Privacy Policy

Definition of Personal Information

"Personal information" means information about a living individual that can identify a specific person by name, address, telephone number, email address, bank account, access records, or other descriptions, numbers, symbols, or images assigned to the individual (including information that cannot identify a specific person by itself but can easily be cross-referenced with other information to do so).

1. Privacy Protection Philosophy

Our company plans, designs, and manufactures products using copyrighted works of our business partners, such as artists and characters, as well as works for which we hold the rights.
We believe these businesses are built on trust with everyone involved (customers, business partners, shareholders, and employees). To handle all personal information entrusted to us in the course of our business more rigorously, we have established this Privacy Policy as a code of conduct to be observed by our officers and employees, and we are committed to ensuring thorough compliance with it.

We do not use personal information beyond the scope necessary to achieve the purposes specified in advance. We also comply with the Act on the Protection of Personal Information, the Guidelines Targeting Economic and Industrial Sectors under the Act on the Protection of Personal Information, the Guidelines Concerning Measures to Be Taken by Business Operators to Properly Handle Personal Information Related to Employment Management, Japanese Industrial Standard JIS Q 15001:2006 "Personal information protection management systems — Requirements," and other applicable norms.

The definitions of terms used in this Privacy Policy follow the Act on the Protection of Personal Information.

2. Establishing an Internal Management System

To handle personal information appropriately, we implement the following measures.

1. We maintain internal rules governing how personal information is handled.
2. We take measures to prevent and correct (improve) leaks, loss, or damage of personal information.
3. We appoint a "Personal Information Protection Manager" to ensure thorough compliance with our internal rules.
4. We provide training on the handling of personal information at least once a year to all employees, including officers and temporary staff.
5. We audit our internal rules and their compliance at least once a year, and continuously improve and correct them.

3. Collection and Use of Personal Information

1. Purpose of Use

   For personal information we receive directly from individuals, such as in writing, we use it within the scope of the purpose disclosed and agreed to at the time of collection.
   For personal information obtained by other means, we use it only within the scope of the purpose we separately announce.
   Our general purposes of use are as follows.

2. Voluntary Nature of Provision

   When we ask customers or other individuals to provide personal information, providing it to us is voluntary. However, depending on the type of information you choose not to provide, we may be unable to provide some or all of our services.

3. Information Collected Automatically

   Our website records access logs for the purpose of evaluating our own website. We also use cookies to improve our services. We manage all automatically collected information appropriately in accordance with our information security policies.
   This information does not infringe on our customers' privacy.

   Use of Cookies and Similar Technologies

   Our website uses cookies and similar technologies to improve site usability, analyze usage, and improve our services.
   A cookie is information stored on a user's device when the user accesses a website.

   The cookies we use are primarily for the following purposes:

   • Necessary cookies: required for the site's basic operation (display, security, etc.)
   • Analytics cookies: for understanding access patterns, analyzing browsing trends, and improving content

   Our cookie consent banner lets you choose whether to allow analytics cookies. You can change your choice at any time from "Cookie Settings" in the footer.
   If you select "Reject," analytics cookies will not be used.
   Necessary cookies cannot be disabled in some cases, as they are required to provide the site.

   You can control or delete cookies through your browser settings.
   However, if you disable cookies, some features of our site may not function.

   About Our Access Analytics Tool

   We use Google Analytics (GA4), provided by Google LLC, to understand how our site is used.
   Please review Google's own policies for information on how data collected by Google Analytics is handled.

   • Google Privacy Policy
   • Google Analytics Terms of Service

4. Use and Disclosure to Third Parties

   Except in the following cases, we do not use personal information beyond the scope necessary to achieve the purpose of use, nor do we disclose it to third parties.

   1. When the individual has given consent. When disclosing to a third party, we generally make confidentiality, a prohibition on re-disclosure, and the ability to stop use at the customer's request a condition of the agreement.
   2. When disclosure is required by law.
   3. When necessary to protect the life, body, or property of the individual or the public, and obtaining the individual's consent is difficult.
   4. When cooperating with a national or local government agency, or a party entrusted by one, in carrying out duties prescribed by law, and obtaining the individual's consent would impede the performance of those duties.

5. Outsourcing

   To carry out our business smoothly, we may outsource all or part of the processing of personal information to outside contractors. (In such cases, we select contractors with robust security management measures and contractually require them to maintain such measures.)

4. Handling of Inquiries About Personal Information

1. Upon request from an individual (or their representative) to disclose, correct, or stop the use or provision of personal data we hold, we will respond promptly after verifying the individual's identity. We also respond to questions and consultations regarding our handling of personal information. However, we may be unable to accommodate requests to delete data where this would conflict with a legal retention obligation.
2. Inquiries regarding our handling of personal information are accepted at the contact point below. Depending on the content of your inquiry, we may ask you to submit documents or answer questions. If we send a reply by registered mail restricted to the named recipient, a fee of ¥1,000 (tax included) will apply.
3. Our contact point is open weekdays from 10:00 to 17:00 (Japan Standard Time, UTC+9).

* We are unable to respond to inquiries unrelated to personal information.
* Please note that email sent to the address above is not protected by encryption.

5. Information for Individuals in the EEA and the United Kingdom

This section applies to individuals located in the European Economic Area (EEA) or the United Kingdom, in addition to the rest of this policy.

1. 5.1 Data controller

   The controller of your personal data is Obitsu Plastic Manufacturing Co., Ltd., 4-4-11 Kanamachi, Katsushika-ku, Tokyo 125-0042, Japan. You can contact us through our inquiry form.

2. 5.2 Purposes and legal bases

   We process personal data for the purposes listed in this policy, on the following legal bases:

   • Responding to your inquiries and handling production requests, including attachments you send us: performance of a contract or steps taken at your request before entering into a contract (Article 6(1)(b) GDPR), or our legitimate interests in responding to you (Article 6(1)(f)).
   • Order processing, billing, delivery, after-sales service: performance of a contract (Article 6(1)(b)), and compliance with legal obligations (Article 6(1)(c)).
   • Improving our products, services and website, and ensuring the security of our facilities and network: our legitimate interests (Article 6(1)(f)).
   • Analytics cookies (Google Analytics): your consent (Article 6(1)(a)), which you can withdraw at any time through "Cookie Settings" in the footer.

3. 5.3 Recipients

   We may share personal data with service providers that process data on our behalf, namely our server provider (Japan), our website development and maintenance contractor (Japan), and our analytics provider (Google LLC, United States), and with delivery companies and partners where necessary to fulfil your request. We do not sell personal data.

4. 5.4 International transfers

   We are located in Japan. Personal data of individuals in the EEA and the United Kingdom is transferred to and processed in Japan, which is covered by an adequacy decision of the European Commission and by the United Kingdom's adequacy regulations. Where we use service providers outside Japan, such as Google LLC for analytics in the United States, we rely on appropriate safeguards, such as the provider's participation in the EU-U.S. Data Privacy Framework and the UK Extension to it, or standard contractual clauses.

5. 5.5 Retention

   We keep personal data for as long as necessary to achieve the purposes above, or for the period required by law. As a guide, we keep:

   • general inquiries that did not lead to a transaction: one year after we finish responding;
   • records of production requests and transactions: ten years after the transaction ends;
   • files attached to inquiries or requests (such as images and design data): one year after the project is completed, extended for the corresponding period where re-production or additional orders are planned;
   • server logs: one year;
   • analytics data (Google Analytics): event data for two months, and user-level data (data linked to cookies and user identifiers) for fourteen months, which is renewed each time the user returns to our site.

   We may keep data longer where required by law or where you have agreed.

6. 5.6 Your rights

   You have the right to request access to, correction of, erasure of, and restriction of processing of your personal data, to object to processing based on legitimate interests, to data portability, and to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal). To exercise these rights, please contact us through our inquiry form. We will reply by email only, and no fee is charged for replies to these requests from individuals in the EEA or the United Kingdom.

7. 5.7 Complaints

   You have the right to lodge a complaint with the data protection authority in your country of residence, place of work, or the place of the alleged infringement.

8. 5.8 Provision of data

   Providing personal data through our forms is voluntary, but we may be unable to respond to your inquiry or handle your request if you do not provide the information marked as required.

9. 5.9 Automated decision-making

   We do not carry out automated decision-making, including profiling, that produces legal effects concerning you.

Purposes of Use of Personal Information