Kanamori Industries Co., Ltd. Basic Policy on Personal Information Protection

1. Basic Policy

Kanamori Industries Co., Ltd. (Address: 1-4-1 Showa-machi, Takaoka City, Toyama Prefecture, Representative: Yohei Kanamori) (hereinafter referred to as "the Company") recognizes the importance of personal information and considers it a social responsibility to protect personal information. The Company will comply with laws and regulations related to personal information and will properly acquire, use, and manage personal information handled by the Company.

This privacy policy (hereinafter referred to as "this Policy") stipulates the handling of personal information and related information obtained by the Company in connection with the services provided by the Company (hereinafter referred to as "the Services"), as well as the handling of pseudonymized and anonymized information created by processing the obtained personal information.

In connection with the use of the Services, partner companies of the Company mayobtain personal information. The handling of personal information by such partner companies is governed by not this policy but their privacy policies. As for the handling of personal information by such partner companies, please refer to each policy of the partner companies.

2. Personal Information and Collection Methods

In this Policy, "personal information" refers to information related to the identification of an individual, behavior history on communication services, and other information generated or stored on the individual's smartphone, PC, or other devices related to the individual or the individual's device, which is collected by the Company based on this Policy. The personal information collected by the Company in the Services and the methods of acquisition are as follows:

Items of Personal Information to be Acquired:

• Name, gender, address, date of birth, phone number, email address, and other information registered at the time of membership registration for the Services.
• Content and usage status of the Services applied for.
• Information related to internet usage (history of websites, search keywords, advertisement views and clicks, browsing time, browsing methods (browser type), usage environment of the device used during browsing (setup environment, carrier information), cookie information, IP address, device identification number, etc.).
• Information related to inquiries and communications from customers to the Company.
• Information collected directly through business card exchanges or other methods by Company employees.

Methods of Acquisition:

• Methods of provision through documents such as application forms, web screens, oral methods, etc.
• Methods of recording by the Company in connection with the use of the Services and other services of the Company.
• Methods of indirect acquisition of personal information from third parties.
• Methods of acquiring personal information published in publications or on the internet.
• Methods of acquisition through direct business card exchanges or other methods by Company employees.

3. Purpose of Use of Personal Information

The Company and the joint users of personal data specified in Section 4 of this Policy (collectively referred to as "the Company Group") will handle the provided personal information within the scope necessary to achieve the following purposes, unless otherwise notified by other means. The Company will not handle personal numbers beyond the scope of personal number-related affairs stipulated by law.

• Conclusion and performance of contracts, and other transaction management.
• Notifications and greetings based on social customs.
• Provision of information, advertisements, or promotions related to products and services handled by the Company Group.
• Surveys, analyses, research, and audits related to the Company's business.
• Provision of information, surveys, analyses, and research related to products and services commissioned by third parties to the Company Group.
• Creation of statistical information, analysis of anonymized information, and other processing of personal information for the Company's use.
• Improvement of services provided by the Company Group.
• Selection of job applicants and provision and collection of information for future recruitment activities.
• Evaluation, assignment, and other personnel and labor management of employees.

The Company may entrust the provided personal information to business contractors (including those located abroad) to achieve the above purposes. In such cases, the Company will supervise the business contractors as necessary and appropriate to ensure the safe management of the entrusted personal information. Additionally, the Company may provide personal information to public institutions in case the public institutions require by law.

4. Joint Use of Personal Data

The Company Group will jointly use the provided personal information with the following group companies.

Items of Information to be Jointly Used:

• Personal information acquired by the Company as described in Section 2.1 of this Policy.

Scope of Joint Users:

• Kanamori Industries Co., Ltd.
• Kanamori Techno Sales Co., Ltd.
• Safety Research Center Co., Ltd.
• Safety Research Center Takaoka Co., Ltd.
• Kanamori Trading (Shanghai) Co., Ltd.
• Kanamori Industries (Hong Kong) Co., Ltd.
• Kanamori Industries (Vietnam) Co., Ltd.
• Kanamori Foundation
• CMC Publishing Co., Ltd.
• Kanamori America Inc.

Purpose of Use by Joint Users:

• The purposes of use described in Section 3.1 of this Policy.

Person Responsible for Managing Jointly Used Personal Information:

• Kanamori Industries Co., Ltd. (Address: 1-4-1 Showa-machi, Takaoka City, Toyama Prefecture, Representative: Yohei Kanamori).

Our company may omit post this policy in case that Our company notifies the individual of the joint use in advance or Our company make the fact of the joint use easily accessible to the individual.

However, personal numbers will not be jointly used.

5. Acquisition of Personal Related Information from Third Parties

The Company may collect information related to customers (personal related information) such as identifiers and behavior history from third parties and obtain it as personal information by linking it with personal information managed by the Company. Specifically, the Company may obtain information such as cookies, mobile advertising identifiers, email addresses, phone numbers (including those processed into irreversible variables), advertisement delivery-related logs such as the number of advertisement views, browsing history, purchase history including shopping at physical stores, location information, and other behavior history, and link it with personal information managed by the Company. In such cases, the Company will handle the information appropriately as personal information within the scope necessary to achieve the purposes of use described in Section 3.1 of this Policy.

The Company Group will ensure the following regarding the management of the provided personal information:

• Ensuring the accuracy of information: The Company will make best efforts to ensure that the provided information is always accurate and up-to-date.
• Safety management measures: The Company will strictly regulate the handling methods of personal information based on internal regulations and ensure thorough handling based on those regulations.
• Supervision of employees: The Company will ensure strict operation regarding the handling of personal information based on our internal regulations.
• Supervision of contractors: When entrusting the handling of personal information to external contractors, the Company will properly manage personal information by entrusting only contractors that meet the requirements based on internal regulations.
• Retention period and disposal: The Company will set a retention period for the provided information and dispose of it after the retention period ends. Even within the retention period, the Company will promptly dispose of the information if it becomes unnecessary

6. Provision of Personal Information

In addition to cases permitted by law, the Company will provide personal information to third parties (including those located abroad) such as business partners, information providers, advertisers, and advertisement delivery destinations within the scope necessary for the provision of products and services, improvement of product and service quality, consideration of new products and services, and research and analysis. Provided, however, that the Company will provide personal information to third parties within the necessary scope by excluding information which can directly identify specific individuals, such as names and addresses. In case that the individual has signed a separate contract for an individual, the terms of the contract will take precedence.

Provision of Personal Information to Research Institutions for Research and Analysis

The Company Group may use Google Analytics and other access analysis and advertisement delivery services provided by third parties for service improvement and advertisement delivery. These services may collect information such as website usage history, device information, and IP addresses using cookies, pixel tags, web beacons, and other technologies. The Company may analyze the generated text files, and some information such as IP addresses may be collected by Google Inc. and other third parties. By using the Company's website, customers are deemed to have given permission for such data processing by Google and other third parties for the above methods and purposes (see below for opt-out rights). Individuals can refuse cookies by browser settings, but some website functions may become unavailable.

7. Inquiries Regarding Personal Information

The Company Group accepts requests for notification of the purposes of use, disclosure, correction, suspension of use, and other requests regarding personal information held by the Company Group, as well as questions and complaints regarding the handling of personal information and anonymized information, based on the "Act on the Protection of Personal Information."

To make a request, please contact the following office with your name, address, phone number, email address, documents confirming your identity, and a pledge to pay the prescribed fee.

Please note that we do not accept requests made in person. Address: 1-4-1 Showa-machi, Takaoka City, Toyama Prefecture, Kanamori Industries Co., Ltd., General Affairs Department, Personal Information Protection Officer.

If it is determined that the request cannot be fulfilled, we will notify the result of you by post to the specified address by specifying the reason.

Please note that prescribed fee (including opportunity costs for the responding employee and outsourcing costs) will be charged for inquiries regarding personal information. If you do not bear the cost, the request will be treated as not made. Please understand this in advance.

Cases Where Requests Cannot Be Fulfilled

The following cases may result in the inability to fulfill requests. In such cases, we will notify you of the reason. A prescribed fee will be charged even if the request cannot be fulfilled.

• If the address provided does not match the address on the identity verification documents or the registered address with the Company, making it impossible to verify the individual's identity.
• If the agent's authority cannot be confirmed when applying through an agent.
• If the request does not pertain to "retained personal data."
• If fulfilling the request may harm the life, body, property, or other rights and interests of the individual or a third party.
• If fulfilling the request may significantly hinder the proper execution of the Company's business.
• If fulfilling the request would violate other laws and regulations

8. Change Procedures

The Company may change this Policy from time to time and will post the changes on this website.

California residents have certain rights with respect to personal information under the California Privacy A act(“CCPA”). For purpose of this subsection, the terms defined under the CCPA, including “personal information,” have the meanings ascribed to them under the CCPA.

1. Notice at Collection

We may collect the following categories of personal information to best serve you. A detailed description of our collection of personal information is provided on the table below.

For the categories of personal information we may sell or share, you may have the right to opt out of the sale or sharing. To learn more about the right to opt-out, please visit [URL].

2. Sensitive Personal Information

We do not collect, use, or disclose Sensitive Personal Information as defined by the CCPA.

3. Categories of Information Sources

We collect customer personal information through the following methods:

• Directly from customers
• From third-party platforms
• From data analytics providers
• From publicly available sources (such as social networks)
• Automatically from the devices or browsers used by customers (e.g., cookies, log information, browsing history)

4. Disclosure of Personal Information to Third Parties

In the past 12 months, we have disclosed the following categories of customer personal information to third parties for the following purposes:

• Identifiers: To third-party platforms for providing services on our behalf
• Internet or other similar network activity: To analytics providers for delivering interest-based advertising.

5. Sale or Sharing of Personal Information

In the past 12 months, we have shared customer personal information with third parties. However, we have not sold customer personal information to third parties.

• Identifiers: To third-party platforms for providing services on our behalf
• Internet or other similar network activity: To analytics providers for delivering interest-based advertising.

If you need any further assistance or have any specific sections you would like to focus on, please let me know!

6. Your Rights under California Consumer Privacy Act

As a California resident, you have the following rights under the CCPA.

(1) Right to Know and Access

You have the right to request that we disclose personal information we have collected about you, including.

- The categories of personal information
- The categories of sources from which the personal information is collected
- The business or commercial purpose for collecting, selling, or sharing personal information
⁠- The categories of third parties to whom we disclose personal information, and
- The specific pieces of personal information we have collected about you.

(2) Right to Delete

You have the right to request that we delete personal information that we have collected from you, subject to certain exceptions under the CCPA.

(3) Right to Correct

You have the right to request that we correct inaccurate personal information that we maintain about you.

(4) Right to opt Out of Sale or Sharing of Personal Information

You have the right to direct us not to sell or share your personal information to third parties.

(5) Right of No Retaliation

You have the right not to receive discriminatory treatment by us for the exercise of your privacy rights under the CCPA.

7. Process to Exercise the CCPA Rights

To make a request of access, deletion or correction with respect to your personal information, please submit a request form at [URL] or call us at 0766-25-0123. You may also make a request about the right not to receive discriminatory treatment at [URL] . We may need to verify your identity before processing your request, in which case we will send you a link to verify your email address registered with us and may request additional information to the extent necessary for the verification purposes. To make a request to opt out of sale or sharing of your personal information, please visit “Do Not Sell or Share My Personal Information ([URL]) ” and submit a request form. Also, you can signal your preference to opt out of the sale or sharing of your personal information through browser or your account page by certain global privacy control tools. To learn about the specifications of the global privacy control that we accept, please visit [URL].

8. Exercise of the CCPA Rights by Authorized Agent

You may designate an authorized agent to submit a request for access deletion and correction and to opt-out of the sale or sharing of your per­ sonal information on your behalf. An authorized agent must provide us with the signed permission by you except when he/she transmits an opt­ out preference signal on your behalf.

9. Contact Information

If you have any questions or concerns about our privacy policy and practices of processing personal information, please use the contact information provided below.

Email: inquiry@plabase.com
Address：1-4-1 Showa-machi,Takaoka city,Toyama,Japan

10. Personal Information of Individuals Under 16 Years of Age

The Company's services and website are not intended for individuals under 16 years of age. Individuals under 16 years of age should not provide any personal information.

The Company does not knowingly collect personal information from or about individuals under 16 years of age. If it is discovered that the Company has collected personal information from an individual under 16 years of age without parental consent, the information will be promptly deleted. If you believe that the Company may have collected or stored personal information about an individual under 16 years of age, please contact the following:

Email: inquiry@plabase.com

Address: 1-4-1 Showa-machi,Takaoka city,Toyama,Japan

Last Revised: September 1, 2025