1. Purpose of Use of Personal Information

madigital LLC (hereinafter, “the Company”) will obtain and use users’ personal information (as defined in Article 2, Paragraph 1 of the Act on the Protection of Personal Information; details are provided in Article 2 below) for the following purposes in connection with the services provided by the Company under the name “maru Order” (hereinafter, “the Service”):

1. To provide the Service and to contact users regarding the Service

2. To invoice and process payments for fees and other charges related to the Service

3. To improve the Service and to develop new services operated by the Company

4. To prevent usage of the Service in ways that violate the Service Terms

5. To provide information about various services operated by the Company

6. For the delivery, display, and performance measurement of advertisements

7. For traffic measurement and behavioral analysis of users

8. For other purposes incidental to the purposes listed above

2. Types of Personal Information Collected

The Company will obtain the following personal information from users depending on their attributes when using the Service.

1. When the user is an individual

1. Name
2. Telephone number
3. Email address
4. Location information
5. Referrer information
6. IP address
7. Financial information including bank account and payment card numbers, and other historical information
8. Information related to server access logs
9. Any other information entered by the user in the Service’s registration forms


2. When the user is a corporation

1. ご担当者様の氏名
2. Name of the person in charge
2. Work email address of the person in charge
3. Work telephone number of the person in charge
4. Financial information including bank account and payment card numbers, and other historical information
5. Any other information entered by the user in the Service’s registration forms

3. Restrictions on Use of Personal Information

The Company will not handle personal information beyond the scope necessary to achieve the stated purposes without obtaining prior consent from the individual. However, this does not apply in the following cases:

1. When required by law

2. When necessary to protect a person’s life, body, or property and obtaining consent is difficult

3. When particularly necessary for improving public health or promoting the healthy development of children, and obtaining consent is difficult

4. When cooperation is required for a national or local government agency, or a party entrusted by such agencies, to perform duties prescribed by law, and obtaining consent may impede the execution of such duties

4. Proper Acquisition of Personal Information

The Company will acquire personal information appropriately and will not obtain it through deception or other wrongful means.

5. Changes to the Purpose of Use

If the Company changes the purpose of use of personal information, it will do so only within a scope reasonably related to the original purpose. Any changes will be notified to users or published on the Service’s website.

6. Ensuring Accuracy and Security Measures

The Company will keep personal information accurate and up to date within the scope necessary to achieve the purpose of use, and will endeavor to promptly delete the information when it is no longer needed. The Company will also take necessary and appropriate measures to prevent leakage, loss, or damage of personal information and to manage its security.

7. Supervision of Contractors

If the Company entrusts all or part of personal information handling to a third party, it will enter into contracts including confidentiality obligations or obtain agreement to Company-designated terms. The Company will appropriately supervise such contractors to ensure proper management of personal information.

8. Restrictions on Provision to Third Parties

The Company will not provide personal information to third parties without prior consent, except in the following cases:

1. When required by law
2. When necessary to protect a person’s life, body, or property and obtaining consent is difficult
3. When particularly necessary for improving public health or promoting the healthy development of children, and obtaining consent is difficult
4. When cooperation with government agencies is necessary and obtaining consent may impede the performance of duties



However, the following cases are not considered “provision to third parties”:

1. When personal information is provided due to outsourcing all or part of handling within the necessary scope
2. When personal information is provided due to business succession through merger or other reasons
3. When personal information is jointly used with a specified party and the user has been notified in advance or the information is made easily accessible regarding the jointly used items, the scope of users, purpose of use, and the entity responsible for managing the information



If changes are made to the purpose of joint use or the responsible entity, the Company will notify the user in advance or make the information easily accessible.

9. Disclosure of Personal Information

Upon request by the individual, the Company will promptly disclose their personal information. However, disclosure may be withheld in whole or in part if:

1. It may harm the rights or interests of the individual or a third party
2. It may significantly hinder the proper execution of the Company’s business
3. It may violate other laws or regulations
Information or data that is not personal information will generally not be disclosed.

10. Correction and Deletion of Personal Information

If the Company receives a request from the individual to correct, add, or delete (collectively “Correction”) their personal information on the grounds that it is incorrect, the Company will conduct necessary investigations within the required scope and make corrections based on the results, unless otherwise required by law. The result will be notified to the individual.

11. Suspension of Use of Personal Information

If the individual requests suspension of use or deletion (“Suspension”) of their personal information on the grounds that it is being handled beyond the stated purpose or was obtained by improper means, the Company will promptly investigate and, based on the results, take necessary corrective measures and notify the individual. If Suspension would incur excessive cost or is otherwise difficult, alternative measures will be taken to protect the individual’s rights and interests.

12. Use of Data

In operating the Service, the Company uses the following data. Use of these data is not restricted as long as they do not constitute personal information and do not violate applicable laws:

1. Anonymous or statistical information created by processing personal information so that individuals cannot be identified

2. Information related to visitors of websites and applications operated by the Company or its partners, such as viewed ads/pages, gender, occupation, age, viewed pages/ads, usage time, usage method, and environment

3. IP addresses, cookie information, location information, and device identifiers

13. Changes to the Privacy Policy

The Company may change this Privacy Policy within the scope permitted by law, including changes to the purpose of use. The updated Privacy Policy will become effective once published on the Service’s website.

14. Contact Information

For requests regarding disclosure, correction, Suspension, or other inquiries about this Privacy Policy, please contact:

Address:

Company Name: madigital LLC

Email Address:

Email: [info@madigit.jp](mailto:info@madigit.jp)

15. Use of Google Analytics

The Company uses Google Analytics, a service provided by Google LLC, to collect and analyze user access logs using cookies (*). Some information may be collected by Google LLC, but no personally identifiable information is included. These data are managed in accordance with the Google Privacy Policy ([https://policies.google.com/privacy](https://policies.google.com/privacy)).

(*) A “cookie” is a small text file sent from a website to a user’s browser. It enables the web server to identify the user’s browser, but it does not identify individual users.

For details on how Google collects and processes data, please refer to:

“How Google uses information from sites or apps that use our services”

[https://policies.google.com/technologies/partner-sites](https://policies.google.com/technologies/partner-sites)

If you want this refined into a more natural-sounding English privacy policy, I can also edit it into native legal/business style.