Fast Accounting Co., Ltd. (hereinafter referred to as “the Company”) recognizes that complying with the Personal Information Protection Law and other related laws and regulations, and appropriately handling personal information held by the Company, is an important social responsibility of the enterprise. We implement the following initiatives:

1. Definition of Personal Information

Personal information refers to information that can identify a specific individual through descriptions such as name, date of birth, and other details; information that can be easily cross-referenced with other information to identify a specific individual; and information that includes personal identification codes.

2. Compliance with Laws, Guidelines, and Norms

The Company complies with laws related to personal information protection, guidelines set by the government, and other norms.

3. Acquisition and Purpose of Use of Personal Information

The Company acquires, uses, and provides personal information limited to the scope necessary for legitimate business execution in our operations, and does not handle personal information beyond the scope necessary to achieve the specified purposes of use below:

1. Personal information obtained during sales activities
   1. Responding to inquiries, collecting opinions and requests to improve services
   2. Providing information about services, events, seminars, and campaigns of the Company and partner companies
   3. Conducting surveys related to services of the Company and partner companies
   4. Analyzing service needs and usage trends of companies
   5. Credit assessment and management
   6. Other activities to sell services of the Company or partners to customers with needs
2. Personal information obtained through seminar applications
   1. Purposes listed in 1.
   2. Providing participant information to co-hosting companies of seminars
   3. Recruitment activities for applicants
3. Personal information of users of companies using the Company’s services
   1. Purposes listed in 1.
   2. Providing services, billing fees, and fulfilling rights and obligations related to the services used
   3. Analyzing usage status
   4. Other activities to improve the Company’s services and develop new services
4. Personal information obtained through accounting vouchers, etc., via the Company’s services
   1. AI learning in a format that does not identify individuals
5. Personal information of business partners
   1. Executing and managing business transactions such as contract conclusion, quotations, selection, evaluation, and business management
   2. Providing information about services, events, seminars, and campaigns of the Company and partner companies
6. Personal information of job applicants
   1. Communicating with applicants or recruitment agencies regarding recruitment selection
   2. Investigating and selecting applicants
   3. Providing information about the Company
   4. Informing about recruitment-related events and seminars
   5. Analyzing trends of applicants
7. Personal information of employees
   1. Employment management, health management, welfare, and emergency contact
   2. Providing employee information to clients, user companies, and business partners within the scope necessary for business
   3. Submitting notifications to national or local governments as required by laws or regulations
   4. Other activities necessary for the Company to appropriately execute assigned duties of employees
8. Personal information of shareholders
   1. Shareholder management and exercising rights and fulfilling obligations as stipulated by the Companies Act
   2. Public relations, IR activities, and other communications regarding measures taken by the Company for shareholders
   3. Analysis of shareholder trends and submission or disclosure required by laws or regulations to national or local governments, public organizations, stock exchanges, shareholder registry administrators, or securities companies.

4. Provision of Personal Information to Third Parties

The Company provides personal information to third parties only in the following cases:

1. When based on laws and regulations
2. When it is necessary to protect a person’s life, body, or property, and it is difficult to obtain the person’s consent
3. When it is particularly necessary to improve public health or promote the sound growth of children, and it is difficult to obtain the person’s consent
4. When it is necessary to cooperate with a national agency, local government, or their consignees in executing affairs prescribed by laws and regulations, and obtaining the person’s consent may impede the execution of those affairs
5. When there is prior consent from the individual
6. When providing as statistical data that cannot identify individuals
7. When requested by the individual
8. When entrusting the handling of personal information to a third party within the scope necessary to achieve the purpose of use

5. Joint Use of Personal Information

The Company jointly uses personal information obtained by the Company with the following entities:

6. Management of Personal Information

The Company implements the following security measures to properly manage personal information:

1. Organizational Security Measures
   1. Internal security-related regulations define security responsibilities, handling procedures, and response flows in the event of security incidents or failures.
   2. The Company continuously reviews and improves security management based on ISO/IEC 27001 Information Security Management System (ISMS) certification and ISO/IEC 27017 Cloud Security Certification (CLS).
2. Human Security Measures
   1. All employees and business partners handling personal information are required to sign confidentiality agreements.
   2. Compliance training, including information security related to personal data, is conducted at least once a year for all employees to enhance awareness and knowledge.
3. Physical Security Measures
   1. Office work areas are automatically locked at all times, with entry and exit controlled by security cards.
   2. Cabinets storing personal information within work areas are kept locked.
4. Technical Security Measures
   1. All systems handling personal information have access controls based on ID and password authentication, with regular audits of account usage.
   2. Security checks on systems handling personal data are conducted internally on an ongoing basis, with external security audits performed as necessary. Communications involving personal information are encrypted, and firewalls and other protective measures are implemented as needed.

7. Use of Cookies

The Company’s website uses cookies. A cookie is stored on a visitor’s computer when accessing the website, either by the Company or by advertising service providers commissioned by the Company. The Company uses cookies to:

• Identify website visitors
• Save access history
• Improve website usability
• Provide information that aligns with user needs

Cookies do not store any personal information that can identify individuals.
Users can enable or disable cookies via their web browser settings.

8. Inquiries & Consultations

For inquiries regarding the use, disclosure, correction, deletion, suspension of use, suspension of provision to third parties, complaints, or other concerns about the handling of personal information, please contact the following:

[Contact Information]
Fast Accounting Co., Ltd.
Privacy & Security Contact
3F, Shiba Park Bldg. A, 2-4-1 Shibakoen, Minato-ku, Tokyo 105-0011, Japan
Email: privacy@fastaccounting.co.jp

Effective Date: September 1, 2018
Revised: March 31, 2022
Revised: June 6, 2024

Address: 2-4-1 Shibakoen, Minato-ku, Tokyo, JapanFast Accounting Co., Ltd.
President & CEO: Keitaro Mori