プライバシーポリシー　個人情報保護方針

PRIVACY POLICY

Smart Technologies & Resources, Inc. (“the Company”) recognizes the importance of protecting personal information and is committed to handling such information appropriately in accordance with applicable laws and regulations.

To maintain the trust of our customers, business partners, and users of our services, the Company has established the following Privacy Policy governing the collection, use, management, and protection of personal information obtained through its business operations.

The Company shall:

a) Use personal information only within the scope necessary to achieve the specified purposes of use and implement measures to prevent unauthorized use beyond such purposes.

b) Comply with all applicable laws, regulations, governmental guidelines, and other standards relating to the protection of personal information.

c) Take appropriate measures to prevent the leakage, loss, destruction, alteration, or unauthorized access of personal information and to promptly address any such incidents.

d) Respond appropriately to inquiries, complaints, and requests concerning the handling of personal information.

e) Continually review and improve its Personal Information Protection Management System.

REVISION HISTORY

September 13, 2018 – Established

December 1, 2022 – Revised

June 13, 2026 – Revised

• Added provisions regarding the collection and use of passport images and facial images for enhanced identity verification and the prevention of fraudulent duty-free transactions and improper tax refund claims.

• Added provisions regarding purchase history matching and integration with related services.

Smart Technologies & Resources, Inc.

Manabu Iwasaki
Representative Director

CONTACT FOR PRIVACY MATTERS

Personal Information Protection Manager
Smart Technologies & Resources, Inc.

1-1-15 Mita, Minato-ku,
Tokyo 108-0073, Japan

TEL: +81-3-5738-7628
FAX: +81-3-6735-4321
E-mail: info@s-tar.net

PrivacyMark Certification No. 22000294(04)

————————————————–

HANDLING OF PERSONAL INFORMATION

1. PURPOSES OF USE OF PERSONAL INFORMATION

1.1 Personal Information Obtained Directly from Individuals
(Disclosable Personal Information)

Customer Information

• Responding to inquiries
• Sending materials and information
• Providing customer support and communications

Business Partner Information

• Business communications
• Contract administration
• Business operations and management activities

Employee Information

• Human resources, payroll, and labor management
• Administration of employee benefits and statutory obligations
• Operation and maintenance of the Company’s Personal Information Protection Management System
• Other employment-related administrative purposes

Job Applicant Information

• Recruitment and hiring activities

Employee and Visitor Information

• Security management
• Crime prevention
• Management of security camera footage

————————————————–

1.2 Personal Information Obtained by Methods Other Than Direct Written Collection
(Non-Disclosable Personal Information)

Personal Information Obtained by Business Partners and Provided to the Company

The Company may collect, store, manage, and use personal information obtained by its business partners, including:

• Passport information
• Passport images
• Facial images
• Selfie images
• Purchase history information
• Customs confirmation information
• Tax refund application information
• Remittance information
• Other information related to duty-free purchase procedures

for the following purposes:

A. Provision of Duty-Free and Tax Refund Services

• Providing services related to duty-free procedures
• Providing tax refund services
• Processing tax refund applications
• Creating remittance data
• Providing customer support and related services

B. Identity Verification and Fraud Prevention

• Identity verification
• Customer authentication
• Prevention of unauthorized use
• Prevention of fraudulent tax refund claims
• Prevention of impersonation
• Detection and prevention of suspicious transactions
• Prevention of improper duty-free transactions

C. Legal and Regulatory Compliance

• Compliance with the Act on Prevention of Transfer of Criminal Proceeds
• Compliance with anti-money laundering (AML) and counter-terrorist financing (CFT) requirements
• Compliance with customs, tax, and other applicable laws and regulations
• Responding to requests from governmental authorities

D. Purchase History Matching and Service Integration

• Matching and verification of purchase histories
• Verification against customs confirmation records
• Identification of transactions eligible for tax refund processing
• Integration and data exchange with affiliated services
• Service enhancement and operational improvements

E. Operation of Related Services

The Company may use personal information in connection with the operation of SmartDetax, JPrefund, and other related services provided by the Company for the purposes described above.

————————————————–

Use of Passport Images and Facial Images

The Company may use and compare passport information, passport images, facial images, selfie images, and other identity verification information for the following purposes:

• Identity verification and customer authentication
• Prevention of unauthorized use
• Prevention of fraudulent duty-free transactions
• Prevention of fraudulent tax refund claims
• Prevention of impersonation and account misuse
• Purchase history matching and verification
• Detection of duplicate or suspicious applications
• Compliance with legal and regulatory requirements
• Provision and improvement of related services

The Company may compare such information with information provided by merchants, duty-free systems, customs authorities, remittance providers, and affiliated service providers where necessary to achieve the purposes described above.

————————————————–

2. DISCLOSURE, CORRECTION, DELETION, AND SUSPENSION OF USE OF PERSONAL INFORMATION

With respect to Disclosable Personal Information held by the Company, the Company will respond, within a reasonable period and after confirming the identity of the requester, to requests from the individual or the individual’s authorized representative regarding:

• Notification of the purpose of use
• Disclosure of personal information
• Correction, addition, or deletion of personal information
• Suspension of use
• Erasure
• Suspension of provision to third parties
• Disclosure of records concerning provision to third parties

Please note that deletion may not be possible where retention is required by applicable laws or regulations.

For details regarding the procedures for such requests, please contact the Privacy Contact listed below.

————————————————–

3. SECURITY CONTROL MEASURES

The Company has established and operates a Personal Information Protection Management System based on JIS Q 15001 and implements appropriate organizational, personnel, physical, and technical security measures.

The Company’s security measures include:

Organizational Measures

• Appointment of a person responsible for handling personal data
• Establishment of internal reporting procedures for violations and incidents
• Clarification of personnel authorized to access personal data

Personnel Measures

• Periodic employee training regarding personal information protection
• Confidentiality obligations imposed on employees

Physical Measures

• Access controls for facilities and areas where personal information is handled
• Measures to prevent theft, loss, or unauthorized viewing of personal information
• Secure storage and disposal procedures

Technical Measures

• Access control and authentication systems
• Encryption of communications and stored data where appropriate
• Protection against unauthorized access, malware, and cyberattacks
• Monitoring and logging of system activities

————————————————–

4. COMPLAINTS, INQUIRIES, AND REQUESTS

For complaints, inquiries, requests for disclosure, correction, deletion, suspension of use, or any questions regarding the handling of personal information, please contact:

Privacy Contact

Smart Technologies & Resources, Inc.

Personal Information Protection Manager
Manabu Iwasaki
Representative Director

1-1-15 Mita,
Minato-ku, Tokyo 108-0073, Japan

TEL: +81-3-5738-7628
FAX: +81-3-6735-4321

E-mail:
info@s-tar.net

————————————————–

5. AUTHORIZED PERSONAL INFORMATION PROTECTION ORGANIZATION

The Company is a member of the following Authorized Personal Information Protection Organization recognized under the Act on the Protection of Personal Information of Japan.

Japan Institute for Promotion of Digital Economy and Community (JIPDEC)

Personal Information Protection Complaint Consultation Office

Roppongi First Building
1-9-9 Roppongi,
Minato-ku, Tokyo 106-0032, Japan

TEL:
+81-3-5860-7565

Toll Free:
0120-700-779

————————————————–

END OF PRIVACY POLICY