Privacy Policy | StoreCRM – Shopify CRM & Marketing Automation

Date: July 11, 2023
Revised date: April 07, 2025 (address revision) GroovyMedia Inc.
Representative Director Shota Watanabe

GroovyMedia Inc. is engaged in system development, content production, and app provision (Saas) business. We recognize the importance of all personal information we provide for our business, and we believe that it is social responsibility to protect personal information. As a standard of behavior that all our employees should comply, we have established the following privacy policy and strive to handle and protect personal information safely and appropriately.

a) The Company shall acquire, use and provide appropriate personal information in consideration of the content and scale of the business, and shall not handle personal information beyond the scope necessary to achieve the specified purpose of use (for non-purpose use), and shall take measures for that purpose.

b) We will comply with laws and regulations regarding the handling of personal information, guidelines established by the government and other norms.

c) The Company shall take measures to prevent and correct unauthorized access to personal information, leakage, loss or damage of personal information.

d) We will endeavor to respond appropriately and promptly to complaints and consultations concerning the handling of personal information.

e) We will continuously improve our personal information protection management system.

GroovyMedia Inc.
Daiki Hishinuma, Manager, Complaints and Consultation Desk
City Mansion Akasaka 2F, 6-4-15 Akasaka, Minato-ku, Tokyo 107-0052
TEL: 03-4530-3079　Email: privacy@groovymedia.jp
(Reception hours: 10:00 to 18:00, except Saturdays, Sundays and holidays)

Handling of Personal Information of the Company

GroovyMedia Inc.
2F, City Mansion Akasaka, 6-4-15 Akasaka, Minato-ku, Tokyo
Representative Director Shota Watanabe

Director Daiki Hishinuma (Contact: “Complaints and Consultation Desk”)

(1) Personal information entrusted by the customer in the entrusted business
- To properly conduct contracted operations such as system development business, content production business, and app provision business
(2) Personal information about people who contact us by phone
- To respond to opinions and inquiries
(3) Personal information about applicants acquired from placement business operators
- To provide and contact recruitment information, etc., for recruitment selection
(4) Personal information about partner-company engineers
- For sales activities related to contracted software development and information processing work, and for selecting engineers

(1) Personal information about customers
- To provide products and services
- For other purposes of use you have individually consented to
(2) Personal information related to business partners
- To manage business partners, conduct business activities and conduct business operations related to transactions
(3) Personal information related to those who contact us
- To respond to opinions and inquiries
(4) Personal information about shareholders
- To conduct business related to shareholders, such as holding and managing the general meeting of shareholders, and sending shareholder benefits
(5) Personal information about applicants
- To provide and contact recruitment information, etc.
(6) Personal information about our employees
- For business communication, maintaining employee directories, and tracking work status
- To determine personnel selection, assignments, determining compensation, managing work conditions, payroll, and payment of compensation
- For health insurance, employees' pension insurance, employment insurance, appropriate health management, and personal number related administrative work prescribed by laws and regulations
- For our PR or advertising activities, etc., for welfare work
- For safety management of access and exit of facilities, information systems, etc.

Complaints and Consultation Desk

Currently, we are not the target company of the certified personal information protection organization.

a) Request for disclosure, etc.
Complaints and Consultation Desk
b) Forms of documents to be submitted when requesting disclosure, etc., and other forms of request for disclosure, etc.
Please bring the required documents directly to the Complaints and Consultation Desk below, or send them to its address by registered mail or courier. We will respond promptly and without delay. (Delivery fee will be borne by the person.) Please note that we cannot accept applications by telephone, e-mail or fax.)
1 "Request for disclosure, etc." designated by the Company※If it is not the original, please contact us. We will send it to you.
2 Identity verification documents
c) How to confirm that you are a person or agent
(1) If you apply by yourself, please submit the following documents 1) or 2).
- Public certificate (copy)
1) One of the following:
Driver's license, driver's history certificate, passport, personal number card (only on the face with name and photo), etc.
2) Two public certificates (without photos):
National health insurance card, copy of resident card, certificate of resident card, national pension book, insurance card for late-stage elderly healthcare, national government official cooperative association or local government official cooperative association, child support certificate etc.
(2) In the case of application by the agent, please submit all applicable documents below.
- Substitute verification documents
1) Legal representative
- Documents for verifying that you are a legal representative (e.g. family register, certificate of registration, etc.)
2) In the case of an agent by the delegation of the person
- A letter of attorney who sealed his/her seal
- Personal seal registration certificate
- Public certificate of agent (copy)
- Public certificate (copy)
c) Fees
For notification of purpose of use and disclosure, 1,000 yen will be charged per application. Please enclose a 1,000 yen postal money order to the mailing document. (If you subscribe via an app platform such as Shopify or Color Me Shop, billing is handled through that platform — please contact us.)

In order to ensure proper handling of personal data, we will formulate and comply with the personal information protection policy described in the company name, laws and regulations, matters related to safety management, and complaints consultation desk.
We formulate and comply with the handling rules of personal data for each stage of acquisition, use, storage, provision, removal and disposal.
In addition to establishing a person responsible for the handling of personal data, we clarify the scope of personal data handled by the employees and their employees, and establish a reporting system to the person responsible for the facts or signs that are in violation of laws and regulations. In addition, we conduct self-inspection on the handling status of personal data and conduct audits by other departments and external parties.
We will conduct regular education and training to employees about matters to be aware of the handling of personal data. In addition, we will conclude a contract with our employees regarding the confidentiality of personal data.
In the area where personal data is handled, we manage the equipment that employees enter and leave, and take measures to prevent unauthorized persons from accessing personal data. In addition, we take measures to prevent theft or loss of equipment, electronic media and documents handling personal data, and take measures to prevent theft or loss of such information, including the movement of the business sites, when carrying such equipment and electronic media, etc.
We will control access and limit the scope of personal information database etc. handled by the person in charge. In addition, we introduce a mechanism to protect information systems that handle personal data from unauthorized access or unauthorized software from external sources. We use a cloud service that has servers in foreign countries, and we confirm that the location of the server is equivalent to our country, or that it is in the EU or UK, or that the CBRP certification is obtained, and if none of them apply, we will take necessary and appropriate measures to ensure the safe management of personal data after understanding the system for the protection of personal information.

The following is the system of foreign countries and countries where personal data is provided.

United States of America https://www.ppc.go.jp/files/pdf/USA_report.pdf

Commonwealth of Australia https://www.ppc.go.jp/files/pdf/australia_report.pdf

Socialist Republic of Vietnam https://www.ppc.go.jp/files/pdf/vietnam_report.pdf

Canada https://www.ppc.go.jp/files/pdf/canada_report.pdf