Privacy Policy
StoreHero, Inc. (hereinafter "the Company") recognizes the importance of protecting personal information and, with respect to the handling of information about individuals (hereinafter "Personal Data") in the services we provide (hereinafter "the Service"), establishes the following Privacy Policy (hereinafter "this Policy") in compliance with the Act on the Protection of Personal Information (APPI) and other applicable laws, regulations, and guidelines.
1. Information and Collection Methods
The Personal Data the Company collects through the Service varies depending on the method of collection, as described below.
(1) Information Provided Directly by Users
The following information may be provided by users in order to use, or in the course of using, the Service:
- Profile information such as username, full name, email address, organization, and job title
- Information entered or submitted by users through input forms or other methods specified by the Company
In addition, in connection with our recruitment activities, the Company may collect the following personal information from applicants and others:
- Name, age, address, date of birth, phone number, email address, educational background, work history, qualifications held, current and desired compensation, and other information
- All information contained in resumes, curriculum vitae, entry forms, and any other documents submitted to the Company by applicants for the purpose of applying for a position, regardless of format
- The full content of all forms of communication with the Company, including but not limited to interviews, written correspondence, and telephone conversations
- All information obtained by the Company through background checks, reference checks, and similar screening processes conducted in connection with recruitment
- Application and participation history in recruitment activities, and the outcomes of selection processes
- Information entered or submitted by applicants or others through input forms or other methods specified by the Company
(2) Information Collected by the Company in the Course of Users' Use of the Service
The Company may collect information relating to access to and use of the Service, including the following:
- Shopify-related identifiers and other information (including purchase-related and product-related information)
- Server access log information
- Cookies, ADIDs, IDFAs, and other identifiers
(3) Acquisition of Personally Related Information (as defined in Article 2, Paragraph 7 of the APPI)
The Company may receive personally related information — such as website browsing history, behavioral history, and identifiers — that does not in itself identify a specific individual, from third parties that hold such information. By linking that information with personal information about users managed by the Company, we may acquire it as personal information and use it in accordance with the purposes of use set forth in Section 2 below.
2. Purposes of Use
The specific purposes for which user information collected in connection with the provision of the Service is used are as follows:
(1) To provide, maintain, protect, and improve the Service, including processing registrations, verifying identity, authenticating users, and recording user settings
(2) To measure user traffic and behavioral patterns
(3) To respond to inquiries and provide information related to the Service
(4) To address conduct that violates the Company's terms, policies, and other rules related to the Service (hereinafter "Terms, etc.")
(5) To notify users of changes to the Terms, etc. related to the Service
(6) For the Company's recruitment activities
3. Disclosure to Third Parties
With respect to Personal Data that constitutes personal information (as defined in Article 2, Paragraph 1 of the APPI; the same applies hereinafter), the Company will not provide such information to any third party (including parties located outside Japan) without obtaining the user's prior consent. However, the following exceptions apply:
(1) When required by law
(2) When necessary to protect the life, body, or property of a person and it is difficult to obtain the user's consent
(3) When particularly necessary for the improvement of public health or the sound development of children, and it is difficult to obtain the user's consent
(4) When it is necessary to cooperate with a national government agency, a local government, or a person entrusted by either in the execution of affairs prescribed by law, and obtaining the user's consent is likely to impede the execution of such affairs
(5) In any other case permitted by the APPI or other applicable laws and regulations
4. Use of Third-Party Modules and Cookies
The Company may use third-party SDKs and other modules, or Cookies, for the purpose of improving the Service and for the other purposes of use stated in Section 2 above. Information collected, recorded, and analyzed by the providers of such modules is governed by those providers' own terms of service and privacy policies.
- Google Analytics (Google LLC)
Terms of Service: Google Analytics Terms of Service
"How Google uses data when you use our partners' sites or apps"
Privacy Policy: Privacy Policy
Opt-out: Google Analytics Opt-out Browser Add-on
- Salesforce (Salesforce, Inc.)
Privacy Policy: Privacy Policy
5. Security Management Measures
In accordance with the APPI and this Policy, the Company takes necessary and appropriate measures to prevent the leakage, loss, or damage of personal information it handles and to otherwise ensure the security of such information. Specifically, the Company implements the following security management measures:
- To prevent the loss, destruction, alteration, and unauthorized disclosure of personal information, the Company implements appropriate countermeasures against unauthorized access, computer viruses, and other threats, and continually improves its information security framework.
- The Company designates a person responsible for the handling of personal information.
- The Company identifies the employees who handle personal information and the scope of personal information each handles, and establishes reporting lines to the person in charge in the event that any violation of the APPI or internal regulations on the handling of personal information is discovered or suspected.
- The Company implements access controls to restrict the personnel and databases involved in the handling of personal information.
- The Company implements, maintains, and continuously improves its compliance program.
- The Company ensures that this Policy is thoroughly communicated to all officers, employees, and related parties, and makes it publicly available.
6. Disclosure of Personal Information
(1) When a user requests notification of the purposes of use or disclosure of personal information (including third-party provision records; the same applies hereinafter) pursuant to the APPI, the Company will verify that the request is made by the user themselves and will promptly disclose such information to the user (or, if the personal information does not exist, will notify the user accordingly). However, this does not apply in cases where the Company is not obligated to disclose such information under the APPI or other applicable laws. Please note that a handling fee of 1,000 yen per request applies for notification of purposes of use and disclosure of personal information.
(2) When a user requests correction, addition, deletion, suspension of use, or suspension of third-party provision of personal information (hereinafter "Correction, etc.") pursuant to the APPI, the Company will verify that the request is made by the user themselves, promptly conduct the necessary investigation, and, based on the results, carry out the requested Correction, etc. and notify the user accordingly. However, this does not apply in cases where the Company is not obligated to perform Correction, etc. under the APPI or other applicable laws. If the Company decides not to perform Correction, etc., it will notify the user of that decision.
7. Contact
For opinions, questions, complaints, or any other inquiries regarding the handling of Personal Data, please contact us through the following:
8. Amendments to This Privacy Policy
The Company may amend this Policy as necessary. However, in cases where an amendment requires the user's consent under applicable law, the amended Policy will apply only to users who have consented to the changes through the method specified by the Company. When amending this Policy, the Company will notify users of the effective date and content of the amended Policy through posting on the Company's website or other appropriate means.
Last revised: June 20, 2022
StoreHero, Inc.
35 Kowa Building, 3F, 1-14-14 Akasaka, Minato-ku, Tokyo 107-0052, Japan
Representative Director: Junichi Kurose