AsCAL® Privacy Policy

Last Updated: September 25, 2026

Article 1 (Information We Collect)

In providing the Service, the Company may collect the following information:

1. User Information
   Name, email address, telephone number, and other information provided by users when registering an account or using the Service.
2. Reservation and Service Usage Information
   The AsCAL® LOCK used, reservation date and time, scheduled pick-up date and time, number of items, service fees, cancellation information, usage history, and other information relating to the use of the Service.
3. Payment-Related Information
   Payment status, transaction amount, transaction identifiers, and other information necessary for payment processing and transaction management in connection with the Service.
4. LOCK Partner Information
   Business name, store or facility name, address, contact information, information concerning responsible personnel, business hours, storage capacity, information required for payments and settlements, and other information necessary for the registration and operation of an AsCAL® LOCK.
5. Inquiry and Support Information
   Information contained in inquiries and consultations, reports concerning accidents, loss or damage, communications with the Company, and other information necessary for customer support.
6. Device and Usage Information
   IP address, cookies, device information, access dates and times, browsing and operation history, and other information relating to the use of the Company's website or the Service.

Article 2 (How We Collect Information)

The Company may collect information through the following methods:

1. Information directly provided by users when registering for the Service, making reservations or payments, submitting inquiries, or otherwise using the Service.
2. Information provided by LOCK Partners when applying for registration, registering or updating LOCK information, or communicating with the Company.
3. Information automatically collected through the system when users access or use the Service.
4. Information collected through cookies and similar technologies.
5. Information lawfully obtained from payment service providers and other external services necessary for the provision of the Service.

Article 3 (Purposes of Use)

The Company uses the information it collects for the following purposes:

1. To provide, operate, and manage the Service.
2. To register users, verify identities, and manage user accounts.
3. To manage and share information necessary for searching for, reserving, receiving, storing, and returning luggage at AsCAL® LOCK locations.
4. To process service fees, payments, cancellations, refunds, and other transactions.
5. To register and review LOCK Partners, publish LOCK information, manage LOCK operations, and settle payments to LOCK Partners.
6. To respond to inquiries, consultations, loss, damage, and other issues relating to the Service.
7. To prevent unauthorized or fraudulent use of the Service, maintain security, and respond to violations of the Terms of Service or other applicable rules.
8. To understand and analyze usage of the Service, improve the Service, and plan or develop new services.
9. To provide important notices, maintenance information, and other communications necessary for the operation of the Service.
10. Where user consent or another lawful basis exists, to provide information regarding campaigns, services, and other promotional communications.
11. To comply with legal obligations, respond to disputes and other issues, and exercise or protect the rights of the Company.

Article 4 (Sharing Information with AsCAL® LOCKs)

1. The Company may provide the LOCK Partner operating the AsCAL® LOCK reserved by a user with reservation information and other information necessary for receiving, storing, and returning the user's luggage and otherwise fulfilling the reservation.
2. LOCK Partners shall handle such information only to the extent necessary for luggage handover and LOCK operations. The Company requires LOCK Partners to appropriately manage such information in accordance with the terms and rules applicable to LOCK Partners.
3. The Company endeavors to limit information provided to LOCK Partners to the extent necessary to confirm reservations and provide the Service.

Article 5 (Provision of Personal Data to Third Parties)

The Company will not provide personal data to third parties without the prior consent of the individual, except in the following circumstances:

1. Where required or permitted by applicable laws or regulations.
2. Where it is necessary to protect a person's life, body, or property and obtaining the individual's consent is difficult.
3. Where it is particularly necessary to improve public health or promote the sound development of children and obtaining the individual's consent is difficult.
4. Where cooperation is necessary for a national government agency, local government, or a person entrusted by such authority to perform duties prescribed by law, and obtaining the individual's consent may interfere with the performance of those duties.
5. In any other circumstances in which disclosure to a third party is permitted under the Act on the Protection of Personal Information or other applicable laws and regulations.

Information provided to LOCK Partners pursuant to the preceding Article will be handled in accordance with applicable laws and regulations and only to the extent necessary to provide the Service.

Article 6 (Outsourcing)

The Company may outsource all or part of the operations necessary to provide the Service, including payment processing, system operation, data management, email delivery, customer support, and other related operations, to external service providers.

In such cases, the Company will exercise necessary and appropriate supervision over the relevant service providers, including through appropriate selection procedures and contractual arrangements, to ensure that personal data is handled appropriately.

Article 7 (Security Measures)

The Company implements necessary and appropriate security measures to prevent unauthorized access to personal data, leakage, loss, damage, or other improper handling, and to otherwise appropriately manage personal data.

The Company also provides necessary and appropriate management and supervision of officers, employees, contractors, and other persons who handle personal data, according to the nature and circumstances of such handling.

Article 8 (Use of Cookies and Similar Technologies)

1. The Company's website and the Service may use cookies and similar technologies for purposes including improving convenience, understanding usage, improving the Service, and maintaining security.
2. Through these technologies, the Company may collect IP addresses, device information, browsing and operation history, and other information relating to the use of the Service.
3. Information collected through cookies or similar technologies may constitute “Personally Referable Information” (kojin kanren joho) under Japanese law, even where such information alone does not identify a specific individual. Where such information can be readily cross-referenced with other information to identify a specific individual, the Company will handle it as personal information in accordance with applicable law.
4. Users may be able to disable cookies through their browser or device settings. However, doing so may prevent certain functions of the Service or the Company's website from operating properly.

Article 9 (Requests Regarding Retained Personal Data)

1. In accordance with the Act on the Protection of Personal Information and other applicable laws and regulations, an individual may request notification of the purpose of use, disclosure, correction, addition or deletion, suspension of use, erasure, or suspension of provision to third parties with respect to retained personal data concerning that individual held by the Company.
2. Upon receiving such a request, the Company will verify the identity of the person making the request and respond appropriately in accordance with applicable laws and regulations.
3. The Company may decline all or part of a request where it is not legally required to comply or where there is another legally permitted reason not to comply with the request.
4. For information regarding procedures for such requests, please contact the inquiry desk specified in Article 11.

Article 10 (Retention of Information)

The Company retains collected information for the period necessary to achieve the purposes described in this Policy, including providing the Service, managing transactions, responding to inquiries, complying with legal obligations, and responding to disputes.

When information is no longer required to be retained, the Company will delete, erase, anonymize, or otherwise appropriately dispose of such information, except where continued retention is required by law or is otherwise justified by a legitimate reason.

Article 11 (Contact Information)

For inquiries regarding this Policy, the handling of personal information, or requests relating to retained personal data, please contact:

Article 12 (Changes to this Policy)

1. The Company may amend this Policy as necessary due to changes in applicable laws or regulations, changes to the Service, changes in the manner in which personal information is handled, or other circumstances.
2. If this Policy is amended, the Company will publish the revised Policy through the Service, the Company's website, or another appropriate method.
3. For changes that may materially affect users or other individuals, the Company will provide notice through the Service or by another appropriate method as necessary.