Tohto Co. Ltd. shall handle personal information of its customers and interested parties for business purposes in compliance with the laws and other regulations concerning the protection of personal information. This company has also established its own rules and systems for protecting personal information by paying attention to the international trend, and shall endeavor to protect personal information according to the following privacy policy.

1. This company shall make this privacy policy known to the public, educate its staff (including executives, regular employees, part-time workers, temporary workers, advisers, and persons working based on consignment contract) and interested parties on the importance of this policy, and practice, improve and maintain the policy.

2. This company shall take measure to ensure security of information in order to prevent the loss, destruction, alteration, leakage, etc. of personal information.

3. This company shall collect personal information only through legitimate and fair means. It shall obtain from customers consent regarding purposes of using their personal information, notify on its internet homepage what information is needed by the company, or take other necessary measures.

4. This company shall confirm that a person has the rights to disclose, amend, stop using or remove his/her own personal information, and shall ensure proper response to the request from the person concerning the exercise of these rights. The company shall establish a service section to deal with this matter and make it known to the public.

5. This company may share personal information with third parties, or release it to third parties in order to outsource its business. In such cases, the company shall investigate the said parties, and if necessary, shall conclude consignment contracts or nondisclosure agreements (and ensure their implementation), or take other necessary measures in accordance with laws and regulations.

6. Personal information shall be used within the scope of business purposes by authorized employees only, who have a legitimate business reason, to the extent that the use of the information is necessary to conduct their assigned business.

7. This company shall endeavor to keep personal information it holds, updated and accurate.

8. This company shall not collect, use or provide personal information which includes the contents described below.
(1) Information concerning political sympathies, opinion, belief and religion.
(2) Race, ethnic group, lineage, domicile of origin (excluding information of prefectures where domicile of origin is placed), physical and mental disorder, criminal record, and other information which may cause social discrimination.
(3) Information concerning the right of workers to organize and information concerning group activities including collective bargaining.
(4) Information concerning participation in demonstration and exercise of the right to petition and other political rights.
(5) Medical and sexual information.

Protection and Handling of Personal Information