CAMPFIRE Inc. (hereinafter referred to as "the Company") and its subsidiaries and affiliates (hereinafter referred to as "the Group") may handle personal information in the course of providing various service businesses including crowdfunding platforms (hereinafter referred to as "the Services"). The Group declares that it will comply with applicable laws and regulations and other standards regarding the protection of personal information in its services, establish voluntary rules and systems, set forth this Privacy Policy, and implement and maintain it.
This Privacy Policy sets out the Group's handling of personal information. It describes how we use personal information, how we share personal information when it is shared, and your rights and choices regarding the handling of your personal information. In addition, if each company in our group has its own privacy policy, it shall be in accordance with the provisions of those policies in addition to this Privacy Policy. Our services also use cookies and other similar technologies, and we provide an explanation of these as well.
By using our services, users are deemed to have understood and agreed to this Privacy Policy.
The Group may revise this Privacy Policy without notice to reflect changes in the handling of personal information or related laws and regulations. The Group will notify or announce changes to this Privacy Policy by appropriate means (posting on the Group's website, sending e-mails, etc.). However, if the applicable laws and regulations or the content of the change require a sufficient period of notice to the user or the user's consent, the Group shall properly implement the change.
The term "personal information" in this Privacy Policy refers to information that can be used to identify an individual in accordance with applicable laws and regulations. For example, in the case of users to whom Japan's Personal Information Protection Law applies, personal information is any information about an individual that can be used to identify a specific individual by name, date of birth, or other description contained in the information (including information that can be easily collated with other information to identify a specific individual). For users covered by the EU General Data Protection Regulation ("GDPR"), the definition is based on "personal data" as defined therein, and for users covered by the California Consumer Privacy Act of 2018 ("CCPA"), the definition is based on "personal information" as defined therein.
Our group collects the following personal information from users of our services.
User registration data
Service Usage Data
The purposes for which the various types of personal data obtained from users are used and the legal basis for processing them under the GDPR are as follows
| Types | Purpose of use | Basis |
|---|---|---|
| User Registration Data | For identification purposes when registering or logging in to our services (project drafting or support) | Fulfillment of the contract Legitimate interests |
| To provide information about our services, to contact you, to send email newsletters, and to conduct surveys. | Legitimate interests | |
| To process refunds for project supporters of our services in the event that a project is not successful. | Fulfillment of the contract | |
| To transfer funds raised through our service projects to the project owners | Fulfillment of the contract | |
| To ship the rewards of the projects in our service. | Fulfillment of the contract Legitimate interests | |
| To cooperate with the courts, investigative agencies, and other relevant authorities in order to protect the life, body, or property of our group, users, or third parties | Compliance with legal obligations | |
| Service Use Data | To provide information and contact you for purposes related to our services | Fulfillment of the contract Legitimate interests |
| To provide features, information, advertisements, or other content based on a user's location | Legitimate interests | |
| To understand how users access and use our services, and to analyze the status of use | Legitimate interests | |
| For optimization of our services and development of new services | Legitimate interests |
The term "fulfillment of contract" refers to the use of personal information by our group in order to fulfill a contract with a user. For example, transferring the support money collected from a project to the project owner is a contractual obligation of our group, and we may use personal information for this purpose.
Legitimate interests" refers to the use of personal information by our group in order to provide the services that users expect from our group, and to maintain or develop the level of our services. For example, we analyze user usage and design services that are easier for users to use.
"Compliance with legal obligations" refers to the provision of personal information when the Group cooperates with the relevant authorities, such as courts and investigative agencies, in accordance with applicable laws and regulations. For example, a user may become a victim of illegal activities and provide personal information to investigative agencies to protect their property.
Our Group may use the collected personal information for the following purposes.
Our service uses a technology called "cookies". Cookies are a mechanism to temporarily store specific information as data in the communication device used by the user, and to identify the user based on that data each time the connection is made. Our group provides services that are based on the use of cookies. Therefore, if you do not allow the use of cookies, you may not be able to use some of the services of our group. When it is necessary to obtain a user's consent to use cookies in accordance with applicable laws and regulations, the Group will obtain such consent in an appropriate manner. The user's browser can also be set to allow or disallow the use of cookies. Please check your settings if necessary.
In addition, the Company's services may install collection tags, etc. to obtain access logs. The access log contains information such as the IP address, host name, browser name, and access date and time of the user who accessed the website.
Behavior analysis and advertisement distribution using cookies and access logs
The Company's services use cookies and access logs of the Company group or third parties in order to understand site usage, improve the site, create reports and display appropriate advertisements and promotions. Information obtained from cookies and access logs will be managed in accordance with the privacy policies of our group or third parties.
If the user does not wish to receive advertisements or promotions, or to have access logs collected, the user can stop the distribution of advertisements and promotions or the collection of access logs by accessing the websites of the companies listed below and following the procedures for deactivation (opt-out).
In addition, our service uses Google Analytics and Firebase provided by Google Inc. You can learn more about how the data is collected and processed from this page provided by Google.
http://www.google.com/intl/ja/policies/privacy/
The Group may provide personal information to third parties in the following cases
As with users in other regions, the sale of the consumer's personal information is not conducted by the CCPA for users in California, USA.
In addition, when necessary to provide services to users (e.g., as a settlement agent), our group may entrust the handling of personal information to a third party after conducting necessary and appropriate supervision of the entrusted party.
Our group may share the collected personal information in accordance with the following
In the event that the Group transfers personal data to a third party outside of Japan, the European Union, Iceland, Liechtenstein, and Norway (hereinafter referred to as the "EEA") (except for countries and regions that have obtained sufficiency certification), the Group will ensure the security of the destination country by certifying it under the Privacy Shield Framework, entering into standard contractual clauses, and other methods in accordance with applicable laws and regulations.
When obtaining support services from a third party for our services, our group may share the user's personal information with a trusted vendor in order to outsource all or part of the handling of personal data to the extent necessary to achieve the purpose of use. In the event of such sharing, our group will obligate the vendor to use the user information only for the purposes authorized by our group, and to protect the user information according to the same or higher standards as our group. In addition, the Group may take certain measures to process personal information so that it cannot be used to identify individuals, and provide such personal information to third parties in such a way that it cannot be restored.
Our group will retain and store user information for the period necessary to carry out the purpose of use or for the period required by applicable laws and regulations. After the purpose of use has been fulfilled or the period of time specified by applicable laws and regulations has expired, the personal information will be promptly deleted. However, in order to comply with our legal obligations and protect our rights and interests, we may retain, store and use user information.
The Group also collects and maintains data in which personal information has been processed so that it cannot be used to identify individuals through certain measures, and such personal information cannot be recovered. In principle, such data will be deleted as soon as possible after the purpose has been fulfilled or the statutory period has expired, but may continue to be retained and stored for the protection of the rights and interests of the Group, the improvement of our services, or for compliance with legal obligations.
Users residing in certain countries or regions are granted certain rights regarding their personal information. As a general rule, these rights include the right of access to one's personal information and the right to request its collection and deletion, but the conditions for exercising these rights, as well as additional and other rights, vary from country to country. Therefore, especially for users residing in the EEA and California, we will separately explain your rights as described in Section 13 and 14.
When a user requests the disclosure of his/her personal information, our group will disclose it to the user himself/herself without delay. However, we may not disclose all or part of the information if disclosure would cause any of the following to occur, and if we decide not to disclose the information, we will notify you to that effect without delay. Users may request disclosure of records pertaining to provision to third parties.
If a user requests the correction, addition, deletion, cessation of use, or elimination of his/her personal information, our group will respond to the request within a reasonable period of time in accordance with the law after confirming the identity of the user.
This section explains the personal information of EEA residents handled by our group and the rights of users under the GDPR.
A User may withdraw such consent at any time, even if the Group has obtained personal data with the User's consent.If you withdraw your consent, you may not be able to use all or part of our services.
A User may request an explanation of the User's personal information held by our group, the purpose and method of use of such information, and may receive a copy of the User's personal information through a procedure separately designated by our group.
A user may request the deletion of his/her personal information handled by our group. However, this does not apply to the following cases.
If any of the personal information collected from the user by our group is inaccurate, the user may request that our group change, add, or correct the information by following the procedures specified separately by our group.
You may ask us to stop using all or part of your personal information, or to restrict our group from using it. You may also object or complain at any time to the supervisory authority of any country in the EEA or to the Group regarding the handling of your personal information by the Group.
This section describes the personal information of California residents handled by our group and the rights of users under the CCPA. If you are a resident of the State of California, you may exercise the following rights under the CCPA.
The user may request the deletion of personal information collected by the CCPA from the user to the extent provided for by the CCPA.
Users may request to opt out of the sale of their personal information. However, as already mentioned, the Group does not sell, use, share, or rent personal information. If you have any questions about this, please contact us using the contact information below.
Our group will not treat users unfairly or discriminate against other users in exercising or having exercised the above rights.
Requests to exercise any of the above rights may be addressed to the Company through the following contact. In such cases, the identity of the person may be verified by means of identification documents, etc., in order to confirm the basis for exercising the right.
Our group will send notifications related to transactions related to our services or to the provision of our services as necessary. However, our group will try to refrain from contacting users that they do not wish to receive. As a general rule, the Group will opt-in (obtain prior consent) to communications for marketing purposes sent by the Group.
The Group makes every effort to protect customer information held by the Group from unauthorized access or disclosure. For security measures for protection, we take measures based on our security policy and strive for continuous improvement.We will take appropriate corrective measures when safety issues are identified. If you find any bugs or vulnerabilities in our service, please let us know using the contact information below.
In the event of a breach of personal information, we will take appropriate action in accordance with applicable laws and regulations.
The Company's website may contain links to other companies' websites. Please note that other companies' websites are subject to their own rules and privacy policies that differ from those of the Company's website.
Our services are not available to minors under the age of 16 who reside outside of Japan. Minors under the age of 16 who reside outside of Japan should not provide personal information through the Service. In the unlikely event that personal information is provided, it will be deleted in a timely manner by contacting us via the contact information below.
If you have any questions or complaints, or wish to exercise any of the rights described in this Privacy Policy, please contact us at the following address
CAMPFIRE Corporation Customer Support Inquiry
If you have any questions about CCPA, please contact us by e-mail.
E-mail：support-ccpa@camp-fire.jp