Global Privacy Policy
Effective Date: Dec 15, 2023
Giftpad Co.,Ltd., located at 4th Floor, Horiekagu WEST Building, 3-9-13 Minamihorie, Nishi-ku, Osaka-shi, Osaka, Japan, (the “Company”) complies with applicable personal information protection laws of each country and processes the personal information of customers, addressees, officers and employees, etc. of trading partners, shareholders, job applicants, and resignees of the Company (collectively, “you”, unless otherwise specified) as follows.
In addition to this Global Privacy Policy which applies to all of you, the following country-specific exhibits may also apply to you depending on the areas in which you reside or are located. In such case, please refer to the applicable country-specific exhibits. If this Global Privacy Policy conflicts with the country-specific exhibits, such exhibits will prevail.
Exhibit: Thailand
The Company processes the following personal information and any other personal information the Company has obtained in relation to business activities (if required by applicable laws and regulations, the Company shall obtain such personal information after separately notifying you).
(1) Information of customersThe Company processes the following personal information about its customers of the Company (including potential customers and customers who access the website of the Company).
– Name, address, postcode, telephone number, email address, ID, password, and products or contents of services for which you have entered into contracts with the Company, purchase history, location data, and details of inquiries
– Information on questionnaires (name, email address, and contents of answers of a customer who answers the questionnaires)
– Cookies and other online terminal identifiers, IP address, provider information, device information, web browser information, user activities (time of day when the website was visited, session length, frequency, transitions, traffic sources, clicks in the website, and scrolling in the website), and attribute information of customers who access the website (for more information about, age, gender, interests categories, affinity categories, and in-market segments, visit About Demographics and Interests – Analytics Help (google.com)).
The Company processes the following personal information about the addressees designated by customers.
– Name, address, postcode, telephone number, and email address
– Details of inquiries
The Company processes the following personal information about the officers, employees, and the like of the trading partners of the Company (including potential trading partners and trading partners who access the website of the Company).
– Name, address, name and location of the company, department, title, telephone number, e-mail address, products and contents of services that the officer, employee, or the like has considered, and details of inquiries
The Company processes the following personal information about job applicants for the Company.
– Name, address, telephone number, email address, date of birth, gender, facial portrait, educational background, work experience, family structure, results of aptitude inspection, qualifications, and academic achievement
– Information that the Company obtains through a job interview (such as details of evaluation)
The Company processes the following personal information about resignees from the Company.
– Name, address, date of birth, telephone number, email address, gender, facial portrait, term of office, salary and remuneration, amount of retirement allowance and retirement bonus, account number, department history, staff code, career history, educational background, family structure, results of aptitude tests, social insurance information, tax information, evaluation history, specific personal information, and health information
– Information that the Company obtains through a job interview (such as details of evaluation)
– details of inquiries
The Company processes your personal information for the following purposes. The Company may also de-identify or aggregate your personal information.
(1) Information of customers– to register an account for services of the Company
– to arrange, ship, and deliver the products that you ordered and to settle the purchase price
– to make the products you ordered (such as monogramming service and service of sending messages with the products)
– to analyse the information on browsing and purchase history, location data, and the like the Company obtained and to provide information on products or services that are suitable for each customer
– to provide targeted advertisement based on hobbies and preferences that can be estimated from browsing and purchase history, or the like the Company obtained
– to analyse attribute information of customers who accessed the website of the Company and to personalize and improve the website of the Company
– to maintain the website of the Company, to diagnose server problems, and to fix faults
– to respond to inquiries
– to implement questionnaires
– to execute entrusted services
– to use as a reference for new product and service development and sales plans
– if required, to respond to disputes and litigation and to comply with the legal obligations of the Company
– with the separate consent of customers, or as otherwise separately disclosed at the time information is collected
– for other purposes permitted under applicable laws and regulations
– to deliver the products that a customer ordered
– to respond to inquiries
– to respond to inquiries
– to receive services or products from trading partners
– to send information on the products and services of the Company
– for communication related to business negotiations or meetings
– if required, to respond to disputes and litigation and to comply with the legal obligations of the Company
– with your separate consent, or as otherwise separately disclosed at the time information is collected
– for other purposes permitted under applicable laws and regulations
– to contact, to conduct employment screenings for, and to send notices regarding employment to, job applicants
– to respond to various inquiries from resignees
The Company processes your personal information in accordance with applicable personal information protection regulations. Please refer to the country-specific exhibits for details regarding the Company’s legal basis for processing in the country in question.
The provision of your personal information may be mandatory for reasons such as being a statutory or contractual requirement, or a requirement necessary in order to enter into a contract. Specific details are as follows.
– The provision of your name, address, email address and telephone number is a requirement necessary for the execution of a contract with the Company. If you do not provide such personal information, you may not be able to use the products and services of the Company.
– The provision of information such as cookies strictly required for the use of the website of the Company, user activities obtained by those cookies, IP addresses, and types of web browsers is necessary for the use of the website of the Company. If you do not provide such information, you may not be able to use the website of the Company.
In any other cases where you do not provide the Company with your personal information despite the fact that the provision of that personal information is a necessary requirement, the Company may not be able to provide you with the products, services, and the like of the Company (including the website of the Company).
– The provision of your name and address is a requirement necessary for the execution of a contract between a customer and the Company. If the customer does not provide such personal information, the Company may not be able to deliver products to the addressee.
– The provision of your name, name of department, name of title, email address, telephone number, and location of company is a requirement necessary for the execution of a contract with the Company. If you do not provide such personal information, you may not be able to use the products and services of the Company.
– The provision of your name, address, age, telephone number, email address, work experience, educational background, family structure, results of aptitude inspection, and information the Company obtained through a job interview may be required when applying for employment and recruitment activities. If you do not provide such personal information, you may not be able to participate in recruitment activities of the Company.
– The provision of your name, address, age, telephone number, email address, career history, educational background, family structure, results of aptitude tests, information obtained through a job interview, social insurance information, tax information, evaluation history, specific personal information, and health information may be necessary. If you do not provide such personal information, the Company may not be able to respond to various inquiries.
In order to determine the appropriate retention period for personal information, the Company will consider the following: the volume, nature, and confidentiality of the personal information, the potential risk of damage caused by unauthorized use or disclosure of the personal information, the purposes for which the Company processes the personal information, whether the Company can achieve those purposes by other means, and applicable legal requirements. If your personal information collected by the Company becomes no longer necessary, the Company will delete or anonymize the personal information, or if such measures are impracticable (for example, if the personal information has been stored in back-up archives), the Company will retain the personal information safely until its deletion becomes practicable and ensure that any new processing will not be conducted with respect to the personal information.
The Company receives your personal information directly from you or automatically obtains from cookies or any other online terminal identifiers. The Company obtains information on analysis and attribute information of you who access the website of the Company indirectly from a website traffic analysis service provider such as Google LLC. The Company may obtain the personal information of addressees indirectly from customers.
The Company shares with and discloses your personal information to the following third parties below in order to fulfil the purposes of processing personal information as set out above.
○Sharing with Processors (service providers)(1) Personal Information of customers
– Delivery Companies such as JAPAN POST Co., Ltd., SAGAWA EXPRESS CO., LTD., and Yamato Transport Co., Ltd.
– Website traffic analysis service providers such as Google LLC
– Other contractors of the Company
– Delivery Companies such as JAPAN POST Co., Ltd., SAGAWA EXPRESS CO., LTD., and Yamato Transport Co., Ltd.
– Other contractors of the Company
– Website traffic analysis service providers such as Google LLC
– Cloud-based service providers for customer management such as CRM
– Other contractors of the Company
– Website traffic analysis service providers such as Google LLC
– Cloud-based service providers for recruitment management
– Other contractors of the Company
– Website traffic analysis service providers such as Google LLC
– The cloud-based service provider for attendance management, payroll calculation, social insurance, year-end tax adjustment, and the like
– Other contractors of the Company
In some instances, the Company may be required to disclose your personal information to public and governmental authorities within or outside your country of residence in accordance with law and/or requests from such authorities. The Company will also disclose your personal information if the disclosure is necessary or appropriate, due to the purposes of law enforcement or responding to other issues of public importance. The Company will also disclose your personal information if the disclosure is reasonably necessary to protect the Company’s rights, to pursue available remedies, to enforce the Company’s terms of use, to investigate fraud, or to protect the Company’s operations or you.
○OtherIn addition, the Company may also share your personal information with other parties, including:
– As part of an actual or potential corporate sale, merger, acquisition, or reorganization, or other transfer of all or part of our assets, including as part of a bankruptcy proceeding
– Cases in which there is a need to protect a human life, body, or fortune and it is difficult to obtain your consent
– With your consent – Other cases permitted under applicable laws and regulations
As a result of the above sharing and disclosure, your personal information may be transferred to the following countries:
– Japan
In such cases, the Company will take proper protection measures required by the personal information protection regulation of each country. For the protection measures of each country, please refer to the country-specific exhibits.
8. Security measuresFor safety management of your personal information, the Company takes the following safety management measures:
– Formulation of basic policies: to secure proper processing of personal information, the Company will formulate basic security policies such as “compliance with related laws, regulations, guidelines, and the like,” and “questions and complaints processing center.”
– Preparation of procedures related to processing of personal information: in each of the steps of acquiring, using, storing, providing, deleting, and disposing etc., the Company will form processing procedures for personal information regarding such as processing methods, responsible persons, persons in charge, and their duties.
– Organizational safety management measures: the Company will, as well as identifying persons responsible for the processing of your personal information, clarify which employees will process personal information and the scope of personal information that such employee will process, and prepare a reporting and communication system for when a breach of such access authorization is found or a breach of any personal information is found (in accordance with applicable personal information protection regulations).
– Human safety management measures: The Company will conduct regular training for employees for important matters regarding processing of personal information.
– Physical safety management measures: In the areas that personal information will be processed, the Company will, as well as managing employees’ access of rooms and limiting devices that would be brought into the room, take measures to prevent access to personal information by persons without authorization. The Company will, take measures to prevent robbery, loss or unauthorized access etc. devices, electronic media, documents, and anything else containing personal information.
– Technical safety management measures: The Company will limit the number of persons in charge and the scope of personal information databases that people can access. The Company will install systems to protect information systems that process personal information from unauthorized access and unauthorized software from outside.
– Ascertaining the external environment: The Company takes safety management measures after ascertaining systems regarding protection of personal information in the countries where personal data are handled.
When you access the website of the Company and enable cookies, etc. (including tracking technologies such as flash cookies and web beacons, and other technologies; “Cookies, etc.”), the Company may automatically acquire information about the PC, mobile phone, tablet, or other information regarding the communication devices used by you. If the Company acquires such information, the Company will handle the information as personal information. If you do not wish to use Cookies etc., you may disable them by changing your web browser settings.
○Analytics cookiesThe Company may work with third parties that collect data about your use of the website of the Company over time. For example, the system may use Google Analytics for analytics and marketing purposes.
In Google Analytics, your information will be collected by using Cookies, etc. For more information about how Google Analytics collects and uses data when you use the website of the Company, visit https://policies.google.com/technologies/partner-sites?hl=en, and to opt out of Google Analytics, visit here (tools.google.com/dlpage/gaoptout).
The Company will respect the rights you hold under personal information protection regulations applicable to you. You may request disclosure, correction, addition, and elimination of content, suspension and erasure of usage, and suspension of provision to third parties, of personal information, or disclosure of records of personal information provided to a third party in accordance with Japanese laws regarding protection of personal information. If you request disclosure of personal information or records of personal information provided to a third party, please contact the Personal Information Protection Consultation Center, Customer Support Center. If you wish to exercise other rights, the Company will confirm the identity of the applicant or his or her agent and respond to the request unless there is a particular reason not to do so, so please make an inquiry using the contact details in Article 11 (Contact details) of this Global Privacy Policy.
In addition, rights may be granted to you by applicable personal information protection regulations of each country that . For rights granted in each country, please refer to the country-specific exhibits. If you wish to exercise your rights, please make an inquiry using the contact details in Article 11 (Contact details) of this Global Privacy Policy.
11. Contact detailsFor questions, complaints, or any other inquiries regarding the processing of personal information by the Company or this Global Privacy Policy, please contact the consultation center stated below:
Personal Information Protection Consultation Center, Customer Support Center
– Email address: privacy@giftpad.jp
The Company may, in making changes to this Global Privacy Policy (including country-specific exhibits), change or add to all or part of this Global Privacy Policy by publication on the website, sending e-mail to you, or giving notice by any other method that the Company deems appropriate (subject to any applicable laws and regulations). If there are any necessary procedures in personal information protection regulations that apply, such procedures will be taken.
The Company advises you to periodically visit this page and confirm any updates. You can confirm the “last updated” date to know when this Global Privacy Policy (including each jurisdiction-specific exhibit) has last been updated.