitted under the Personal Information Protection Act or other applicable laws and regulations, the Company will not handle personal information beyond the scope necessary to achieve the purposes of use without obtaining the consent of the Data Subject; provided, however, that this shall not apply in the following cases:

    1. Where required by laws and regulations;
    2. Where necessary for the protection of a person’s life, body, or property and it is difficult to obtain the consent of the Data Subject;
    3. Where particularly necessary for improving public health or promoting the sound growth of children and it is difficult to obtain the consent of the Data Subject;
    4. Where it is necessary to cooperate with a national government agency, a local government, or a person entrusted by either of them in executing affairs prescribed by laws and regulations, and obtaining the consent of the Data Subject is likely to impede the execution of such affairs;
    5. Where personal data is provided to an academic research institution, etc., and such academic research institution, etc. needs to handle such personal data for academic research purposes (including cases where part of the purpose of handling such personal data is for academic research purposes, but excluding cases where doing so is likely to unjustly infringe upon the rights and interests of the individual).

  2. The Company will not use personal information in a manner that may promote or induce unlawful or improper acts.

5. Proper Acquisition of Personal Information

  1. The Company acquires personal information appropriately and will not acquire it by deception or other wrongful means.

  2. The Company will not acquire special care-required personal information (meaning such information as defined in Article 2, Paragraph 3 of the Personal Information Protection Act) without obtaining the prior consent of the Data Subject, except in the following cases:

    1. Where any of items (1) through (4) of Article 4.1 applies;
    2. Where special care-required personal information is acquired from an academic research institution, etc., and it is necessary to acquire such special care-required personal information for academic research purposes (including cases where part of the purpose of acquiring such information is for academic research purposes, but excluding cases where doing so is likely to unjustly infringe upon the rights and interests of the individual), and limited to cases where the Company and such academic research institution, etc. jointly conduct the academic research;
    3. Where such special care-required personal information has been made public by the Data Subject, a national government agency, a local government, an academic research institution, etc., a person listed in each item of Article 57, Paragraph 1 of the Personal Information Protection Act, or any other person specified by the rules of the Personal Information Protection Commission;
    4. Where special care-required personal information that is apparent from the outward appearance of the Data Subject is acquired by visually observing or photographing the Data Subject;
    5. Where special care-required personal information is provided by a third party and the provision by such third party falls under any of the items of Article 8.1.

  3. When receiving personal information from a third party, the Company shall confirm the following matters as prescribed by the rules of the Personal Information Protection Commission; provided, however, that this shall not apply where the provision of such personal information by such third party falls under any of the items of Article 4.1 or any of the items of Article 8.1:

    1. The name and address of such third party, and, in the case of a corporation, the name of its representative (or, in the case of an unincorporated association or foundation with a designated representative or administrator, the name of such representative or administrator);
    2. The circumstances under which such third party acquired such personal information.

6. Security Management of Personal Information

The Company provides necessary and appropriate supervision to its employees to ensure the security management of personal information against risks such as loss, destruction, falsification, and leakage of personal information. In addition, where the Company entrusts all or part of the handling of personal information to a third party, the Company provides necessary and appropriate supervision to ensure that the entrusted party maintains the security management of personal information. Where a Data Subject requests information regarding the specific security management measures relating to the Company’s retained personal data, the Company will respond without delay.

7. Reporting in the Event of a Data Breach

In the event of a leakage, loss, damage, or other similar incident concerning personal information handled by the Company, where reporting to the Personal Information Protection Commission and notification to the Data Subject are required under the Personal Information Protection Act, the Company will make such report and notification.

8. Provision to Third Parties

  1. Except in cases falling under any of the items of Article 4.1, the Company will not provide personal information to a third party without obtaining the prior consent of the Data Subject; provided, however, that the following cases do not constitute provision to a third party as referred to above:
    1. Where personal information is provided in connection with the entrustment of all or part of the handling of personal information within the scope necessary to achieve the purposes of use;
    2. Where personal information is provided in connection with the succession of business due to a merger or other reasons; or (3)
    3. Where personal information is jointly used in accordance with the provisions of the Personal Information Protection Act.
  2. Notwithstanding the provisions of Article 8.1, except in cases falling under any of the items of Article 4.1, where the Company provides personal information to a third party located in a foreign country (excluding a country designated by the rules of the Personal Information Protection Commission pursuant to Article 28 of the Personal Information Protection Act) (excluding a third party that has established a system conforming to the standards designated by the rules of the Personal Information Protection Commission pursuant to Article 28 of the Personal Information Protection Act), the Company shall obtain the prior consent of the Data Subject to the provision to such third party located in a foreign country.
  3. When obtaining the Data Subject’s consent to provision to a third party located in a foreign country pursuant to Article 8.2, the Company shall provide the Data Subject with information regarding the following matters; provided, however, that where the matter set forth in item (1) cannot be identified, the Company shall, in lieu of the matters set forth in items (1) and (2), provide information to the effect that the matter set forth in item (1) cannot be identified and the reasons therefor, together with any information that may serve as a reference for the Data Subject in place of such matters:
    1. The name of such foreign country;
    2. Information regarding the system for the protection of personal information in such foreign country;
    3. Information regarding the measures for the protection of personal information taken by such third party (or, if such information cannot be provided, that fact and the reasons therefor).
  4. When the Company provides personal information to a third party, the Company will create and retain records in accordance with Article 29 of the Personal Information Protection Act.
  5. When receiving personal information from a third party, the Company will conduct the necessary confirmation in accordance with Article 30 of the Personal Information Protection Act, and will create and retain records relating to such confirmation.

9. Notification of Purposes of Use

When a Data Subject requests notification of the purposes of use of personal information pursuant to the Personal Information Protection Act, the Company will, after confirming that the request is made by the Data Subject him/herself, notify the Data Subject without delay; provided, however, that this shall not apply where the Company is not obligated to give such notification under the Personal Information Protection Act or other applicable laws and regulations. Please note that a fee of JPY 700 per request will be charged for the above notification.

10. Disclosure of Personal Information, etc.

  1. When a Data Subject requests disclosure of personal information pursuant to the Personal Information Protection Act, the Company will, after confirming that the request is made by the Data Subject him/herself, disclose such information to the Data Subject without delay (and if such personal information does not exist, the Company will notify the Data Subject to that effect); provided, however, that this shall not apply where the Company is not obligated to make such disclosure under the Personal Information Protection Act or other applicable laws and regulations. Please note that a fee of JPY 700 per request will be charged for the above disclosure.
  2. The provisions of the preceding paragraph (including the provisions relating to fees) shall apply mutatis mutandis to the records relating to provision to third parties prepared pursuant to Article 8.4 and the records relating to provision from third parties prepared pursuant to Article 8.5, in each case relating to personal information by which the Data Subject is identified.

11. Correction, etc. of Personal Information

Where a Data Subject requests correction, addition, or deletion (hereinafter “Correction, etc.”) of the content of personal information on the grounds that such personal information is not accurate, pursuant to the Personal Information Protection Act, the Company will, after confirming that the request is made by the Data Subject him/herself, conduct the necessary investigation without delay within the scope necessary to achieve the purposes of use, and, based on the results thereof, make the Correction, etc. to the content of the personal information and notify the Data Subject thereof (and where the Company decides not to make such Correction, etc., the Company will notify the Data Subject to that effect); provided, however, that this shall not apply where the Company is not obligated to make such Correction, etc. under the Personal Information Protection Act or other applicable laws and regulations.

12. Suspension of Use, etc. of Personal Information

Where a Data Subject requests, pursuant to the Personal Information Protection Act, (1) the suspension of use or erasure (hereinafter “Suspension of Use, etc.”) of the Data Subject’s personal information on the grounds that such personal information is being handled beyond the scope of the purposes of use previously made public, or is being used in a manner that may promote or induce unlawful or improper acts, or on the grounds that such personal information was acquired by deception or other wrongful means; (2) the suspension of provision (hereinafter “Suspension of Provision”) of personal information on the grounds that it is being provided to a third party without the Data Subject’s consent; or (3) Suspension of Use, etc. or Suspension of Provision on the grounds that the Company no longer needs to use the Data Subject’s personal information, that an event specified in the main clause of Article 26, Paragraph 1 of the Personal Information Protection Act has occurred with respect to the Data Subject’s personal information, or that the handling of the Data Subject’s personal information otherwise falls under a case where the Data Subject’s rights or legitimate interests may be harmed; and where it is found that such request has grounds, the Company will, after confirming that the request is made by the Data Subject him/herself, carry out the Suspension of Use, etc. or Suspension of Provision of the personal information without delay and notify the Data Subject thereof; provided, however, that this shall not apply where the Company is not obligated to carry out such Suspension of Use, etc. or Suspension of Provision under the Personal Information Protection Act or other applicable laws and regulations.

13. Use of Cookies and Other Technologies

  1. The Company’s services may use cookies and similar technologies. These technologies help the Company understand the status of use of the Company’s services and contribute to service improvement. Users who wish to disable cookies may do so by changing their web browser settings; provided, however, that disabling cookies may result in some functions of the Company’s services becoming unavailable.
  2. The Company uses Google Analytics and receives analysis results from Google LLC (hereinafter “Google”) to understand the status of users’ visits to the Company’s services. Data obtained through Google Analytics is collected anonymously and does not identify individuals. Such information is managed in accordance with Google’s privacy policy and other terms (https://policies.google.com/technologies/partner-sites?hl=en). Google Analytics can be disabled by downloading and installing the “Google Analytics Opt-out Browser Add-on” from Google’s opt-out add-on download page (https://support.google.com/analytics/answer/181881?hl=en) and changing the add-on settings in the browser.

14. Disclosure Matters Concerning External Transmission Instruction Communications (External Transmission)

The Company’s services that may be subject to the external transmission regulations relating to information transmission instruction communications under Article 27-12 of the Telecommunications Business Act, and the disclosure matters under such regulations for such services, are as follows.

Functions or services that use information transmission instruction communications

  • Google Analytics

Information about users that is transmitted

  • Information relating to systems, devices, networks, and communications ordinarily used for internet communications
  • Location information
  • Data relating to behavior on the site/app
  • Data relating to pages browsed
  • User identifiers (cookies, device identifiers, etc.)

Name of the recipient(s)

  • Google LLC and its affiliated companies

Purpose of use (the Company)

  • To improve the Company’s services and develop new services, etc. by analyzing usage status

Purpose of use (recipient)

  • To analyze users’ browsing tendencies and history

15. Contact

For requests for disclosure, etc., opinions, questions, complaints, or other inquiries relating to the handling of personal information, please contact the following: Name, address, and name of the representative of the business operator handling personal information

KANDA SQUARE 11F
2-2-1 Kanda-Nishikicho, Chiyoda-ku, Tokyo 101-0041
Imiron Co., Ltd. (CEO: Masakazu Adachi)
Contact: info@imiron.io

16. Continuous Improvement

The Company will periodically review its operational status regarding the handling of personal information and will strive for continuous improvement, and may amend this Privacy Policy as necessary.


Established: January 1, 2025
Revised: August 7, 2028