1． In the case that customers' individual information is collected, used, or offered, during the process of carrying out operations, the Company shall clarify the purpose and limit its usage to the achievement of the stated purpose. The Company also take measures to prevent the use of such information for purposes other than those stated.

2． The Company shall comply with laws and regulations relating to protection of personal information and other guidelines which are set by the government.

3． The Company will select companies and/or individuals who meet the required management standards, sign a contract and take appropriate measures with the personal information being entrusted (full or in part) to the Company.

4． The Company shall take all reasonable and appropriate measures to prevent and/or correct any leak, loss, or damage of personal information, in addition to taking safety measures.

5． The Company will respond to requests for disclosure of personal information from the person who entrusted the personal information.

6． The Company has a consultation desk set up with people in charge to respond rapidly and sincerely to requests and complaints in regard to personal information we collect and use.

7． The Company, for the purpose of proper handling of the personal information acquired, shall strive to continuously improve and strengthen its Personal Information Protection Management System.

The Company is in compliance with the Japan Industrial Standards JISQ15001- 2017 that relates to the safeguarding of personal information. The handling of personal information and other items are posted in detail on the related page.

Purposes of Use of Personal Information Collected by Us

The main purposes for which we use the personal information we collect are as follows:
- To respond to inquiries regarding recruitment
- To respond to other inquiries
- To carry out our core business operations, such as system development, maintenance, and sales
- To handle inbound and outbound calls in our call center business
- To contact companies or their representatives in connection with sales activities for related services

Security Control Measures

With respect to the handling of personal information, we have established and operate the following security control measures.
1． Establishment of Rules for the Handling of Personal Information
・We have established internal rules that identify risks at each stage of the personal information lifecycle—acquisition, use, storage, provision, and deletion/disposal—and that establish and maintain procedures for taking measures appropriate to each risk.
2． Organizational Security Control Measures
・We have appointed a person responsible for the handling of personal information (Personal Information Protection Manager).
・We have clearly defined the employees who handle personal information and the scope of the personal information handled by such employees.　
・We have established a reporting and communication system to notify the responsible person in the event that a leakage of personal information, or any indication thereof, is identified.
・We conduct periodic self-inspections of the status of personal information handling, as well as internal audits by the audit department.
3． Personnel Security Control Measures
・We provide employees with regular training on matters to be observed regarding the handling of personal information.
・We have included provisions on the confidentiality of personal information in our work regulations and require employees to sign confidentiality agreements.
4． Physical Security Control Measures
・In areas where personal information is handled, we control the entry and exit of employees, restrict the connection of personal devices and equipment to the network, and implement measures to prevent unauthorized persons from viewing personal information.
・We implement measures to prevent the theft, loss, etc. of devices, electronic media, and documents that handle personal information.
5． Technical Security Control Measures
・We have introduced mechanisms to protect systems that handle personal information from unauthorized external access and malicious software.

Enacted: November 11th, 2021
Revised: November 11th, 2021

iTSherpa Co., Ltd.
Yasuhisa Kawano, President and CEO, Representative Director

Consultation desk for inquiries: Personal Information Protection Department

Mainichi Fukuoka Kaikan 8F, 1-16-1 Tenjin, Chuo-ku, Fukuoka City, 810-0001
Telephone: 092-737-5755 (10am to 6pm)
* This is a translation of the original iTSherpa Co., Ltd. Personal Information Protection Policy in Japanese. If there is any conflict between the original and the translation, the original shall prevail.