Privacy Policy

Established: July 1, 2021
Revised: May 1, 2023
Revised: April 10, 2024

Blue Inc. (hereinafter referred to as “the Company”) has established the following policy regarding the handling of personal information, and users agree to it.
The definition of terms in this document shall be in accordance with the Act on the Protection of Personal Information (hereinafter referred to as the “Personal Information Protection Act”) and related laws and regulations.

1. Compliance with relevant laws and regulations, and guidelines, etc.
   The Company will comply with the Personal Information Protection Law, other related laws and regulations, guidelines established by the Personal Information Protection Committee, and this Privacy Policy, and handle personal information in a lawful and appropriate manner.

2. Acquisition of personal information
   The Company will acquire your personal information through legal and appropriate means.

3. Purpose of use of personal information
   The Company will use your personal information within the scope of the following purposes of use or within the scope of the purposes of use that are clear from the circumstances under which the information was obtained, and will not use it for any other purposes unless the Company have your consent or are permitted to do so by laws and regulations.

   1. Register for the event (CODE BLUE)
   2. After-event service and support
   3. Provision of information on various events, services, and exhibitions etc.
   4. To respond to inquiries and consultations from customers
   5. Requests for payment, refunds, payments, and related work
   6. Improving the quality of registrant support (telephone support) and preventing problems

4. Entrustment of personal data
   In order to facilitate our business and provide better services to our customers, the Company may outsource the handling of personal data of our customers to our partner companies. However, the personal data to be entrusted will be limited to the minimum information necessary to carry out the entrusted business.

5. Provision of Personal Data to Third Parties
   The Company will not provide your personal data to a third party (excluding contractors) unless the Company has your prior consent or is permitted to do so by laws and regulations. In case when the Company intends to provide your personal data to third parties in foreign countries, the Company will provide information and obtain your prior consent.

6. Management of Personal Data

   1. Ensuring the accuracy of data content
      The Company will endeavor to keep the personal data of customers accurate and up-to-date to the extent necessary to achieve the purpose of use, and to delete such personal data when it is no longer necessary to use it.

   2. Safety Management of Personal Information
      The Company have established handling rules for the protection of personal information, clearly defined the responsibilities and authority of employees, and developed and operates rules and procedure manuals for safety management, and monitors their implementation. In addition, the Company have taken necessary and appropriate measures for physical safety control to prevent leakage, loss, or damage of your personal data, and other safety control as technical safety control necessary to prevent unauthorized access, etc. Specific safety control measures for personal data in our possession are as follows
      
      

      <Organizational safety control measures>
      (a) Establishment of handling rules for the protection of personal information
      (b) Establishment of responsibilities and authorities, development and operation of rules and procedures for safety management, and monitoring of their implementation.
      
      

      <Physical safety control measures>
      (a) Implementing measures to prevent unauthorized persons from viewing personal data in areas where personal data is handled.
      (b) Measures are taken to prevent theft or loss of equipment, electronic media, documents, etc. that handle personal data, and measures are taken to prevent personal data from being easily discovered when such equipment, electronic media, etc. are carried around.
      
      

      <Technical security control measures>
      (a) Implementing access control to limit the scope of persons in charge and the scope of personal information databases etc. to be accessed.
      (b) Implementing mechanisms to protect information systems handling personal data from unauthorized external access or unauthorized software

   3. Supervision of employees
      When the Company allows its employees to handle the personal data of our customers, the Company will ensure that they are familiar with the proper handling of personal information, provide them with appropriate training, and supervise them in a necessary and appropriate manner as personal safety control measures.

   4. Supervision of contractors
      When entrusting the handling of customers’ personal data to a subcontractor, the Company will select a subcontractor that has taken appropriate security management measures and will provide necessary and appropriate supervision to the subcontractor.

7. Acceptance of personal data in possession

   1. If a customer or its agent requests notification of the purpose of use of retained personal data, the Company will notify the customer or its agent without delay, except in the following cases:

      1. When the purpose of use of retained personal data that identifies the customer is clear;
      2. When there is a risk of harm to the life, body, property, or other rights or interests of the customer or a third party;
      3. When there is a risk of harm to the rights or legitimate interests of the Company; or
      4. When it is necessary to cooperate with a national agency or a local government in executing affairs prescribed by laws and regulations, and when there is a risk of interfering with the execution of said affairs.

   2. When a customer or its agent requests disclosure of retained personal data, the Company will notify the customer without delay, except in the following cases:

      1. When there is a risk of harm to the life, body, property, or other rights and interests of the customer or a third party
      2. When there is a risk of significant hindrance to the proper execution of the company’s business.
      3. When it would violate laws and regulations

   3. If a customer or its agent requests the correction, addition, or deletion of retained personal data, the Company will investigate the request without delay and take appropriate action based on the results.

   4. In the event that a customer or its agent requests the cessation of use or deletion of retained personal data, and it is found that there is a reason for the request, the Company will take appropriate action.

   5. If you wish to make a request as described in the preceding four paragraphs, please fill out the Company’s prescribed request form and send it together with the documents described in the request form to the Company’s contact point as described in 8 below. The personal information provided by the customer will be used for the purpose of responding to the customer’s request and will be kept strictly confidential. Please note that the Company will not send back the request form and attached documents.

8. Contact for inquiries and complaints
   BLUE Inc. (CODE BLUE Office)
   KS Floor, Resona Kudan Building 5F, 1-5-6 Kudan-minami, Chiyoda-ku, Tokyo 102-0074, Japan
   TEL: 03-4500-1754
   Phone hours: 10:00-17:00
   (Except Saturdays, Sundays, national holidays, and our company holidays.)
   E-mail: info@codeblue.jp

9. Revision of the Privacy Policy
   The Company may review the contents of this Privacy Policy from time to time and make changes as necessary. In such cases, the revised Privacy Policy will be applied from the date of publication of the revised version.