Personal Information Protection Policy
1. Basic Principles
NPO MIS (hereinafter “the Corporation”), based on the principle of respect for individual personality, regards the protection of personal information as a social responsibility and will make every effort to protect the rights and interests of individuals through the appropriate handling and management of personal information. The personal information collected and held in the course of the Corporation’s activities is the foundation of public trust, and the Corporation will exercise the highest level of care in handling it.
2. Scope
This Policy applies to all personal information acquired, held, and managed by the Corporation. All persons involved shall comply with this Policy and exercise the utmost care in protecting personal information.
3. Definition of Personal Information
Personal information means information about a living individual that can identify a specific individual by name, date of birth, address, telephone number, e-mail address, or other descriptions. It also includes information that can identify a specific individual when easily collated with other information.
4. Collection of Personal Information
When acquiring personal information, the Corporation will clearly specify the purpose of use and will acquire it by lawful and fair means. The purposes of use include support for the Corporation’s activities, provision of information, various communications, surveys, event announcements, and donation management, and the Corporation will collect only the minimum information necessary. The Corporation will not use personal information for purposes other than those specified without the consent of the individual.
5. Purposes of Use of Personal Information
The Corporation will use the personal information it acquires for the following purposes.
- Providing information and communicating about the activities of NPO MIS
- Announcements about events, seminars, and volunteer recruitment
- Management of supporters and members, and management of donations
- Conducting questionnaire surveys and marketing research
- Responding in accordance with laws and regulations
If the Corporation uses personal information beyond the scope of the purposes of use, it will obtain the consent of the individual in advance.
6. Provision of Personal Information to Third Parties
Except as provided by law, the Corporation will not provide personal information to third parties without obtaining the prior consent of the individual. When providing personal information to a third party, the Corporation will put appropriate contracts and supervision in place and strive to ensure the secure management of the information.
7. Management of and Security Measures for Personal Information
The Corporation will take reasonable security control measures to prevent the leakage, loss, or damage of personal information.
8. Entrusting the Handling of Personal Information
When the Corporation entrusts the handling of personal information to an outside party, it will contractually require the contractor to comply with the Corporation’s personal information protection standards and will supervise the contractor appropriately. In selecting contractors, the Corporation will fully confirm their security management systems.
9. Requests for Disclosure, Correction, Suspension of Use, etc.
If an individual requests the disclosure, correction, suspension of use, deletion, etc. of their own personal information, the Corporation will respond promptly in accordance with laws and regulations after appropriately verifying the identity of the individual. The procedures for requests and the point of contact will be clearly stated on the Corporation’s website and in its publications to ensure transparency.
10. Use of Cookies, etc.
The Corporation’s website may use cookies to improve convenience for users and for access analysis. The information collected in this way is limited to statistical data that cannot identify individuals and does not infringe on privacy. Users can also refuse the use of cookies through their settings.
11. Education and Awareness on Personal Information Protection
The Corporation will carry out ongoing education and awareness activities on personal information protection for all persons involved, to raise everyone’s awareness. It will ensure the proper handling of personal information and prevent accidents and violations before they occur.
12. Compliance with Laws and Norms, and Continuous Improvement
The Corporation will comply with laws, national guidelines, and social norms concerning the protection of personal information, establish a personal information protection management system, and continuously review and improve it. It will respond flexibly and promptly to changes in society and advances in technology.
13. Retention Period of Personal Information
The Corporation will retain personal information for the period necessary to achieve the purposes of use, and will thereafter take appropriate measures such as safely and reliably disposing of it or anonymizing it. The Corporation will clearly define retention periods, manage them appropriately, and maintain its policy of not retaining unnecessary personal information for long periods.
14. International Handling of Personal Information
When transferring personal information outside Japan in the course of its international activities, the Corporation will comply with applicable laws and international standards and take sufficient security measures. It will manage the information so that the rights of the individual are not impaired.
15. Final Provisions
This Personal Information Protection Policy takes effect on October 23, 2026, and will be revised as necessary. Any revised content will be promptly published and made known to all persons involved.
Established: October 23, 2026