1. Management of personal information

This website is operated by SMALL WORLDS Inc. (hereinafter referred to as the "Company"). The Company will use personal information according to the Privacy Policy (hereinafter referred to as the "Privacy Policy"). The Company operates in compliance with laws related to personal information protection, other laws and regulations regarding the management of personal information and guidelines of related ministries and agencies. The Company's basic policy about personal information is listed as follows.

2. Personal information

Personal information includes the following items:

1. 1. Users' personal information that can be used to identify users, such as name, address, telephone number, e-mail address and other information.
   Information which alone cannot be used to identify users, but can be easily compared with other information to identify users is also counted as a personal information.
2. 2. Ticket purchase history and usage history of services provided by "the Company" such as "3D figure program with resident rights" and others.
3. 3. The image data of users acquired through 3D scanning (hereinafter to be referred as “3D scan data”) with the scanners set in SMALL WORLDS TOKYO (hereinafter to be referred as “the facility”) operated by the Company.

3. Purpose of use of personal information

The Company uses personal information for the following purposes. If personal information is used for purposes other than those specified in this section, users will be informed of the purpose of use and the consent from users should be obtained.

1. 1. To provide the services of the Company
   ※We will use the "3D scan data" to create users' figures and display them in the facility. We will also provide it to users in the form that can be used on the smartphone app.
2. 2. To provide the services and display advertisement according to each users' usage status and hobbies
3. 3. To know users' interests and develop new services
4. 4. To send users notifications necessary for site operation
5. 5. To sell admission tickets according to users' applications and introduce related services via e-mail
6. 6. To provide information about the Company's services via e-mail
7. 7. To provide user support related to the Service (answering inquiries, etc.)
8. 8. To create statistical materials for the Company's marketing activities
9. 9. To verify identity necessary for the operation of the services and to respond to inquiries based on laws and regulations

4. Provision of personal information to third parties

As a general rule, the Company will not provide personal information to a third party without users' consent. However, this does not apply to the following cases when it is necessary to provide personal information to a third party.

1. 1. When it is required by law
2. 2. When it is necessary for the protection of human life, body or assets, but it is difficult to obtain consent from the individual
3. 3. When it is particularly necessary for public health improvement and sound growth of children but it is difficult to obtain consent from the individual
4. 4. When it is necessary for cooperation with a national organization or local public entity, or a business operator entrusted by such an organization in order to carry out affairs stipulated by laws and regulations in cases when obtaining consent from the individual concerned would hinder such affairs

5. Outsourcing of personal information

In order to accomplish the intended purposes specified in Section 3, the Company will provide personal information to a third party (hereinafter referred to as the "Subcontractor") that the Company entrusts services without obtaining consent from users. The Subcontractor will use personal information to the extent necessary for accomplishing the specified purposes. In this case, the Company shall make a contract (including confidentiality agreements) with the Subcontractor that personal information will not be disclosed or leaked to other third parties and that personal information will not be used for purposes other than accomplishing the specified purposes.

6. Use of user data for statistical analysis

The Company shall be able to disclose the results of statistical analysis based on the provided personal information (without personal information itself) to third parties.

7. Disclosure of personal information

When requested by users to disclose personal information based on the Personal Information Protection Act, the Company will disclose personal information to them without delay after confirming that the request is made by the users themselves. (The Company will inform the users if relevant personal information does not exist.) However, this shall not apply if the Company is not obligated to disclose it under the Personal Information Protection Act or other laws.

8. Suspension of use of retained personal information

When users ask the Company to suspend the use of their personal information or delete personal data (hereinafter referred to as the "Suspension of Use") for the reason that the personal information is handled beyond the scope of the purpose of use or that it is obtained by unauthorized means, the Company will conduct a necessary investigation without delay. And based on the result of investigation, we will suspend the use of personal information and notify the users accordingly. However, if suspending the use of personal information will require considerable expense or it is difficult to suspend the use of personal information, it is possible for the Company to take alternative measures to protect rights and interests of the users.

9. Use of IP addresses on the website

When users browse or use the website of the Company, users' IP address and cookie information (defined below) will be obtained automatically. IP address and cookie information will be used for the following purposes.

1. 1. To improve or update the site to satisfy users
2. 2. To confirm unauthorized use of the website
3. 3. To effectively display advertisements on the website
4. 4. To measure the number of users and perform statistical analysis in a form that cannot identify users

Cookies are files that are sent and received between the website server and user's browsing software (hereinafter referred to as the "Browser") when users browse websites. If users choose to receive cookies on their computers, cookies will be saved in specified locations on computers. By using cookies, the Company's server can record which webpage of the Company's services a particular computer visits (hereinafter referred to as the "Cookie Information"). Users cannot be identified unless they enter their own personal information on the website of the Company's services. Moreover, users can also change their browser settings to refuse to accept cookies or display a warning when they receive cookies. However, if users refuse to accept cookies, they may not be able to use some part of the Company's services. (For example, they will not be able to use services that can only be used after logging into the website of Company's services.)

10. Use of access logs

When users access the website of the Company, the Company will record their information in the form of access logs on the server and store it for a certain period of time. The information recorded in the access logs includes the date and time of access, IP address, type of browser, cookie information of browser, etc., but does not include information that can identify users. The access logs are used as operation information of the Company's server for the purpose of improving the convenience of the server, managing the server and investigating unauthorized use and are not used for any other purpose.

11. Information desk

Please contact the following information desk if you have opinions, questions, complaints and inquiries about personal information, IP addresses and cookie information.
Address: 1-3-33-B3 Ariake, Koto-ku, Tokyo.
SMALL WORLDS Inc.
Personal Data Protection Manager: Hidekazu Tanaka
TEL: 03-6402-4102

12. Change of the Privacy Policy

The contents of the Privacy Policy may be revised without notifying users. However, if there are changes that require the consent of users by law, the revised Privacy Policy shall apply only to users who have agreed to the changes using the method specified by the Company. Unless otherwise specified by the Company, the revised Privacy Policy shall be posted on this website and will become effective as soon as it is posted.

June 2021