Privacy Policy

Personal Information Protection Policy

Basic Principles

We recognize that personal information obtained through our business activities in accordance with our Information Security Basic Policy is an important asset for both our customers and our company. We regard the proper management and handling of personal information as a social responsibility and consider earning the trust of more customers to be an important corporate priority. Accordingly, we establish and comply with the following Personal Information Protection Policy.

Basic Policy

When we use personal information, we will identify the purposes of use as specifically as possible and handle that information appropriately within the scope necessary to achieve those purposes.

We comply with applicable laws, government guidelines, and other standards relating to the handling of personal information.

We maintain a contact point for complaints and consultations concerning the protection of personal information and endeavor to respond appropriately.

Organizational Activities

We undertake the following activities to put our basic policy into practice.

  1. Scope of Application
    All directors, officers, and persons engaged in the company's business must comply with the Information Security Policy, applicable laws and other standards, and contractual obligations.

  1. Collection of Personal Information
    To the extent necessary to provide our services (the “Purposes of Use”), we collect information from customers who have entered into agreements for our services (the “Customers”) and other relevant persons. This may include names, dates of birth, and other information that can identify a particular individual (the “Personal Information”).

  1. Use of Personal Information
    We do not handle personal information in our possession beyond the Purposes of Use, except in the following circumstances:

  1. The individual has given consent.

  2. The handling is required or permitted under applicable laws and regulations.

  3. Cooperation is necessary for a national or local government body, or a person entrusted by such a body, to perform duties prescribed by law, and obtaining the individual’s consent may interfere with the performance of those duties, or obtaining consent is difficult.

  1. Inquiries Concerning the Handling of Personal Information
    We respond appropriately to inquiries from individuals concerning our handling of their personal information. Please use the contact information below.

Contact

goof Inc. ISMS Committee

Telephone

+81-3-5759-5179 (main)

E-mail

support@goof.buzz

Personal Information Manager

Hirokazu Kondō

Other Provisions

All activities relating to the protection of personal information are carried out in accordance with our Information Security Basic Policy.

goof Inc. CEO Yukinori Okamoto

Last revised: September 1, 2017

Information Security Basic Policy

Basic Principles

In light of the nature of our business, which involves receiving and processing our customers’ valuable information, goof Inc. (the “Company”) recognizes the need to ensure a high level of reliability and security for the information it handles. We regard implementing appropriate security measures for all information assets handled by the Company, including information entrusted to us, as a social responsibility. We consider earning the trust of more customers to be an important corporate priority and accordingly establish and comply with the following Information Security Basic Policy.

Basic Policy

Information assets belonging to our customers or concerning them, as well as the Company’s own information assets, are important assets of the Company. Protecting them against various information-security threats is an important social responsibility and a matter of corporate ethics. Therefore, all persons engaged in the Company’s business, including directors, officers, and employees, must understand and comply with the Information Security Policy established to protect those assets, handle them accurately and securely, and maintain the trust of our customers.

Objectives of the Information Security Policy

  1. Establishment of Rules
    Establish specific rules, codes of conduct, objectives, and risk-assessment methods to prevent unauthorized access to, loss, destruction, alteration, or leakage of information assets, whether intentional or accidental.

  1. Implementation under Operational Rules
    Establish appropriate standards for the use of information assets from the perspective of confidentiality, integrity, and availability, adopt them as operational rules, and implement them.

Organizational Activities

We undertake the following activities to put the basic policy into practice.

  1. Scope of Application
    All directors, officers, and persons engaged in the Company’s business must comply with the Information Security Policy, applicable laws and other standards, and contractual obligations.

  1. Responsible Organization
    Appoint a person responsible for information security management (the “CISO”), assign that person responsibility and authority for implementing and operating the Information Security Policy, and continuously maintain and improve the environment necessary to establish and maintain an information security management system.

  1. Security Audits
    Appoint a person responsible for information security audits, conduct audits, and review the Information Security Policy and improve operations based on the results.

  1. Requests for Cooperation
    Request the cooperation of companies and individuals with which the Company does business in achieving the objectives of the Information Security Policy.

  1. Education
    Provide the information security training necessary for directors, officers, and all other persons engaged in the Company’s business, according to their responsibilities.

  1. Disclosure of the Basic Policy
    Request the cooperation of companies and individuals with which the Company does business in achieving the objectives of the Information Security Policy.

  1. Prevention of Unauthorized Access
    Take measures to prevent viruses and other malicious software in order to reduce undesirable threats and impacts on information security.

  1. Compliance with Laws, Regulations, and Contractual Requirements
    In anticipation of circumstances in which a major system failure, disaster, or other threat makes normal business operations impossible, establish business continuity management rules, and require everyone engaged in the Company’s business to follow them to maintain business continuity.

goof Inc. CEO Yukinori Okamoto

Established: June 21, 2012
Last revised: October 1, 2016

On October 30, 2013, goof Inc. obtained certification to ISO 27001 / IS600062, an international standard for information security management systems.