English translation (reference only; the Japanese text prevails)
Privacy Policy
Bitcoin Japan Corporation (the "Company") recognizes the importance of protecting personal information. The Company hereby establishes this Privacy Policy as set out below and will endeavor to appropriately protect and manage personal information.
This Policy applies to the handling of personal information in all of the Company's business activities. In this Policy, the "Website" means the websites operated by the Company at www.hotta-marusho.co.jp and www.bitcoin.co.jp.
For details on the handling of personal information on websites operated by the Company other than those listed above (including teaser sites, pre-registration sites, and campaign sites), please refer to the privacy policy or notice regarding the handling of personal information published on each website.
Where this Policy and “Handling of Personal Information” below are applied by reference to any such website, the Company will clearly state that fact and the scope of their application on that website. Where site-specific provisions for the handling of personal information are established, the Company will also clearly explain those provisions and their relationship to this Policy and “Handling of Personal Information” on that website.
1. Establishing a Management Framework
The Company will establish a framework for appropriately protecting and managing personal information.
2. Proper Acquisition and Use of Personal Information
The Company acquires personal information by lawful and fair means. When acquiring personal information, the Company specifies the purpose of use as far as possible, and notifies individuals of it, publicly announces it, or expressly states it in accordance with applicable laws and regulations. Except where permitted by law, the Company uses acquired personal information only within the scope necessary to achieve the purpose of use, and takes measures to prevent its use for other purposes.
When acquiring personal information directly from the individual through an input form on the Website or otherwise, the Company will expressly state the purpose of use in advance, in accordance with applicable laws and regulations.
3. Information Acquired through the Website
The Company may acquire the following personal information from users through the Website:
- Name
- Email address
- Telephone number
- Company name, department, job title, and other information that users enter voluntarily
- Inquiries, consultations, and other communications
- Information entered when registering to receive information about the Company's business, services, projects, events, and the like
In connection with use of the Website, the Company may collect IP addresses, browser information, device information, access dates and times, browsing history, and other access logs. The Company may also collect identifiers and other information using cookies and similar technologies.
Where this information (referred to as "access information") can identify a specific individual, either on its own or by being readily cross-referenced with other information, the Company treats it as personal information. Even where such information does not constitute personal information, the Company handles it appropriately according to its nature.
4. Disclosure and Provision of Personal Information to Third Parties
The Company manages acquired personal information appropriately and, except where permitted by law, does not disclose or provide it to third parties without obtaining the individual's consent in advance. The provision of personal data to third parties, entrustment of its handling, and related matters are addressed in "Handling of Personal Information" below.
5. Ensuring the Accuracy of Personal Data, and Its Retention and Deletion
The Company endeavors to keep personal data accurate and up to date within the scope necessary to achieve the purpose of use.
The retention period for personal data is set in consideration of the purpose of use, the nature of the information, and retention obligations under laws and regulations. Except where retention is necessary because of a legal retention obligation or other legitimate reason, the Company endeavors to erase personal data that is no longer needed without delay. When deleting or disposing of information, the Company uses appropriate methods so that no leakage or similar incident occurs.
6. Security Control Measures
The Company implements organizational, human, physical, and technical security control measures appropriate to the content and handling circumstances of the personal data it handles, and endeavors to prevent and remedy unauthorized access, leakage, loss, damage, and similar incidents.
The Company clearly defines responsibilities and authority for handling personal data, establishes rules for its handling, reviews how it is handled, and provides employee education and supervision. The Company also takes measures to prevent the theft or loss of documents, storage media, and equipment, manages access rights to personal data, and implements safeguards against unauthorized access to information systems and malicious software. Where personal data is handled in a foreign country, the Company takes necessary and appropriate measures after assessing that country's personal information protection system and other relevant factors.
In the event of a data leak or similar incident, the Company will endeavor to minimize the harm and prevent recurrence and will make the necessary reports and notify the individuals concerned in accordance with applicable laws and regulations.
Individuals may request details of the security control measures implemented for retained personal data through the contact point listed below. The Company will respond without delay, except for details whose disclosure could compromise the security of that data.
7. Compliance with Laws and Regulations
The Company complies with laws and regulations concerning the protection of personal information, guidelines issued by the national government, and other applicable norms. The Company also establishes internal rules concerning the protection of personal information and complies with them.
8. Continuous Improvement
The Company works to improve continuously by regularly checking, auditing, and reviewing its personal information protection efforts.
9. Contact Point for Inquiries Regarding the Handling of Personal Information
The Company has established a contact point for inquiries regarding the handling of personal information and responds appropriately and promptly to complaints, consultations, and the like. For details of the contact point, please see "Contact for Personal Information Inquiries" below.
10. Changes to This Policy
The Company will review this Policy and "Handling of Personal Information" below in response to amendments to laws and regulations or changes in its business. If changes are made, the Company will publish the changes and their effective date on the Website.
When changing the purpose of use, the Company will do so only within a scope reasonably recognized as relevant to the purpose of use before the change, and will notify the individual of, or publicly announce, the changed purpose. For use beyond that scope, except where permitted by law, the Company will obtain the individual's consent in advance. The publication of this Policy alone will not substitute for any consent required by law.
Handling of Personal Information
In accordance with the Privacy Policy above, the Company handles the personal information of customers, business partners, shareholders and investors, job applicants, officers and employees, and others connected with the Company as set out below.
Terms defined by law, such as "personal information," "personal data," and "retained personal data," are used in this document with the meanings given in the Act on the Protection of Personal Information (the "Personal Information Protection Act").
1. Purposes of Use of Personal Information
The Company uses acquired personal information, according to how it was acquired and the individual's relationship with the Company, within the scope necessary to achieve the following purposes of use:
- To place and process orders, enter into and perform contracts, provide and deliver products and services, and handle billing, payments, returns and maintenance
- To respond to feedback, inquiries, consultations, complaints, requests for materials and requests concerning personal information, including disclosure, and to resolve disputes
- To provide advertisements and information by postal mail, email and other means about the Company's products and services or those of other companies recommended by the Company
- To conduct events, briefings, campaigns and surveys, process registrations and entries, contact participants, and provide materials and benefits
- To combine, aggregate and analyze customer purchase and usage histories, survey responses and Website access information, including browsing history, acquired by the Company to understand usage trends, plan and improve products, services and the Website, and measure advertising effectiveness. Also, to infer individual users' interests and preferences from such information and use the results to select and deliver the advertisements and information described above
- To verify identities in transactions, assess credit and manage receivables, check connections with antisocial forces, and prevent, investigate and address misconduct and contractual violations
- For accounting, tax administration, audits, and the creation and retention of records and submission of filings and reports required by law
- To perform work entrusted to the Company by other businesses or organizations
- For recruitment communications, selection and onboarding, improving recruitment through analysis of selection processes and results, and notifying interested persons of future job opportunities
- For personnel administration, evaluations, attendance and payroll management, tax and social insurance procedures, training, benefits, occupational health and safety, and post-employment certification and communications concerning officers and employees, including former officers and employees
- To maintain shareholder registers, conduct shareholder meetings, pay dividends, respond to the exercise of shareholder rights, provide IR materials and hold meetings with shareholders and investors, and handle media relations
- To provide subscribers with information about the Company's business, services, projects, events, investor relations, and related matters, within the scope explained at the time of registration
- To ensure stable operation of the Website, respond to malfunctions, and prevent unauthorized access and the like
If the Company provides a separate notice explaining in more detail how job applicants' personal information will be handled for the purposes stated above, it will present that notice at the time of application.
Where contact information acquired in order to respond to an inquiry is to be used to send advertising or promotional emails unrelated to that inquiry, the Company will obtain the necessary consent in accordance with applicable laws and regulations. Making an inquiry alone will not be treated as registration to receive information.
When the Company telephones a contact number you have registered, it may, to the extent necessary, ask to be put through to the individual concerned. In doing so, the Company will take care to limit the information conveyed to anyone other than the individual to the minimum necessary.
To improve the quality of its telephone support and accurately understand inquiries, the Company may record telephone calls. Where calls are recorded, the Company will manage the recorded data appropriately.
2. Provision of Personal Data to Third Parties
The Company does not provide personal data to third parties except in any of the following cases:
- Where the individual's consent has been obtained in advance
- Where based on laws and regulations
- Where necessary for the protection of a person's life, body, or property and it is difficult to obtain the individual's consent
- Where especially necessary for improving public health or promoting the sound development of children and it is difficult to obtain the individual's consent
- Where it is necessary to cooperate with a national government agency, a local government, or a person entrusted by either in performing functions prescribed by laws and regulations, and obtaining the individual's consent is likely to impede the performance of those functions
The provision of personal data in connection with outsourcing its handling within the scope necessary to achieve the purpose of use, or with business succession through a merger or otherwise, does not constitute provision to a third party under Article 27 of the Personal Information Protection Act, provided that the statutory requirements are met. Provision to a third party in a foreign country, including in connection with outsourcing, is subject to "5. Handling of Personal Data in Foreign Countries" below.
Where personal data is to be jointly used, before joint use begins the Company will notify the individual of, or make readily accessible to the individual, the fact of joint use, the categories of personal data to be jointly used, the scope of the joint users, the purpose of use, and the name and address of the person responsible for the management of the data (including, for a corporation, the name of its representative).
3. Entrustment of Personal Information
Within the scope necessary to achieve the purpose of use, the Company may entrust all or part of the work involving the handling of personal information to external service providers.
When entrusting such work, the Company selects service providers it considers capable of handling personal information appropriately. It sets out appropriate requirements in service agreements or other arrangements regarding security control measures, confidentiality, subcontracting, and the return or deletion of personal information upon termination, and exercises necessary and appropriate supervision.
4. Disclosure, Correction, Suspension of Use, and Related Requests Regarding Personal Information
When the Company receives a request regarding its retained personal data for notification of the purpose of use, disclosure, correction, addition, or deletion of content, suspension of use or erasure, or suspension of provision to a third party, the Company will, after confirming that the request is from the individual or a legitimate representative, respond without delay in accordance with the legal requirements applicable to each type of request. The Company will also respond in accordance with applicable laws and regulations to requests for disclosure of records of provision to third parties.
Disclosure will be made by the method requested by the individual, such as providing electronic records or providing paper documents. However, where disclosure by that method would involve substantial costs or is otherwise difficult, the Company will, in accordance with applicable laws and regulations, provide paper documents.
Where, in accordance with applicable laws and regulations, the Company declines all or part of a request or responds in a manner different from that requested, it will notify the individual of that fact without delay and endeavor to explain the reasons.
The Company will provide guidance without delay, through the contact point listed below, on how to submit requests, the required documents, and the method of identity verification. For requests made by a representative, the Company will verify the identity of the individual and the representative, and the representative's authority. In doing so, the Company will take care not to impose an excessive burden on the individual, for example by requesting more information than necessary.
Where the Company charges a fee for notification of the purpose of use or for disclosure of retained personal data or records of provision to third parties, it will set the amount in accordance with applicable laws and regulations at a reasonable level that takes actual costs into account and will notify the individual of the amount and method of payment in advance. The Company will also respond without delay to inquiries about fees.
5. Handling of Personal Data in Foreign Countries
Where the Company provides personal data to a third party located in a foreign country (including provision accompanying entrustment to a foreign business operator), the Company will take the necessary measures, such as providing the required information and obtaining the individual's consent, in accordance with applicable laws and regulations.
Where personal data is provided with the individual's consent under Article 28 of the Personal Information Protection Act, the Company will, in principle, before obtaining consent, provide information such as the country where the recipient is located, that country's personal information protection system, and the personal information protection measures taken by the recipient. Where the country of location or similar information cannot be identified, the Company will likewise provide the necessary information in accordance with applicable laws and regulations.
Where personal data is provided to a business operator that has established a system conforming to the standards under the same Act, the Company will take the measures necessary to ensure the continuous implementation of equivalent measures, and will, upon the individual's request, provide the necessary information in accordance with applicable laws and regulations.
6. Discontinuing Information Delivery
If you wish to stop receiving information from the Company, you may unsubscribe at any time by following the instructions in the email you received or by contacting the contact point listed below. After confirming your request, the Company will promptly process it in accordance with applicable laws and regulations.
However, even after you unsubscribe, the Company may, within the purposes of use stated above, send administrative communications necessary for its business or notices required by law, provided that such communications do not contain advertising or promotional content.
7. Handling of Cookies and Access Information
The Website may use cookies and similar technologies and access information for the purposes described in "1. Purposes of Use of Personal Information" above: aggregating and analyzing access information; inferring individual users' interests and preferences and delivering advertisements and information based on the results; and operating and securing the Website.
You can restrict or refuse the storage of cookies through your browser settings. However, depending on your settings, some functions of the Website may become unavailable. Restricting or refusing cookies does not stop the collection of information acquired by means other than cookies, such as server access logs.
When using features that transmit information to external services, the Company will provide explanations or notices, obtain consent, or take other necessary steps as appropriate to the actual handling of the information. Where a recipient is expected to acquire information relating to cookies and similar technologies as personal data, the Company will perform the necessary checks and take other required steps in accordance with applicable laws and regulations.
Contact for Personal Information Inquiries
For inquiries about the Company's handling of personal information and security control measures, disclosure and related requests, unsubscribe requests, or complaints and consultations, please contact the office below.
Contact: Bitcoin Japan Corporation — [Personal Information Inquiries Office]
Email: privacy@bitcoin.co.jp
Office hours: 9:00–17:30 (excluding Saturdays, Sundays, national holidays, and the year-end and New Year holidays)
For inquiries by post, please address your correspondence to the "[Personal Information Inquiries Office]" at the following address.
Address: 3F Kokugikan Front Building, 1-10-5 Yokoami, Sumida-ku, Tokyo
Business Operator Handling Personal Information
Bitcoin Japan Corporation
Representative: Phillip Lord, Representative Director
Address: 3F Kokugikan Front Building, 1-10-5 Yokoami, Sumida-ku, Tokyo
Last Revised: October 22, 2026
Effective Date of This Revised Policy: October 22, 2026