Privacy Policy

Protecting personal information is a fundamental aspect of the business activities of Cresco, Ltd., (hereinafter “Cresco” or “the Company”) which the Company also views as a social responsibility. Accordingly, Cresco has in place a unified Compliance Program under which all officers and employees implement procedures to ensure the correct handling of such information. This Compliance Program outlines principles and procedures regarding the gathering, use, and supply of personal information. Additional educational, training, and auditing measures regarding the implementation of our compliance procedures are as follows.

(1)　Gathering of Personal Information

Personal information will be collected only with the approval of each individual concerned, clarifying the purpose of its use and in a fair and legal manner. Sensitive or potentially damaging information will only be gathered with the express permission of the individuals concerned or if required by legal or similar directives.

Any information being gathered shall be kept in an accurate and updated condition.

(2)　The Purpose and Intended use of Personal Information

The purpose and intended use of any personal information being gathered will be made clear, and information will only be gathered to the extent necessary to meet the expressed purpose.

The main purpose and intended uses are as follows:

• Carrying out work commissioned by customers and pertinent administrative work
• Administrative work pertaining to recruitment of the Company's employees and personal affairs
• Contracting health/welfare programs of the Company’s employees
• Business communication to outsourcers and pertinent administrative work

(3)　Supply of Personal Information

Cresco provides no personal information to any third party except in the following cases:

• When Cresco already has consent of the individuals concerned
• When Cresco carries out commissioned work to the extent of meeting the expressed purpose, after appropriate safe management measures are taken, such as signing a confidential agreement
• When based on laws such as the Act for the Protection of Personal Information

When handling of personal information is outsourced, such work shall be performed under the strict supervision of the Company.

(4)　Safety Management Measures

Cresco takes all measures to prevent unauthorized access to, loss, alteration, or leaking of personal information.

In carrying out operations involving the handling of personal information, Cresco will observe all laws and regulations regarding the handling of such information, and will observe the requirements of the JIS Q150001 Personal Information Protection Management System and industry guidelines. Moreover, Cresco will also take reasonable safety measures and remedial actions to ensure the safety of personal information by carefully observing the policies outlined in the Company’s Compliance Program.

(5)　Inquiry of Disclosures, Revisions, Removals and Termination of Use, etc.

Regarding the Company’s handling of personal information, complaints from individuals, and Cresco’s inquiry counter, etc., Cresco will post and publish on its website.

In the event of inquiries from individuals relating to the Company’s disclosure of personal information, Cresco will endeavor to respond rapidly and appropriately in line with generally accepted practice.

(6)　Ongoing Improvement of the Personal Information Protection Management System

Cresco will implement and comply with the Personal Information Protection Management System with a person appointed responsible for each unit. The Company will also endeavor to continuously improve the system, through periodic audits and other measures.