Privacy Policy

Acua Inc. (hereinafter referred to as the "Company") establishes the following privacy policy (hereinafter referred to as the "Policy") regarding the handling of personal information (referring to "personal information" as defined in the Act on the Protection of Personal Information (Act No. 57 of 2003, hereinafter referred to as the "Personal Information Protection Act"), which means information relating to a living individual that can identify the specific individual by name, date of birth, or other descriptions contained in such information, or information containing a personal identifier).

1. Basic Policy on Personal Information Handling

• We comply with internal rules that establish appropriate acquisition, use, and provision of personal information considering the nature and scale of our business.
• We implement measures to prevent the leakage, loss, or damage of personal information and take prompt corrective actions in case of occurrence.
• We comply with laws, guidelines established by the government, and other norms related to the handling of personal information.
• We respond sincerely and promptly to complaints and inquiries from customers regarding personal information.
• We continuously improve our personal information management system.

2. Acquisition of Personal Information

The Company acquires personal information from customers through lawful and fair means, in compliance with the Personal Information Protection Act and other norms. When acquiring personal information, the Company will clearly indicate necessary matters such as the purpose of use of personal information and acquire personal information through appropriate methods within the scope of our business to the extent necessary to achieve that purpose. The Company does not acquire sensitive information.

3. Purpose of Use of Personal Information

When customers provide personal information, the Company will use it within the scope of the following business purposes, except when approved by the customer or when exceptions are recognized by relevant laws and regulations.

1. To provide services such as "Acua Invoice Flow" that you have registered for or applied for (including notifications and greetings based on social customs and communication with relevant parties necessary for service provision)
2. To invite you to events such as exhibitions and seminars related to invoice processing BPO services
3. To provide information about products, services, and campaigns offered by the Company such as invoice receipt proxy, data processing/verification, reporting, etc. (including sending emails, flyers, and other direct mail)
4. To conduct advertising, publicity, and other marketing activities (including measuring advertising effectiveness)
5. To report results to those who cooperated or participated in surveys, events, etc.
6. To provide various information such as demand trends and research information necessary for the development of our invoice processing services
7. To respond to inquiries from customers
8. To fulfill legal obligations
9. For the development and improvement of systems used by the Company
10. For other operations that the Company deems necessary to properly and smoothly fulfill transactions with customers
11. To provide personal information to third parties to the extent necessary to achieve the purposes related to the preceding items (provided that we will stop providing to third parties upon request from the person)

Please note that the Company may record conversations with customers.

4. Personal Information Security Management

The Company takes measures to ensure the security management of personal information against risks such as loss, destruction, falsification, and leakage, including establishing internal discipline, organizational structure, providing appropriate supervision to employees, and preventing unauthorized access. For important information such as invoice data, we also implement technical measures such as encryption to protect it.

5. Outsourcing of Personal Information Handling

The Company may outsource part of its operations to external parties. When outsourcing all or part of the handling of customer personal information in connection with such outsourcing, the Company will verify that appropriate protective measures are implemented by the outsourcing contractor and provide necessary and appropriate supervision to the outsourcing contractor. In particular, when outsourcing invoice processing and data entry operations, we take measures such as concluding confidentiality agreements with contractors.

6. Disclosure and Provision to Third Parties

The Company will not disclose or provide customer personal information to third parties except in cases specified in "3. Purpose of Use of Personal Information," "5. Outsourcing of Personal Information Handling," or any of the following cases:

1. When there is consent from the customer
2. When required by law
3. When necessary for the protection of human life, body, or property, and it is difficult to obtain the customer's consent
4. When especially necessary for improving public health or promoting the sound growth of children, and it is difficult to obtain the customer's consent
5. When it is necessary to cooperate with a national agency, local government, or contractor in executing affairs prescribed by laws and regulations, and obtaining the customer's consent might impede the execution of such affairs
6. When the Company's business is succeeded including customer personal information due to merger, company split, business transfer, or other reasons

7. Disclosure, Correction, and Suspension of Use of Registered Information

• Upon request from the individual, the Company will disclose personal information to that individual. In such cases, we will verify the identity through the Company's prescribed method. However, we may not disclose all or part of the information if disclosure would fall under any of the following cases, and we will notify you promptly if we decide not to disclose: when disclosure may harm the life, body, property, or other rights and interests of the individual or a third party; when disclosure may significantly interfere with the proper execution of the Company's business; or when disclosure would violate other laws and regulations.
• If the personal information disclosed to the individual contains content that differs from the facts, the Company will promptly correct it upon request from the individual.
• If the Company receives a request from an individual to suspend or delete the use of personal information (hereinafter referred to as "Usage Suspension, etc.") on the grounds that it is being handled beyond the scope of the purpose of use or that it was acquired through deceptive means, the Company will conduct the necessary investigation without delay and, based on the results, suspend the use of the personal information and notify the individual. However, if the Usage Suspension, etc. of personal information would incur significant expenses or is otherwise difficult, and alternative measures to protect the rights and interests of the individual can be taken, the Company will implement these alternative measures.

8. Notification, Publication, and Changes to this Policy

The Company displays and publishes this Policy on the Company's website. The Company will review the operational status of user information handling as appropriate, make continuous improvements, and may change this Policy as necessary. When changed, it will be posted on the Company's website. The changed Policy will apply from the time it starts to be posted. If changes require user consent under the law, the Company will obtain user consent through a method prescribed by the Company.

9. Contact Window

For opinions, questions, and other concerns including matters related to the handling of user information, please contact the window below.

10. Security

The Company takes reasonable care in managing personal information, but due to the nature of the Internet and email, the confidentiality of personal information cannot be completely guaranteed. Please keep this in mind when using the website and email. In our BPO services, we implement advanced security measures for handling invoice data and have introduced the latest technology to protect customer data.

11. Access History Collection

The Company's website records customer access history (access logs) for the purpose of website maintenance and service improvement.