PRIVACY POLICY
Privacy policy
Effective: · Last updated:1. Scope and approach
BIG GROUP株式会社 (“we”, “us” or “the Company”) handles personal information for specified purposes and to the extent necessary, in accordance with Japan’s Act on the Protection of Personal Information and other applicable requirements. This policy applies to this website, business and recruitment enquiries made using the email address and telephone number shown on it, and administrator services. Registration is not required to view public pages. This website does not offer online ordering or payment.
2. Enquiry information and purposes of use
When you contact us by email or phone, we receive the information you provide, including your name, company, contact details, enquiry, material descriptions, photographs and attachments. We use it to respond, confirm materials and valuation terms, arrange collection and handover, communicate about business and handle disputes. Career history and job-seeking information provided in recruitment enquiries are used for recruitment communications and the relevant selection process. Please provide only information necessary for your enquiry.
3. Website access records
To deliver pages, maintain access security and investigate faults, our hosting and security services process network information such as IP addresses, request times and paths, browser or device information and response statuses. They may retain necessary operational or security records according to their service configurations.
4. Contact by email and phone
We accept enquiries by email and phone and do not provide a web enquiry form. Contact buttons open the email or phone app on your device. You must review and send an email yourself; clicking a button alone does not send your enquiry. We use Google Gmail to send and receive email and attachments. Your email app and telecommunications provider may also process relevant information under their own policies.
5. Cookies and browser storage
Public pages currently do not use advertising trackers, third-party visitor analytics or cross-site behavioural profiling tools. For cookies, browser storage and information handling required for administrator sign-in, see “Additional information for administrator services” at the end of this policy.
6. Service providers and processing outside Japan
We use Amazon Web Services (AWS) for hosting, content delivery, security, administrator authentication and price management, and Google Gmail to handle enquiry emails. The website’s primary storage and administrator services are deployed in the Tokyo region in Japan. Content delivery, email and other services may involve processing outside Japan. When providing personal data to a third party outside Japan, including through relevant outsourcing arrangements, we will carry out the necessary notification, protection and consent procedures required by applicable rules. You may contact the contact point on this page for details of processing and applicable safeguards.
7. Third-party disclosure and limits on use
We do not provide personal data to third parties except for outsourcing necessary to achieve the purposes described above, lawful business succession, cases where the individual has consented, or other circumstances permitted by law. Transfers outside Japan are also handled under the requirements in the preceding section. We do not sell personal information or use it for advertising profiling. Any use beyond the stated purposes will be separately explained in accordance with law, and consent obtained where required. Published price information does not include customer enquiry materials or administrator account information.
8. Security and retention
The website uses HTTPS and protects information through account authentication, access controls and restricted storage access. Enquiry materials are retained for as long as necessary to respond, perform business obligations, handle disputes and meet statutory retention requirements. When no longer needed, they are deleted or otherwise handled appropriately. If a personal information leak or similar incident occurs, we will investigate, limit its impact, take corrective measures and fulfil reporting and notification obligations required by law. Details of retention and security arrangements are available from our contact point.
9. Enquiries, requests and complaints
For personal data held by us, you may request, in accordance with law, notification of the purposes of use, disclosure of the data and applicable records of third-party provision, or correction, addition, deletion, cessation of use and cessation of provision to third parties. Where processing is based on consent, you may contact us to withdraw it; withdrawal does not affect prior lawful processing. Please explain your request and your relationship with us using the contact details on this page. We will verify your identity or your representative’s authority to the extent necessary, respond promptly in accordance with law and explain the reasons if we cannot meet a request. Do not send identity document numbers, passwords or unrelated sensitive information in your initial enquiry. You may also use this contact point to ask about company particulars required to be made available by law and request procedures, or to make a complaint about the handling of personal information.
10. Policy updates
We may revise this policy as website functions, information handling practices or legal requirements change. The updated date will be shown on this page. Where a change requires separate notice or consent by law, we will follow the relevant procedures.
11. Personal information contact point
〒306-0632
5949-2 Sakate-machi, Joso, Ibaraki, Japan
Email: yo.m130211@gmail.com
Phone: 0297-21-4538
Please use “Personal information enquiry” or “Personal information complaint” as your email subject.
Relevant service provider policies: AWS Privacy Notice, Google Privacy Policy.
Additional information for administrator services
This section applies only to authorised administrators. Amazon Cognito processes administrator email addresses, account identifiers, authentication and multi-factor authentication information to verify identity and control access. The price management service records publication actions, times, request identifiers and error information.
The sign-in page uses cookies needed to maintain sessions, verify requests and remember the display language. The administration page temporarily stores sign-in credentials and verification information in browser session storage (sessionStorage) and clears them on sign-out. Closing the tab normally also ends that session storage. Disabling the relevant cookies or storage may affect sign-in.
Administrators use multi-factor authentication and permission groups, and accounts are managed according to authorisation needs. Access ends when authorisation is withdrawn, and related records are managed for the necessary periods. Price service application logs are currently retained for 30 days. Other authentication, security and service records are managed according to their configurations and necessary retention periods. Use the contact point above for personal information requests.