SanAn Corporation (hereinafter referred to as “the Company”) provides information processing services to its clients. In the course of providing these services, the Company is committed to establishing a secure environment and protecting all personal information - including both the personal data entrusted to us by clients and the personal data collected by the Company itself.
We recognize that protecting personal information is a fundamental principle of our business operations and a vital social responsibility. To uphold this philosophy, the Company implements necessary and appropriate safety management measures throughout the organization, as outlined below:

1. Lawful Collection of Personal Information
The Company collects personal information in a transparent, lawful, and fair manner only after clearly defining the purpose of its use.

2. Use and Provision of Personal Information
The Company handles personal information only within the scope necessary to achieve the specified purpose. Such information is used and provided strictly within that scope, and measures are implemented to prevent any use or disclosure beyond the intended purpose.

3. Implementation of Safety Measures
The Company strives to maintain the accuracy of personal information and enforces robust security management practices to prevent unauthorized access, leakage, loss, or damage. In the event that a security issue arises, the Company will promptly identify the cause and implement effective corrective actions.

4. Compliance with Laws and Regulations
The Company complies with all applicable laws and government guidelines related to personal information protection, as well as other relevant standards.

5. Handling of Complaints and Inquiries
The Company promptly and appropriately responds to complaints, inquiries, and requests related to personal information - including access, correction, deletion, or suspension of use — made by data subjects.

6. Management Structure and Continuous Improvement
The Company maintains an organizational structure to properly manage and handle personal information, establishing internal rules, procedures, and operational guidelines to ensure the continuous improvement of its Personal Information Management System (PIMS).