Privacy Policy

Flagship Inc. (hereinafter "the Company") operates businesses including e-commerce service provision, software provision, and customer success support. The Company recognizes the importance of protecting personal information in today's information and communication society, and strives to protect personal information based on the following policy. When providing personal information to the Company, please read and agree to the following before doing so.

Definition of Personal Information
Personal information refers to information about a living individual as defined by the Act on the Protection of Personal Information (name, date of birth, and other information that can identify a specific individual), as well as information used in connection with a specific individual.
Purpose of Use
The Company may use collected personal information for the following purposes.
1. For personal authentication of users and provision of various services to users
2. For providing information and support regarding our services
3. For responding to inquiries and communicating with you regarding them
4. For improving the quality of our inquiry handling, referring to past correspondence history, and conducting internal reviews
5. For preparing draft responses and improving operational efficiency using generative AI and other tools
6. For sending email newsletters and information on seminars, services, etc. (only where the user has requested it)
7. For detecting and preventing spam, unauthorized access, and other misuse
8. For conducting user surveys and improving our services
9. For creating and analyzing statistical data
10. For analyzing browsing history on our website, responses to our emails, information on visiting organizations, etc., in order to provide information tailored to your interests, carry out and measure the effectiveness of marketing initiatives, and improve our products and services
11. For other purposes incidental to the above items
Restriction on Use of Personal Information
The Company will not handle personal information beyond the scope necessary to achieve the purpose of use without obtaining prior consent from the individual. However, this does not apply in the following cases.
1. When required by law
2. When necessary to protect the life, body, or property of a person and it is difficult to obtain the consent of the individual
3. When particularly necessary for improving public health or promoting the sound development of children and it is difficult to obtain the consent of the individual
4. When it is necessary to cooperate with a national agency, local government, or a party entrusted by them in performing duties prescribed by law, and obtaining the consent of the individual may impede the performance of such duties
Proper Acquisition of Personal Information
The Company acquires personal information by lawful and proper means and will not acquire it through deception or other improper means.
Notification of Purpose of Use at Time of Acquisition
When acquiring personal information, the Company will announce the purpose of use in advance. However, this does not apply in the following cases.
1. When notifying the individual of, or announcing, the purpose of use may harm the life, body, property, or other rights and interests of the individual or a third party
2. When notifying the individual of, or announcing, the purpose of use may harm the right to privacy or legitimate interests
3. When it is necessary to cooperate with a national agency or local government in performing duties prescribed by law, and notifying the individual of, or announcing, the purpose of use may impede the performance of such duties
4. When the purpose of use is deemed clear from the circumstances of acquisition
Security Control Measures
The Company will take necessary and appropriate measures to prevent unauthorized access to, and leakage, loss, or damage of, personal information, and otherwise to ensure the secure management of personal information.
Supervision of Contractors
The Company may entrust all or part of the handling of personal information to third parties within the scope necessary to achieve the purpose of use. In such cases, the Company will require contractors to enter into agreements including confidentiality obligations, and will exercise necessary and appropriate supervision to ensure that personal information is managed securely by the contractor.
For the provision of personal data to business operators located in foreign countries, please see Transfer to Third Parties Abroad.
Entrustment to Business Operators in Foreign Countries
In connection with the use of cloud services, inquiry management systems, generative AI services, and the like, the Company may entrust the handling of personal information to business operators located in foreign countries. For details, please see Transfer to Third Parties Abroad. The Company will take necessary and appropriate measures to ensure that such contractors implement measures consistent with the intent of this Policy, taking into account the personal information protection systems of the relevant foreign country.
Restriction on Provision to Third Parties
The Company will not provide personal information to third parties without obtaining prior consent from the individual, except in the following cases.
1. When required by law
2. When necessary to protect the life, body, or property of a person and it is difficult to obtain the consent of the individual
3. When particularly necessary for improving public health or promoting the sound development of children and it is difficult to obtain the consent of the individual
4. When it is necessary to cooperate with a national agency, local government, or a party entrusted by them in performing duties prescribed by law, and obtaining the consent of the individual may impede the performance of such duties
5. When the following matters have been announced or made public in advance
  1. That the purpose of use includes provision to third parties
  2. The items of data to be provided to third parties
  3. The means or method of provision to third parties
  4. That the provision of personal information to third parties will be stopped at the request of the individual
6. When the Company entrusts all or part of the handling of personal information within the scope necessary to achieve the purpose of use
7. When personal information is provided in connection with the succession of business due to a merger or other reason
8. When personal information is used jointly with specific parties, and the individual has been notified in advance, or it has been made readily accessible to the individual, of that fact, the items of personal information to be jointly used, the scope of the joint users, the purposes of use of the users, and the name of the person responsible for managing the personal information
Use of Cookies and Access Analysis Tools
On the Company's website, we use cookies and similar technologies and the following tools to understand usage, improve our website and services, send emails, and conduct sales and marketing activities. In connection with the use of these tools, the following information is transmitted to each provider.
1. Google Analytics
  - Provider: Google LLC
  - Information transmitted: URLs of pages viewed, referrers, browser and device information, identifiers such as cookies, IP addresses, etc.
  - Our purpose of use: Analyzing website traffic and improving our website and services
  - How to opt out: By installing the Google Analytics Opt-out Browser Add-on provided by Google, you can stop Google Analytics from collecting information in supported browsers.
  - Provider's privacy policy: Google Privacy Policy
2. Klaviyo
  - Provider: Klaviyo, Inc.
  - Information transmitted: Email addresses, browsing history on our website, email open and click history, identifiers such as cookies, IP addresses, etc.
  - Our purpose of use: Sending emails, analyzing browsing history, etc., providing information tailored to your interests, and carrying out and measuring the effectiveness of marketing initiatives
  - How to opt out: You can unsubscribe from our emails via the unsubscribe link included in each email we send. You can also restrict the use of cookies through your browser settings. However, unsubscribing from emails or restricting cookies does not stop all collection and use of activity history. For other requests to stop use, etc., please contact the inquiry desk specified in this Policy.
  - Provider's privacy policy: Klaviyo Privacy Notice
  Email addresses handled in Klaviyo and the activity history linked to them are treated as personal information in accordance with this Policy.
3. DocodocoJP
  - Provider: Geolocation Technology, Inc.
  - Information transmitted: IP addresses, URLs of pages viewed, referrers, browser and device information, etc.
  - Our purpose of use: Estimating visiting organizations based on IP addresses; obtaining information such as organization name, industry, location, and network information; and using this information to analyze website traffic and for sales and marketing activities
  - How to opt out: You can refuse the storage of cookies used to collect activity history, etc. via the provider's opt-out page. This setting applies only to the storage of cookies and does not stop the estimation of visiting organizations based on IP addresses. Disabling cookies in your browser also does not stop the collection and analysis of information based on IP addresses.
  - Provider's privacy policy: Geolocation Technology, Inc. Personal Information Protection Policy (Japanese)
Where information obtained through these tools constitutes personal information, or where the Company uses it in combination with personal data held by the Company, the Company will handle such information in accordance with this Policy.
You can restrict or disable the use of cookies through your browser settings. However, in that case, some features of the Company's website may not be available. In addition, disabling cookies does not stop all collection and transmission of information by technologies other than cookies.
For the provision of personal data to business operators located in foreign countries in connection with the use of these tools, please see Transfer to Third Parties Abroad.
Disclosure of Personal Information
When requested by the individual to disclose their personal information, the Company will confirm that the request is from the individual themselves and disclose the information to the individual without delay. However, if disclosure falls under any of the following, all or part of the information may not be disclosed, and if the Company decides not to disclose it, the individual will be notified without delay.
1. When disclosure may harm the life, body, property, or other rights and interests of the individual or a third party
2. When disclosure may significantly impede the proper execution of the Company's business
3. When disclosure would violate other laws or regulations
Correction of Personal Information
When the individual requests correction, addition, or deletion (hereinafter "correction, etc.") of personal information on the grounds that it is not accurate, the Company will confirm that the request is from the individual themselves, and unless a special procedure is prescribed by other laws, will promptly conduct the necessary investigation within the scope necessary to achieve the purpose of use, make the correction, etc. based on the results, and notify the individual accordingly.
Suspension of Use of Personal Information
When the individual requests suspension of use or deletion (hereinafter "suspension of use, etc.") of personal information on the grounds that it is being handled beyond the scope of the purposes of use announced in advance, or that it was acquired through deception or other improper means, the Company will confirm that the request is from the individual themselves, promptly conduct the necessary investigation, suspend the use, etc. of the personal information based on the results, and notify the individual accordingly. However, if suspension of use, etc. requires significant costs or is otherwise difficult to implement, and alternative measures necessary to protect the rights and interests of the individual can be taken, the Company may implement such alternative measures. In addition, if the request does not meet the requirements under applicable laws and regulations, we may be unable to accommodate it. In some cases, a separate fee may be charged for our response.
Retention Period
When personal information received by the Company is no longer needed after the purpose of use has been achieved, the Company will delete or anonymize it, except where retention is required by law. In addition, inquiry information may be retained for a certain period for the purposes of managing correspondence history and improving our services.
Response to Leakage, etc.
In the event of a leakage, etc. of personal information, the Company will make the necessary reports and notifications in accordance with the Act on the Protection of Personal Information and other relevant laws and regulations.
Revisions to This Privacy Policy
The Company may revise this Privacy Policy in response to amendments to laws and regulations, changes to our services, or as otherwise necessary. The revised Policy shall take effect when it is posted on this page. In the event of material changes, the Company will notify you by announcement on the Company's website or by other methods the Company deems appropriate.
Contact Us
For inquiries regarding this Privacy Policy, please contact us at:
<Contact>
Flagship Inc.
Personal Information Management Office
Email: security@flagship.cc

Established: July 1, 2020
Last revised: October 9, 2026
Flagship Inc.
Representative Director: Koji Jimba