1. Compliance with Laws and Standards

We comply with the APPI, related laws and regulations, guidelines issued by competent authorities, and other applicable standards. We continuously review this Policy and our privacy governance framework in response to changes in law or in our business.

2. Privacy Governance

We establish responsible personnel, internal rules and reporting lines for the appropriate management of personal information, communicate them to officers and employees, and work to ensure compliance.

3. Collection, Purposes and Scope of Use

We identify the purposes of use as specifically as reasonably possible, collect personal information by lawful and fair means, and use it only to the extent necessary for those purposes. Any change to a purpose will be made only within the scope permitted by law and will be notified or published where required.

4. Appropriate Information Management

We endeavor to keep personal data accurate and up to date and implement necessary and appropriate safeguards against unauthorized access, disclosure, loss, destruction or damage.

5. Company Name, Address and Representative

6. Requests and Inquiries

When we receive an inquiry or a request concerning retained personal data, including a request for notification of purpose, access, disclosure, correction, addition, deletion, suspension of use, erasure or cessation of third-party provision, we respond in good faith and without undue delay in accordance with applicable law and our procedures.

1. Categories of Information We Collect

We may collect the following information to the extent necessary to provide the Services and conduct our business:

• Name, company or organization, department, title, postal address, telephone number, email address and other contact details
• Customer-portal account identifiers, authentication-related information and access permissions
• Quotation, application, order, contract, billing, payment, shipping, support and other transaction information
• Information relating to soil analysis and other Services, including application details, sample or field information, analysis status, results, reports, consultation details and usage history
• Inquiries, survey responses, seminar participation and communications with us
• Employment history, qualifications, preferences and other recruitment information
• IP address, cookie identifiers, device, browser and operating-system information, access time, pages viewed, referrer, interaction data and other logs
• Lawfully obtained public information or information lawfully provided by business partners or other parties

Where we collect special-category data or other information requiring enhanced protection, we obtain explicit consent unless another legal basis applies.

2. Methods of Collection

We collect personal information through web forms, the customer portal, email, telephone, mail, contracts and applications, meetings, events, cookies and similar technologies, records of use of the Services, or provision by a partner at your direction. We do not collect personal information by deception or other unlawful means.

1. Purposes of Use

We use personal information for the following purposes:

1. Responding to inquiries, document requests and consultations
2. Preparing quotations, processing applications and orders, entering into and administering contracts, verifying identity, billing, payment management, and shipping goods, samples and documents
3. Providing soil analysis, reports, consulting, support, maintenance and other Services
4. Providing the customer portal and other information systems, registering accounts, authenticating logins, managing permissions, and managing analysis status and usage
5. Sending important notices concerning contracts, Services, changes, incidents, maintenance and security
6. Preventing misuse, protecting information security, controlling access, responding to incidents and conducting audits
7. Improving quality, developing products and Services, conducting market research, preparing statistics and analyzing usage
8. Providing information about our products, Services, seminars and surveys, with consent where required and with an opt-out method
9. Communicating and negotiating with business partners, administering contracts, processing payments and managing business relationships
10. Recruitment, communications with applicants, post-hire administration and legally required procedures
11. Compliance with legal obligations, establishment, exercise or defense of claims, and management of disputes and incidents
12. Purposes ancillary or related to the above

We do not intentionally use Google Ads, Yahoo advertising or other behavioral-targeting or remarketing advertising. Before introducing such technologies, we will update this Policy and our Cookie Policy and implement any consent controls required by law.

2. Disclosure to Third Parties

We do not disclose personal data to third parties without consent except where:

1. Disclosure is required or permitted by law
2. Disclosure is necessary to protect life, body or property and it is difficult to obtain consent
3. Disclosure is particularly necessary to improve public health or promote the sound development of children and it is difficult to obtain consent
4. Cooperation is required for a government body or its contractor to perform duties prescribed by law and obtaining consent could impede those duties
5. Disclosure occurs in connection with a merger, demerger, business transfer or other succession and the data is handled within the pre-succession purposes
6. The disclosure constitutes processing by a service provider or joint use that is not treated as third-party disclosure under the APPI

3. Service Providers

To the extent necessary for the purposes above, we may engage providers of cloud hosting, email and communications, system development and maintenance, analytics, payment, delivery, laboratory assistance and other services. We select providers appropriately and supervise them through contracts, access controls, audits and other necessary measures.

4. Provision to Parties Outside Japan

Where we provide personal data to a party outside Japan, we take the steps required by applicable law, such as obtaining consent, confirming that the recipient maintains an equivalent system, and implementing contractual safeguards. On request, we provide information required by law concerning the destination jurisdiction and the safeguards in place.

1. Use of Cookies

Our websites and customer portal may use cookies that are necessary to maintain login status, protect security, remember cookie choices and operate the site. We use analytics cookies to understand usage and improve the Services only after you have given consent.

For cookie categories, retention periods and methods for changing consent, see our Cookie Policy.

2. Google Analytics

We use Google Analytics, provided by Google LLC, for website analytics. With your consent, Google Analytics may use cookies and similar technologies to collect IP address, device and browser information, pages viewed, access time, referrer and interaction data. We use this information to analyze and improve website usage and not for advertising or remarketing.

• Google Analytics Terms of Service
• Google Privacy Policy
• Google Analytics Opt-out Browser Add-on

3. External Web Fonts

Our websites may use Google Fonts provided by Google LLC and Adobe Fonts provided by Adobe for typography. When a page loads, your browser connects to the providers’ servers and may transmit IP address, browser information, the hostname of the page, and technical information about the font or web project. We do not use this information for advertising or remarketing.

• Google Privacy Policy
• Adobe Fonts Privacy Information

1. Anonymously and Pseudonymously Processed Information

If we create, use or disclose anonymously processed information or pseudonymously processed information, we comply with the APPI and other applicable laws, apply the necessary processing and safeguards, and publish any information required by law.

2. Joint Use

If we jointly use personal data with another business, we publish or notify you in advance, as required by law, of the categories of data, scope of joint users, purposes, methods of collection, and the name, address and representative of the party responsible for management.

1. Policy and Internal Rules

We maintain this Policy and internal rules governing the collection, use, storage, disclosure, deletion and disposal of personal data, including the roles of responsible personnel.

2. Organizational Measures

• We appoint personnel responsible for handling personal data and clarify authorized users and data scope.
• We maintain reporting lines for actual or suspected violations of law or internal rules.
• We review handling practices and make improvements where necessary.

3. Personnel Measures

We provide education and training on the handling of personal data and require officers and employees to maintain confidentiality.

4. Physical Measures

We control access to areas where personal data is handled and take measures against theft or loss of equipment, media and documents, including protection during transport and secure disposal.

5. Technical Measures

We implement access and authentication controls, appropriate protection of communications and stored data, logging and review, defenses against malware and unauthorized access, vulnerability management and other necessary measures.

6. Overseas Environments

Where personal data is handled outside Japan, we understand the relevant data-protection systems and implement and periodically review appropriate security measures.

1. Requests Regarding Retained Personal Data

Subject to applicable law, you may request notification of purpose, access, disclosure (including records of third-party provision), correction, addition, deletion, suspension of use, erasure or cessation of third-party provision. We verify the identity of the requester or authorized representative. If we are legally permitted not to comply, we explain the reason.

After receiving an inquiry, we provide information about forms, identity documents, response methods and any fee permitted by law.

2. Contact

For privacy inquiries, complaints or requests, contact:

1. Controller and Categories of Personal Data

The controller is DGC Technology Co., Ltd. We may process the information described under “Collection of Personal Information,” including name, employer and contact details, application, contract, analysis and support information, account and authentication information, cookie identifiers, IP address, device and browser information, access logs and other data necessary to provide the Services.

You may decline to provide requested personal data; however, we may then be unable to enter into a contract or provide all or part of a Service.

2. Purposes and Legal Bases

Our legitimate interests include customer service, safe delivery and improvement of the Services, administration of B2B relationships, and protection of our rights and property. We balance these interests against your rights and interests.

3. Recipients

Where necessary, we may disclose personal data to IT, cloud and hosting providers; email and communications providers; laboratory, testing and technical support providers; payment institutions; delivery providers; professional advisers; public and judicial authorities; and other recipients permitted by law. We require appropriate protection through contracts and other measures.

4. International Transfers

Personal data may be stored or processed in Japan or in other countries where we or our service providers operate. Where applicable, transfers from the EEA to Japan may rely on the European Commission’s adequacy decision for Japan. Where adequacy is not available, we use a legally recognized transfer mechanism, such as Standard Contractual Clauses, the UK International Data Transfer Agreement or Addendum, contractual supplementary measures, explicit consent or another mechanism permitted by law. Contact us for more information about safeguards or a copy where available.

5. Retention

We retain personal data only for as long as necessary for the relevant purposes, the duration of the contractual relationship, or a period required by accounting, tax, product liability, dispute or other legal or legitimate business needs. We consider the nature, volume and sensitivity of the data, risks, purposes and statutory periods, and securely delete or anonymize data when it is no longer required.

6. Your Rights

Subject to applicable conditions, you may request access, rectification, erasure, restriction, data portability, object to processing and withdraw consent. You may object to direct marketing at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

As a rule, we do not make decisions based solely on automated processing that produce legal or similarly significant effects. If we do so, we will provide the information and safeguards required by law.

7. Exercising Rights and Complaints

To exercise your rights, contact us using the details above. We may request reasonable information to verify your identity. You also have the right to lodge a complaint with the supervisory authority for your residence, workplace or the place of an alleged infringement.

8. Children

The Services are generally designed for businesses and professionals and are not directed to children under 16. If we learn that we collected a child’s personal data without legally valid parental consent, we will delete it or take other measures required by law.