Intelligent Wave Inc.

Personal Information Protection Policy

We have the opportunity to come into contact with a wide variety of personal information throuagh our business activities including system development, maintenance services, and sales of CWAT, an information leakage solution.
We fully recognize the importance of protecting personal information and have obtained a Privacy Mark license from the Japan Institute for Promotion of Digital Economy and Community. We have also passed the security audit for international brand cards and are officially certified as a service provider.
Furthermore, although we have already established internal regulations in compliance with laws and regulations and other norms regarding personal information, we have also established the following personal information protection policy.

1. Personal information will be acquired, used, and provided appropriately, taking into consideration the nature and scale of our business. We will establish the necessary measures to ensure that personal information is not handled beyond the scope necessary to achieve the purpose of use without obtaining advance consent from the owner.
2. We will comply with all relevant laws, regulations, government guidelines, and other norms regarding the handling of personal information.
3. We will formulate measures to prevent the leakage, loss, or damage of personal information held by us and formulate the necessary corrective measures.
4. We will establish a consultation desk to address complaints and provide information regarding our handling of personal information and our personal information protection management system.
5. We will establish a personal information protection management system and will continuously review and improve the system as necessary.

Date of establishment: July 1, 2001
Date of revision: September 25, 2024
Intelligent Wave Inc.
Koji Kawakami, Chief Executive Officer and Representative Director

This Personal Information Protection Policy is posted on our website at: https://www.iwi.co.jp/, and is always available through our Personal Information Consultation Desk.

Contact for inquiries regarding our Personal Information Protection Policy and the handling of personal information: Personal information protection officer

Handling of Personal Information

Handling of Personal Information

Date of establishment: December 26, 2007
Date of revision: June 11, 2024

We may acquire and handle customer personal information in line with business transactions. How we handle your personal information is explained below.

Intelligent Wave has established a personal information protection policy and will ensure that all of our officers, employees, and other related parties are fully aware of, implement, improve, and maintain this policy. Further, we will ensure that all personal information is acquired by legal and fair means. We will inform the owner of the personal information of the voluntary nature of providing personal information to us and of any consequences of not providing such information.

Intelligent Wave has established a personal information protection policy and will ensure that all of our officers, employees, and other related parties are fully aware of, implement, improve, and maintain this policy. Further, we will ensure that all personal information is acquired by legal and fair means. We will inform the owner of the personal information of the voluntary nature of providing personal information to us and of any consequences of not providing such information.

2. Personal Information Handled by Intelligent Wave

1. Personal information of persons who have exchanged business cards with our officers and employees
2. Personal information disclosed by customers in the course of our business operations
3. Personal information disclosed by customers by responding to questionnaires or information provided to us via web forms, emails, faxes, or over the telephone, etc.
4. Personal information provided by third parties
5. Personal information shared between Intelligent Wave and other users of said information

3. Purpose of Use of Personal Data Held by Intelligent Wave

Personal information handled by Intelligent Wave will be used for the following purposes. In cases where personal information is used for other purposes, the purpose of use and contact information for inquiries will be clearly indicated at the time the personal information is obtained. If we intend to use your personal information for reasons beyond these purposes, we will inform you of the purpose of use and obtain your consent. However, this will not apply in cases where the purpose of use is deemed to be clear from how the information is acquired.

It is voluntary to provide us with your personal information. However, please kindly note that if you do not provide the personal information required, we may not be able to provide the services stated in the purpose of use or respond to your inquiries.

1. Sale of software and hardware, etc.
2. Provision of system construction, system development and consultation services, etc.
3. Performance and management of contracts entered into between customers and Intelligent Wave
4. Contact for business negotiations and meetings with customers
5. Provision of after-sales services for products and services
6. To send announcements regarding events/products, or emails, and to provide information over the telephone
7. Distribution of email newsletters
8. Communication, selection and procedures concerning recruitment activities
9. Communication, selection and management concerning internship activities
10. Employee labor and wage management, social insurance, work safety, welfare, and work management
11. Management of shares
12. Response to inquiries
13. Analysis to improve products and services based on questionnaires

Other ways we may use your personal information
・To process personal information outsourced to a third party contractor within the scope of use of said third party contractor

4. Outsourcing of the Handling of Personal Information

5. Security Management Measures for Personal Data Held by Intelligent Wave

We identify personal data in our possession and appoint a data management officer. We conduct risk assessments in accordance with JISQ15001, establish security management standards for personal data, and take appropriate security management measures. We also conduct internal inspections on a regular basis to assess our security management.

(Main security management measures)
We conduct the following security management measures and any necessary additional measures depending on the risk to personal data.

1. Personnel measures
・We provide employees with regular training on the handling of personal information.
・Our internal rules and regulations include information regarding the confidentiality of personal data.
2. Physical measures
・We designate secure areas and manage entry and exit based on access authorization.
 ・In order to prevent theft and leakage, we create and manage rules for the transfer of media and sending of information.
3. Technical measures
・We establish access authorization to the extent necessary for the performance of duties to prevent unauthorized access.
 ・We encrypt communications and establish measures to isolate networks.
4. Outsourcing
・When outsourcing the handling of personal data, we select entities that are able to implement security management measures identical to our own and transfer personal data only to the extent necessary for the performance of outsourced work. We request and supervise inspections on a regular basis.
5. External environment
・Transfer of personal data outside Japan: All personal data held by Intelligent Wave, including information held by third party contractors, is stored in Japan.

In the event security management measures for a service are disclosed on a service site, said measures will take precedence.

6. Procedures for Requests for Disclosure etc. of Personal Data Held by Intelligent Wave

In the event we receive a request from a customer or his/her representative for notification of the purpose of use of retained personal data, disclosure, correction, addition, deletion, suspension of use, or elimination of retained personal data, the suspension of provision of retained personal data to third parties, or disclosure of records of provision to third parties (hereinafter "disclosure, etc.") we will respond in accordance with internal rules and regulations.  For specific information, please get in contact with us using the contact information in 7.

1. Procedures
Please forward you request by mail, telephone or e-mail. Upon confirmation of the content of the request, we will send you a request form. Please fill in the necessary information and send it back to us. In relation to the above, we will confirm that the person making the request is the owner of the relevant information or, in the case of an agent, that he/she has the authority to act on the owners' behalf. Once a request for deletion, discontinuation of use or erasure of retained personal data, or discontinuation of provision to third parties of such data has been completed, any product-related services and other services, including membership services, will not be available to any individual making such request.
 For services provided on the Internet, these procedures may be completed through the site. In the event of such, please check the detailed procedures on the relevant site.
2. Fees, etc.
No fees are charged to process requests. However, you will be required to pay all costs related the request, including postage, telephone fees, recording media fees in the case of a request for disclosure by electromagnetic record, and communication charges.
3. Contact for inquiries
Please contact us at the contact information in 7. below.

7. Complaints and Consultation regarding the Handling of Retained Personal Data

For complaints/consultation about the handling of personal data held by Intelligent Wave, please contact us at the contact below.

Special Notes

We may review this Handling of Personal Information due to improvements in how we handle your personal information or the revision of laws and regulations or other standards.
This Handling of Personal Information will become effective on and after the date of establishment (including any dates of revision).