plumm

Privacy Policy

anto Inc. (hereinafter referred to as “the Company”) recognizes the importance of protecting personal information and complies with the Act on the Protection of Personal Information (hereinafter referred to as the “Personal Information Protection Act”). The Company endeavors to appropriately handle and protect personal information in accordance with the following Privacy Policy (hereinafter referred to as “this Privacy Policy”). Unless otherwise specified in this Privacy Policy, the definitions of terms herein shall be in accordance with the Personal Information Protection Act.

1. Definition of Personal Information

In this Privacy Policy, “personal information” refers to information about a living individual that falls under any of the following:

(1) Information that can identify a specific individual by name, date of birth, or other descriptions contained therein (referring to all matters described or recorded in documents, drawings, or electromagnetic records, or expressed by voice, actions, or other methods), including information that can be easily cross-referenced with other information to identify a specific individual.

(2) Information that contains a personal identification code.

2. Purpose of Use of Personal Information

The Company uses personal information for the following purposes:

(1) To provide the service named “plumm” (including any service after a change to its name or content, regardless of the reason for such change; hereinafter referred to as “the Service”)

(2) To verify the identity of users when logging into the Service

(3) To enable users to use the Service smoothly

(4) To promote the use of the Service, such as by processing information into a format that cannot identify individuals and creating statistical data

(5) To respond to inquiries from users

(6) To provide information related to the Service or advertising information from businesses other than the Service

(7) To introduce and market products, services, etc. of the Company or its parent company

* The Company may analyze users' usage of the Service, estimate users' hobbies, preferences, purchasing tendencies, attributes, etc., and use such analysis and estimation results for advertising delivery, marketing, and other measures for customers.

(8) To make necessary communications such as important notices regarding the Service

(9) To ship products

(10) To bill and settle usage fees for services provided by the Company, and to make payments such as cashback from the Company

(11) To purchase insurance for the Company's products and services

(12) To respond to actions that violate the Company's terms of service, policies, etc. (hereinafter referred to as “Terms, etc.”) related to the Service

(13) To notify users of changes to the Terms, etc. related to the Service

(14) To improve the services of the Company or its affiliated companies, develop new services, etc.

* The Company may analyze users' usage of the Service and estimate users' hobbies, preferences, purchasing tendencies, attributes, etc. for the purpose of service improvement.

(15) To provide users' personal information to the Company's affiliated companies and other third parties as stipulated in Article 5 below

(16) For other purposes incidental to the above

3. Security Management of Personal Information

The Company provides necessary and appropriate supervision to its employees to ensure the security management of personal information against risks such as loss, destruction, alteration, and leakage. Furthermore, when outsourcing all or part of the handling of personal information, the Company provides necessary and appropriate supervision to ensure the security management of personal information at the outsourced party.

4. Reporting in the Event of Leakage

In the event of leakage, loss, damage, or other incidents involving personal information handled by the Company, the Company shall make the required reports to the Personal Information Protection Commission and notifications to the individuals concerned, as required by the Personal Information Protection Act.

5. Provision to Third Parties

5.1 The Company may provide users' personal information to third parties in the following cases:

(1) When providing users' personal information to EC sites, retailers, manufacturers, or other businesses that are listed on the Service for product sales information, and with which the Company partners to provide services such as product introductions and sales promotions to users, for the purpose of providing such services

* The provided personal information shall be managed by the relevant EC site, retailer, manufacturer, or other business. Such businesses may use the personal information for product introductions, sales promotions, and other services to users on the Service, as well as analyze and use it to improve their business operations.

(2) When the Company requests EC sites, retailers, manufacturers, or other businesses to deliver products to users

5.2 Except as provided in this Privacy Policy, the Company shall not provide personal information to third parties without prior consent of the individual. However, the following cases shall not constitute provision to third parties as defined above:

(1) When personal information is provided in connection with outsourcing all or part of the handling of personal information within the scope necessary to achieve the purpose of use

(2) When personal information is provided in connection with the succession of business due to merger or other reasons

(3) When jointly used pursuant to the following paragraph

5.3 Notwithstanding the provisions of Article 5.2, the Company shall jointly use users' personal information as follows:

Items of personal information to be jointly used:
Personal information acquired by the Company as described in Article 1

Scope of joint users:
The Company and its affiliated companies (for information about the Company, please refer to here.)

Purpose of use by joint users:
The purposes of use described in Article 2

Party responsible for the management of jointly used personal information:
anto Inc. (for address, please refer to here.)

5.4 When necessary to improve the services of the Company or its affiliated companies, develop new services, etc., the Company may provide users' personal information handled by the Company to third parties located in foreign countries. Information regarding the provision to such third parties in foreign countries is as follows:

Name of the foreign country where the third-party recipient is located:
United States of America

For information on the personal information protection systems in the relevant foreign country, please refer to the following website of the Personal Information Protection Commission:
https://www.ppc.go.jp/enforcement/infoprovision/laws/offshore_report_america/

Measures taken by the third party for the protection of personal information:
The third-party recipient has taken all measures corresponding to the 8 principles of the OECD Privacy Guidelines.

6. Disclosure

6.1 When requested by users to notify the purpose of use of retained personal data that identifies the user, disclose retained personal data, disclose third-party provision records, add/correct/delete retained personal data, or suspend use/deletion/third-party provision of retained personal data (hereinafter referred to as “disclosure, etc.”), the Company shall respond appropriately in accordance with the provisions of applicable laws and the Company's prescribed procedures, provided that the request can be confirmed as being from the user themselves. For specific request methods, please contact the Company's inquiry desk described in this Privacy Policy.

7. Handling of Pseudonymized Information

7.1 The Company may create pseudonymized information, which is information about individuals obtained by processing users' personal information so that specific individuals cannot be identified unless cross-referenced with other information.

7.2 The created pseudonymized information shall be jointly used with the Company's parent company as follows:

Items of personal information to be jointly used:
Personal information acquired by the Company as described in Article 1

Scope of joint users:
The Company (for information about the Company, please refer to here.)

Purpose of use by joint users:
The purposes of use described in Article 2

Party responsible for the management of jointly used personal information:
anto Inc. (for address and representative name, please refer to here.)

8. Handling of Anonymized Information

8.1 The Company creates anonymized information, which is information obtained by processing users' personal information so that specific individuals cannot be identified and the original personal information cannot be restored.

8.2 When creating anonymized information, the Company takes security management measures in accordance with the standards established by the Personal Information Protection Commission Rules.

8.3 The items of information related to anonymized information created by the Company are as follows:

Users' personal attribute information (gender, age, address), Service usage history, device identification information such as device IDs, OS information, internet connection information, location information, IP addresses, timestamps, anonymous IDs registered with the Service, and other member information registered with the Service

8.4 The Company provides anonymized information to third parties as follows:

Items of personal information included in the anonymized information to be provided:
Users' personal attribute information (gender, age, address), Service usage history, device identification information such as device IDs, OS information, internet connection information, location information, IP addresses, timestamps, anonymous IDs registered with the Service, and other member information registered with the Service

Method of providing anonymized information:
Delivery of data or delivery via recording media with sufficient security measures such as data file encryption and password protection

8.5 The Company shall take necessary and appropriate measures for the security management of anonymized information, handle complaints related to the creation and other handling of anonymized information, and endeavor to take necessary measures to ensure the proper handling of anonymized information and to publicly announce the contents of such measures.

9. Use of Cookies and Other Technologies

9.1 The Company's services may use cookies, web beacons, and similar technologies. These technologies help the Company understand the usage of its services and contribute to service improvement. Users who wish to disable cookies can do so by changing their web browser settings. However, disabling cookies may prevent users from using some features of the Company's services.

10. Contact

For requests for disclosure, etc., opinions, questions, complaints, and other inquiries regarding the handling of personal information, please contact the following:

Name and address of the personal information handler:

Shibuya Dogenzaka Tokyu Building 2F-C, 1-10-8 Dogenzaka, Shibuya-ku, Tokyo 150-0043, Japan

anto Inc.

Personal Information Inquiry Desk

Phone: 03-6897-9291

E-mail: info@anto.jp

(Business hours: Weekdays, 10:00 AM to 7:00 PM)

11. Continuous Improvement

The Company shall review the operational status of its handling of personal information as appropriate and endeavor to make continuous improvements, and may change this Privacy Policy as necessary.

[Established December 15, 2025]