Privacy Policy
About Our Personal Data Protection Policy
At MS&Consulting Co., Ltd. and its group companies (hereinafter collectively referred to as “MS&C”), we provide management consulting services centered on Mystery Shopping Research, which aims to uncover psychological changes in customers and realize the Service-Profit Chain. As a company that contributes to society, we recognize our responsibility to set a standard for the proper handling of personal data. Acknowledging the importance of this responsibility, we have established a Personal Data Protection Policy. Our executives and employees work together to ensure strict adherence to this policy, thereby ensuring the protection of personal data and safeguarding the rights and interests of individuals.
- When collecting personal data, we specify the purpose of use as clearly as possible and collect only the information necessary to achieve that purpose.
- When collecting personal data directly from individuals in writing, we inform the individual of our company name, the name and contact information of the Personal Data Manager, the purpose of use, the types of data to be processed, and the individual’s rights and obligations before collecting the information only to the extent necessary.
- Personal data will be used only within the scope of the purposes to which the individual has consented. In addition, we also establish and implement procedures to ensure no use beyond those purposes.
- We manage the personal data we hold appropriately and do not disclose or provide it to third parties without the individual’s consent, except as required by law. However, this does not apply if otherwise provided for by law.
- We maintain personal data accurately and in its most current state within the scope necessary for its intended use. We implement reasonable safety measures to prevent leaks, loss, or damage, and we work to prevent and correct such risks.
- If we outsource the handling of personal data, we ensure confidentiality and prohibit further disclosure or provision to third parties through contractual obligations, and we implement proper management of the contractors.
- We handle complaints or inquiries regarding personal data through our dedicated contact point.
- We comply with the laws, guidelines, and other norms of each country and region related to the processing of personal data.
- We have established a Personal Data Protection Management System, which we review regularly to ensure ongoing improvement.
Measures Taken to Ensure the Security of Retained Personal Data
【Establishing of Basic Policy】
Personal data protection measures are applied from the start of processing and throughout the entire processing procedure. The Company has formulated a Personal Data Protection Policy that includes compliance with relevant laws and regulations, proper acquisition, use, and provision of personal data, and contact points for inquiries and complaints, in order to ensure the proper processing of personal data.
【Developing the Rules Regarding the Processing of Retained Personal Data】
The Company has developed internal rules governing the processing of retained personal data.
【Organizational Security Measures】
The Company has designated a person responsible for overseeing initiatives related to personal data protection.
The Company also conducts regular audits to verify compliance with internal regulations on personal data protection.
【Personnel Security Measures】
The Company shall provide regular training on the protection of personal data.
Employees who handle personal data are required to sign confidentiality agreements.
【Physical Security Measures】
Access to offices and other areas is restricted and controlled.
【Technical Security Measures】
Access controls are in place to limit access to personal data only to personnel who require it.
The Company has installed antivirus software to protect against external threats.
【Understanding of External Environments】
When outsourcing the processing of personal data to external parties, the Company evaluates those contractors.
When providing personal data to overseas entities, the Company confirms the legal framework and data protection conditions in the recipient country.
Purpose of Use of Personal Data Processed by Our Company
【Purpose of Use for Personal Data Obtained by Means Other Than Direct Written Forms】
Personal data obtained by our Company through means other than direct written forms will be used within the scope of the following purposes:
【Purpose of Use for Retained Personal Data】
Retained personal data acquired by our Company will be used within the scope of the following purposes.
If the Company intends to use the data for any purpose not listed below, the Company will obtain the data subject’s consent in the case of direct acquisition, or publicly disclose the new purpose in the case of other means of acquisition before use.
【Regarding Requests for Disclosure of Personal Data】
-
When we receive a request from an individual regarding notification of purpose of use, disclosure, correction, addition, or deletion of content, suspension of use, erasure, disclosure of records of third-party provision, or suspension of third-party provision (hereinafter referred to as Disclosure), we will conduct an internal review and respond without delay.
※Please note that depending on the content of the request, the Company may be unable to respond. In such cases, we will also provide the reason.
- If you wish to make a request for Disclosure, please follow the procedure below and submit your request by email. If there are deficiencies or missing information in the request, we may not be able to process it.
- Personal data obtained through the “Request Form for Disclosure of Personal Data” will be used solely for responding to the inquiry and will not be used for any other purpose.
【Inquiries Regarding Personal Data & Disclosure Requests】
Personal Data Related to the Employment Placement Business
Other Personal Data
【Accredited Personal Information Protection Organization and Complaint Contact】
※Only complaints related to the handling of personal information are accepted.