Personal Information Protection Policy

Enacted on April 1, 2005
Revised on April 1, 2017

1. Protection of Personal information

To ensure our customer shall use our service with trust and assurance, privacy is highly protected. The Personal Information Protection Act and other relevant regulations are stictly followed to execute protection policy under serious management by all directors and employees. Moreover, we strive to maintain the best management of personal information and work for continuous improvement.

2. Collection of Personal Information

FANCL Group collects personal information in a legal and fair manner. Basically, we do not request extra information other than the personal information submitted to us by our customers. However, the consent of a parent or guardian for customer is sixteen or younger may be requested.

FANCL Group collects customer's personal information, in any of the following cases;

• When a customer purchases a product or service, has information requests, has an inquiry or consultation request, or uses other FANCL Group services.
• When a customer participates in FANCL Group activities such as moniter test, questionnaires, interviews.

3. Use of Personal Information

Personal information collected from our customers will be used for the following purposes:

• When sending products, informations, news release, reply for inquiries, questionnaires, and other services.
• When sending informations believed to be beneficial to our customers such as business informations of the FANCL group.
• For customers registered their memberships in shop, personal informations will also be shared with shop operation partners.
• To improve our serivces and customer satisfaction, incoming telephone conversations from customers will be recorded.

For inquiries, please contact our "Inquiry Hotline" (0120-34-2222).

4. Management of Personal Information

Personal information from our customers collected in an authorized way is under centralized administration by the FANCL Group (FANCL Corporation and ATTENIR Corporation, etc.). When changes are made to your registered content, all your personal information in our Group of companies will be updated together. Major attention is paid to prevent information leakage, loss, damage, falsification, unlawful access, and so on. Appropriate safety measures are continuously enforced and efforts are made to further improve the management of personal information.

5. Provision of Personal Information

FANCL Group will not disclose or provide personal information to third parties without the consent of the customer except for the following case:.

1. To execute business operation (delivery of products, credit card verification, etc.), personal information will be disclosed to business partners, subcontractors, and subsidiaries under a confidentiality agreement.
2. As requested by government authorities such as The Police.
3. As requested by law.
4. With the consent of customer.

6. Outsourcing of Personal Information Management

The management of personal information is outsourced to upgrade the services to our customers. In these cases, confidentiality agreements are signed with the outsourcing parties whereas strict instructions and supervision are implemented to ensure that personal information is properly managed and no leaks occur.

7. Disclosure, Revision, and Deletion of Personal Information

As per customer request, personal information will be disclosed in a certain extent, but it will not apply when the life, safety, properties or interests of the third parties are threatened. If revision or deletion for your personal information is required, please contact us on your own.

Kazuyoshi Miyajima
President
FANCL Corporation