Revision date: December 22, 2023

We, booost technologies Co., Ltd., recognize the importance of protecting personal information in an advanced information and communication society, and strive to protect personal information based on the following policy.

1. Acquisition, use, and provision of personal information
We specify the purpose of using personal information within the scope of business activities, and we acquire, use, and provide personal information fairly and appropriately to the extent necessary to achieve that purpose. We also take measures to ensure that the personal information we obtain is not used for purposes other than its intended purpose.

2. Compliance with laws and regulations
We comply with laws and regulations, national guidelines, other norms, and social order with respect to personal information, and we strive to appropriately protect personal information we obtain.

3. Appropriate management of personal information
We are fully aware of the risks of unauthorized access, loss, destruction, falsification, leakage, etc. of the personal information we handle, and we take reasonable safety measures and appropriate corrective measures if a problem occurs. We also exercise necessary and appropriate supervision over employees and subcontractors who handle retained personal data.

4. Responding to inquiries
We respond to inquiries appropriately from persons concerned about the disclosure, correction, suspension of use, complaint consultation, etc. regarding the personal information we handle.

5. Continuous improvement
We have established management regulations and a management system regarding the protection of personal information, which are thoroughly operated by all employees, and which are regularly reviewed. In this regard, we strive for continuous improvement.

6. Formulation, implementation, maintenance and improvement of personal information protection compliance program
In order to implement this policy, we have formulated a personal information protection compliance program (including this policy, the "Personal Information Protection Regulations" and other rules and regulations), and have thoroughly informed our employees and other related parties of it. We strive to implement, maintain, and continuously improve it.

Established on July 29, 2019
Revised on August 9, 2022
Revised on May 24, 2023
Revised on December 22, 2023
booost technologies, Inc. CEO Hironori Aoi
<Contact point for personal information protection> Contact point for inquiries regarding personal information (personal information protection manager): Yuzo Nagano
TEL 050-3464-9910

*1 We use customers' personal information jointly with businesses only within the extent necessary for the purpose of joint use, and not necessarily with all retail electricity businesses, general power transmission and distribution companies, demand suppression contracting parties, and power distribution companies.

*2 A retail electricity business means a business that does not fall under the grounds for refusal of registration stipulated in Article 2-5, Paragraph (1) of the Electricity Business Act of Japan (Act No. 170 of July 11, 1964) and that has been registered by the Minister of Economy, Trade and Industry (including a business that is deemed to be registered as a retail electricity business pursuant to the supplementary provisions of the Act for Partial Revision of the Electricity Business Act, etc. (Act No. 72 of 2014)). (For the name, location, and representative name of the electricity businesses, please refer to the website of the Agency for Natural Resources and Energy (in Japanese only)

*3 General power transmission and distribution companies means the following companies:
Hokkaido Electric Power Network, Inc. (in Japanese only)
Tohoku Electric Power Network Co., Inc.
TEPCO Power Grid, Incorporated
Chubu Electric Power Grid Co., Inc.
Hokuriku Electric Power Transmission & Distribution Company
Kansai Transmission and Distribution, Inc.
Chugoku Electric Power Transmission & Distribution Company, Incorporated (in Japanese only)
Shikoku Electric Power Transmission & Distribution Company, Incorporated (YONDEN T&D) (in Japanese only)
Kyushu Electric Power Transmission & Distribution Co., Inc. (in Japanese only)
The Okinawa Electric Power Company, Incorporated
(For the name, location, and representative name of the companies, please refer to the website of each general power transmission and distribution company.)

*4 A demand suppression contracting party means a business operator that has concluded a demand suppression volume adjustment service contract with a general power transmission and distribution company or a power distribution company (including a business operator that has obtained a business operator code before concluding the contract). (For the name, location, and representative name of the demand suppression contracting parties, please refer to the website of OCCTO (in Japanese only)).

*5 For the name, location, and representative name of OCCTO, please refer to the website of OCCTO.

*6 "Brokerage of the termination of a retail, etc. service contract" means that a business operator that received a new application for a retail, etc. service contract from a customer applies to another existing business operator for termination of an existing contract between the customer and such another existing business operator on behalf of the customer.

We strive to appropriately protect personal information based on our "Personal Information Protection Policy". The following is information concerning personal information we obtain or hold for business purposes.

(1) Name, representative name, address of business entity handling personal information
booost technologies, Inc.
Address: Shin-Osaki Kangyo Building 10F, 1-6-4 Osaki, Shinagawa-ku, Tokyo
Representative Director: Hironori Aoi

(2) Name or job title, affiliation, and contact information of the personal information protection manager (or his/her representative)
Personal information protection manager: Yuzo Nagano
TEL: 050-3464-9910

(3) Purpose of use of personal information
The purpose of use of personal information handled by us in our business activities is as follows.

(i) Retained personal data

(ii) Other acquired personal information

(4) Provision of personal information
The provision of personal information handled by us in our business activities to third parties, etc. will be carried out as follows.

(i) Provision to third parties
Except in the following cases, personal data will not be provided to third parties without the consent of the respective individual:

a. When based on laws and regulations;
b. In cases where it is necessary to protect the life, body, or property of the individual or a third party and if it is difficult to obtain the consent of the individual;
c. In cases where there is a risk of significant hindrance to the proper operation of our business; or
d. In cases where it is particularly necessary to improve public health or promote the healthy development of children and if it is difficult to obtain the consent of the individual concerned.

In cases where we stipulate the purpose of use of personal information, we may provide personal information to third parties as follows.

a. When personal information of customers who have applied for seminars, etc., co-sponsored or co-hosted by us, or customers who cooperated with surveys, etc., is jointly used with other co-sponsors.
b. In cases where a user uses a third party service that we collaborate with or introduce and if the user provides personal information to the third party providing the service.

(ii) Business outsourcing
In order to provide better services to our customers, we may outsource some of our operations and entrust personal information to a subcontractor. In such cases, we conclude a contract regarding the handling and protection of personal information with such subcontractor, and conduct appropriate management and supervision.
We use the services of a subcontractor to manage personal information. Depending on the terms of service of the subcontractor, personal information may be used for purposes such as improving and developing the service/system of the subcontractor, re-disclosed to the subcontractor’s group companies, or used for other purposes specified in the terms of use. If you do not wish to use the services provided by a subcontractor, please refer to the next section and follow the procedures to discontinue the provision of information. If you complete the procedure, we will discontinue providing the applicable personal information to the subcontractor and promptly take appropriate measures such as deletion of your personal information.

(5) Disclosure of personal information
(i) Regarding procedures for disclosure, etc.
Regarding retained personal data, we shall promptly respond to your requests for disclosure (notification of purpose of use, disclosure, correction, addition or deletion of content, suspension of use, erasure, suspension of provision to third parties, and record of provision to third parties). If requested, we shall respond within a reasonable period and scope after confirming that the person making the request is the person in question or his or her representative.

(ii) Method of or contact point for requesting disclosure, etc.
For requests of disclosure, etc. regarding retained personal data, please contact the point of contact below. Once you have contacted us, we will send you our designated "Request Form for Disclosure of Retained Personal Data" by mail, fax, email, etc. Please fill it out, enclose the required documents, and apply by mail or email (The shipping fee will be borne by the requester). After confirming that you are the individual in question (or your representative), we will respond to your request by your desired disclosure method. Please note that we may not be able to respond to requests for disclosure, etc. that do not comply with the above method.

(6) Security control measures for personal data

Security control measures for personal data are specifically stipulated separately in the "Personal Information Handling Regulations" and other internal regulations, but the main contents are as follows.

(i) Formulation of basic policy
- In order to ensure proper handling of personal data, we have formulated these basic guidelines regarding "compliance with relevant laws and guidelines", "matters related to security control measures", "point of contact for questions and complaint handling", etc.

(ii) Establishment of regulations regarding the handling of personal data

- We have established basic handling methods when acquiring, using, and storing personal data.

(iii) Organizational security control measures

- The responsible person confirms that the personal data is handled in accordance with established handling methods.

- We have established a reporting communication system for the employees to report to the person in charge.

(iv) Personnel security control measures

- We provide regular training to employees regarding the handling of personal data.

- Matters relating to confidentiality with respect to personal data are stated in the employment regulations.

(v) Physical security control measures

- We have taken measures to ensure that personal data of a person cannot be easily viewed by anyone other than the employee who is authorized to handle the data or the person himself/herself.

- We manage devices, electronic media, documents, etc. that handle personal data to prevent theft or loss, and when carrying such devices, electronic media, etc., we take measures to prevent leaks, etc.

(vi) Technical security control measures

- We classify the devices that can handle personal data and the employees who handle those devices, and prevent unnecessary access to personal data.

- We have introduced a mechanism to protect information systems and devices that handle personal data from unauthorized access from outside or unauthorized software.

(7) Regarding technical information such as cookies

We may use cookies for purposes such as analyzing customer usage of websites operated by us and providing customized services and advertisements to customers.
Personal information (as defined in the Act on the Protection of Personal Information, including browsing history, location information, cookies, etc. that cannot identify a specific individual) may be provided to third parties such as advertising platforms. For details , please refer to the "Cookie policy" below.

(8) Point of Contact for inquiries regarding personal information
For complaints, consultations, and inquiries regarding the handling of personal information, including those related to retained personal data, please contact the [Point of Contact for inquiries regarding personal information] below.

(1) Regarding the use of cookies
We may use cookies for purposes such as analyzing customer usage of websites operated by us and providing customized services and advertisements to customers.
A cookie is a function that stores information such as customer viewing our website on the customer's computer (or Internet-connectable device such as a smartphone or tablet). By using cookies, it is possible to obtain information such as the number of times you have visited our website and the pages you have visited on your computer. Please note that the information collected through cookies does not include any information that allows us to personally identify you.

(2) How to refuse cookies
Cookies on your smartphone or computer remain on your device until you delete them or until they expire. Most browsers are automatically enabled to accept cookies. You can disable cookies by changing your browser settings. Please note that in this case, the functionality and display of some websites may be affected.
If you wish to change cookie settings, please check with the manufacturer of each browser.