Privacy Policy

We have developed the following policy regarding the protection of personal information, have established a management system for personal information protection (the Personal Information Protection Management System), and are carrying out activities to implement, maintain and improve it.

1. Purpose of operating the Personal Information Protection Management system (purpose of personal information protection)
   We will handle personal information appropriately and strive to prevent personal information leakage accidents to maintain trust as a company.
2. We will clearly define the purpose of use within the scope necessary for business execution and will acquire, use, and provide personal information appropriately.
3. We will use acquired personal information only within the purpose of use, and will take measures to prevent it from being used for purposes other than the intended purpose, and will provide to a third party without the consent of the person, except when permitted by the Personal Information Protection Law and other related laws and regulations.
4. We will take preventive measures with respect to unauthorized access to personal information, and the loss, destruction, falsification and divulgence thereof. Moreover, in the unlikely event that an incident involving any of the foregoing issues occurs, we will take prompt corrective measures.
5. We will comply with laws and regulations, guidelines stipulated by the government, and any other rules that are applicable to personal information held by us.
6. We will properly respond to your complaints and consultations concerning our handling of personal information.
7. We will continually improve the personal information protection management system.

Established on April 1, 2006
Amended on July 6, 2023
Atsushi Kawata
CEO, oRo Co., Ltd.

Handling of Personal Information

Name of Representative, Business Name, Address

Atsushi Kawata
CEO, oRo Co., Ltd.
Meguro Suda Building, 3-9-1, Meguro, Meguro-ku, Tokyo, 153-0063

Person in Charge of Protection and Management of Personal Information

Company Name: oRo Co., Ltd.
Person in charge of the management: Head of Security Office
Location: Meguro Suda Building, 3-9-1, Meguro, Meguro-ku, Tokyo, 153-0063
Tel: 03-5724-7001

Description of Divisions

Cloud Solutions Division

• Development and sales of "ZAC" and "Reforma PSA" (enterprise resource planning system)
• Offering of corporate system solutions
• Offering of corporate IT infrastructure solutions
• Business process outsourcing, etc.

Marketing Communication Division

• Formulation of strategies for communications between companies and their stakeholders
• Production of various types of advertising including TV commercials as well as advertising in magazines and newspapers
• Formulation of strategies for, planning, creation and operation of, websites
• Planning and implementation of various promotional activities and events
• Market research, analysis, effectiveness measurement, etc.

Development and sales of SaaS management tool "dxeco"

Scope of Use of Personal Information

1. a) Acceptance and cancellation of applications for the above-mentioned businesses
2. b) Management necessary to continuously offer services and post-cancellation management
3. c) Appropriate performing of operation, where all of or part of the processing of personal information is outsourced by customers
4. d) Exercising rights or fulfilling obligations pursuant to contracts with customers and laws and regulations

Purpose of Use of Personal Information

We will clarify the purpose of use on every occasion we obtain your personal information in a written document directly from you. We will handle personal information, whether it is obtained directly or indirectly, within the following limited scope of the purpose of use:

Details of Personal Information: Purpose of Use;

1. (i) Customer information: to perform sales activities and services outsourced to us;
2. (ii) General business partner information: to outsource delivery, printing and other general services and to carry out communications related to the management thereof;
3. (iii) Contractor information: to outsource services and conduct communications related to the management thereof;
4. (iv) Employee information: to manage employees in relation to personnel and general affairs as well as to conduct communications incidental thereto;
5. (v) Applicant information: to conduct communications regarding the screening of potential employees, participation in seminars and any other matter incidental thereto;
6. (vi) Inquiry information: to accept and respond to inquiries, complaints, consultation and requests for Disclosure, etc.; and
7. (vii) Information of subscribers to various services offered by us:
   • To offer services;
   • To carry out communications related to the above;
   • To distribute e-mail newsletters; and
   • To manage subscribers.

Disclosure of Personal Information to Third Parties

Except as permitted under laws and regulations, we will not provide any of your personal information to any third party without your consent. If we expect to provide any of your personal information to any third party, we will ask your consent upon notifying you of the following information:

1. a) Purpose of the provision to such third party;
2. b) Items of your personal information to be provided;
3. c) Measures or method of the provision;
4. d) Type and characteristics of the person who will receive such information or the organization of such person; and
5. e) Statement on the existence of a contract regarding the handling of personal information, if any.

Outsourcing of the Handling of Personal Information

We may outsource the handling of the personal information obtained from you to third parties within the extent necessary to achieve the purpose of use. We will select those third parties upon confirming that they have an adequate level of security regarding the handling of personal information, and shall conduct the necessary and appropriate supervision by way of contracts, etc.

Security Control Measures for Retained Personal Data

1. a) Formulation of basic policy
   In order to ensure the proper handling of personal data, we have established the basic policies: "compliance with relevant laws and regulations, guidelines, etc." and "contact for inquiries and complaints."
2. b) Development of disciplines related to the handling of personal data
   For each stage of acquisition, usage, storage, provision, deletion, disposal, etc., we have established rules regarding the handling method, the persons in charge, and their duties of handling personal data.
3. c) Organizational security control measures
   In addition to appointing a person responsible for the handling of personal data, we have clarified the scope of personal data and the employees who handle these data. Also, we have established a system of reporting and contacting employees in the event of facts or signs of violation of laws and handling regulations.
4. d) Personnel security control measures;
   We provide regular training to our employees regarding precautions of the handling of personal data.
5. e) Physical security controls
   In the area where personal data is handled, we manage the entry and exit of employees and restrict the equipment they bring in, and take measures to prevent unauthorized persons from viewing personal data.
6. f) Technical security measures
   Access control is implemented to limit the scope of the person in charge and the personal information database, etc. handled.
7. g) Grasping the external environment
   When providing personal data to a third party in a foreign country, we will implement security control measures upon understanding the system protecting the personal information in the particular country and the management system of the third party.

Disclosure, Etc. of Disclosable Personal Information and Contact Information

Upon your request, we will
・Notify the purpose of use
・Disclose
・Correct
・Suspend use
・Erase
・Disclose third party provision records
・Suspend provision to third parties
(“Disclosure, etc.”) the personal information held by the company.

Requests for disclosure, complaints, and inquiries regarding the privacy policy is as follows:
Meguro Suda Building, 3-9-1, Meguro, Meguro-ku, Tokyo, 153-0063
Person in charge of the handling of personal information at oRo Co., Ltd.
Tel: 03-5724-7001 (main) Fax: 03-5724-7002
Hours of operation: Monday through Friday 10:00 a.m. - 5:00 p.m. (excluding Saturdays, Sundays, public holidays as well as the Japanese New Year holiday period)

Matters to be Noted When Entering Personal Information

It is optional for you to enter your personal information. However, if you do not enter your personal information, we may not be able to take an appropriate response.

Acquisition of Personal Information by Methods Not Easily Recognizable by Users

We use cookies only as system information necessary for you to browse pages and information used to identify you when you use the website. They do not contain any personally identifiable information.

In case of any inconsistency between the Japanese version and the English version in our website, the Japanese version prevails.