1. Basic Policy
nonat Inc. (Address: Kawaharu Building 202, 5-15 Soden Sakaemachi, Gifu City, Gifu, Japan; Representative: Keisuke Ito) (“we,” “us,” or the “Company”) complies with the Act on the Protection of Personal Information of Japan (Act No. 57 of 2003) (the “APPI”), as well as other applicable laws, regulations, and guidelines, including the Guidelines for the Safety Management of Medical Information Systems and the Ethical Guidelines for Life Science and Medical Research Involving Human Subjects.
We maintain an appropriate security management system and take technical, physical, and organizational security measures to prevent the leakage, loss, or damage of personal data.
We continuously review and improve our handling of personal data in light of our business activities, social conditions, and technological developments.
2. Definitions
For the purposes of this Privacy Policy, the following terms have the meanings set out below.
“Personal Information” means information relating to a living individual that can identify a specific individual, such as a name, address, or email address. This also includes information that can easily be matched with other information to identify a specific individual.
“Anonymously Processed Information” means information created by processing personal information in a way that irreversibly prevents the identification of a specific individual, even when combined with other information.
“Personally Referable Information” means information relating to a specific individual that does not itself constitute personal information, such as attribute information or browsing history.
3. Personal Information We Collect
We primarily collect personal information in the following situations.
When you submit information through web forms or inquiries, we may collect your name, address, contact details, company or organization name, inquiry details, and any other information entered into the form.
When you register for our services or use our services or website, we may collect your name, address, contact details, other registration information, login information, profile information, usage logs, device information, sensor data, and other information related to your use of our services.
In connection with internet usage, we may collect, through Cookies or similar technologies, or receive from third parties, information such as website browsing history, search keywords, ad views and clicks, browsing duration, browsing method including browser type, device environment, Cookie information, IP address, and device identifiers.
When transactions are conducted in relation to our services or other business activities, we may collect payment information and contract information relating to such transactions.
When you participate in clinical research, we may collect information such as age, gestational age, vital signs, fetal signals, and similar data.
For recruitment purposes, we may collect applicant information such as name, address, age, gender, date of birth, contact details, and other information included in application materials.
We may also collect information relating to communications between us and job applicants made during the recruitment process.
If we collect sensitive personal information as defined under the APPI, we will do so in accordance with the procedures required by applicable laws and regulations.
4. Purposes of Use of Personal Information
We use personal information for the following purposes:
Provision, operation, and improvement of our services
User support and response to inquiries
Conduct of clinical research, data analysis, and academic publication
Research and development of medical AI models and medical devices, and safety evaluation thereof
Marketing and public relations activities, only where consent has been obtained
Prevention of and response to violations of our terms of use or other misconduct
Compliance with legal obligations and reporting to governmental authorities or regulatory bodies
Recruitment screening, administrative communications with applicants, notification of screening results, and management and improvement of the recruitment process
5. Security Control Measures
We take necessary and appropriate measures to prevent leakage, loss, or damage of personal information and otherwise ensure the secure management of personal information. For details regarding the security control measures we take, please contact us at the inquiry desk set out in Section 12.
6. Provision to Third Parties, Outsourcing, and Joint Use
We do not provide personal data to any third party without the consent of the individual concerned, except where permitted by applicable laws and regulations.
Where we outsource the handling of personal data to external service providers, we enter into appropriate agreements with them and supervise them as necessary.
Where we engage in joint use of personal information, we will disclose the fact of such joint use, the purposes of use, the categories of information to be jointly used, the scope of joint users, and the party responsible for managing such joint use.
7. Special Provisions for Clinical Research
With respect to personal information collected through participation in clinical research, in addition to this Privacy Policy, we collect and handle such information in accordance with research protocols approved by the Ethics Review Committee of the Graduate School of Medicine, Gifu University.
At the analysis stage, we take measures such as reversible anonymization so that research participants cannot be directly identified.
When publishing research results, we take sufficient care to ensure that no individual can be identified.
Research participants may exercise rights such as withdrawal of consent and requests for deletion of data. If we are unable to comply with such a request, we will explain the reason.
8. Use of Cookies and External Data Transmission Services
This website may use Cookies, web beacons, and similar technologies for the purposes of access analysis and improving user convenience. As a result, certain information may be transmitted from your device to providers of external services.
Main analytics tools include Google Analytics and Matomo Analytics.
You may disable Cookies and similar technologies through your browser settings. However, please note that some functions of this website may not be available if such technologies are disabled.
9. Retention Period of Personal Data
We retain personal data for the period necessary to achieve the relevant purposes of use, or for the period required by applicable laws and regulations. After the applicable retention period has expired, we will appropriately delete or dispose of such data.
10. Your Rights
You have the right to make the following requests, subject to limitations under applicable laws and regulations. If you wish to exercise any of these rights, please contact us at the inquiry desk set out in Section 12.
Notification of the purposes of use of retained personal data
Access to retained personal data
Access to records of provision of personal data to third parties
Correction, addition, or deletion of retained personal data
Suspension of use, deletion, or suspension of provision to third parties of retained personal data
For requests for notification of the purposes of use of retained personal data and for disclosure of retained personal data, a fee of JPY 1,000 (tax included) will be charged per request. Please remit the fee to the bank account designated by us. Any bank transfer fees shall be borne by the requester.
11. Revisions to This Privacy Policy
We may revise this Privacy Policy from time to time due to amendments to applicable laws and regulations, changes to our services, or other reasons. Any material changes will be announced in advance on this website.
12. Contact Information
Personal Information Protection Manager
nonat Inc.
Address: Kawaharu Building 202, 5-15 Soden Sakaemachi, Gifu City, Gifu, Japan
Email: info@nonat.co.jp
Business Hours: Weekdays 10:00-17:00 (excluding public holidays and the New Year holidays)
13. Complaint Handling Organization
If we are a member of an authorized personal information protection organization, we will separately publish its name and the contact information for filing complaints.