PRIVACY

Bay Auc Co., Ltd. (hereinafter referred to as "the Company") complies with laws and other norms concerning the protection of personal information regarding the personal information of our customers (hereinafter referred to as "personal information"), establishes voluntary rules and systems, and executes and maintains the following **Personal Information Protection Policy**.

1. The Company shall make the personal information protection policy known to all employees (including officers, regular employees, part-time workers, temporary staff, etc.) and shall improve and maintain it for the appropriate protection of personal information.

2. The Company shall implement appropriate information security measures, such as countermeasures against unauthorized access and computer viruses, to prevent the loss, destruction, alteration, and leakage of personal information.

3. The Company shall acquire personal information by legal and fair means, ensuring that it is not acquired by fraudulent methods. Furthermore, the Company shall obtain consent from the data subject (the individual to whom the personal information belongs) regarding the purpose of use, or notify the necessary information on the Company's official website.

5. The Company confirms that the data subject has the right to request disclosure, correction, cessation of use, or deletion of their own retained personal data, and shall respond appropriately to such requests from the data subject.

6. The Company shall respond appropriately if a complaint is lodged by a data subject regarding the handling of personal information.

7. When entrusting personal information to a third party for business purposes, the Company shall implement necessary supervision measures over the said third party.

8. When jointly using personal information with a specific third party, the Company shall make the following information readily accessible to the data subject in advance: the fact of joint use, the items of personal information to be jointly used, the scope of joint users, the purpose of use by the users, and the name of the party responsible for the management of the personal information.

9. The Company will review the operational status of the handling of personal information in accordance with amendments to relevant laws and regulations and changes to the protection policies of affiliated and related corporations, and will strive to continuously improve this protection policy.