Privacy Policy

Name

ASPIRE TOKYO Inc.

Address

R-Cube Aoyama 3F, 1-3-1 Kita-Aoyama, Minato-ku, Tokyo 107-0061, Japan

Legal representative

Provided promptly on request (please contact us as described in "11. Contact").

We collect the following information.

• When you contact us: your name, email address, telephone number (optional), the content of your inquiry, the work or artist you are asking about, the page you were viewing, and your display language
• When you subscribe to our newsletter: your email address, display language, and the page from which you subscribed
• When you register as a member: your name, email address, and display language (the password you use to log in is stored in a form that cannot be converted back into the original, so even we cannot know what it is)
• When you purchase a work: your name, address, telephone number, email address, delivery address, and transaction details (the work, price, and records of payment and delivery)
• When you consult us about selling or consigning a work: your name, address, occupation, age, and other details required for verification under applicable law
• When you browse the Site: pages viewed, date and time of viewing, referrer, device and browser type, approximate location (country or region), IP address, and identifiers such as cookies (see "6. Analytics and cookies")

We use the information we collect to:

• Respond to your inquiries and communicate with you about them
• Send our newsletter (announcements of new works and exhibitions)
• Authenticate members, present works and information for members, and provide member services
• Conclude and perform contracts for the sale of works (quotations, invoicing, payment confirmation, shipping and delivery), issue certificates, and contact you after a transaction
• Carry out verification and record-keeping required by law (such as verifying the other party to a transaction and keeping transaction records)
• Analyze how the Site is used and improve its presentation and content
• Prevent misuse and operate the Site securely

Information you provide in an inquiry is used only to respond to that inquiry and to communicate with you about it (including the purchase procedure, if you go on to buy a work). It is not used for other purposes, such as sending our newsletter. If we change the purposes of use, we will publish the new purposes on the Site.

We do not provide personal data to third parties without your consent, except in the following cases:

• Where required by law
• Where necessary to protect a person's life, body, or property and it is difficult to obtain your consent
• Where especially necessary to improve public health or promote the sound growth of children and it is difficult to obtain your consent
• Where necessary to cooperate with a national or local government body, or a party entrusted by one, in carrying out duties prescribed by law, and obtaining your consent would likely interfere with those duties
• Where we entrust the handling of personal data as described in "5. Service providers and use of overseas providers"

If we need to inform an artist or owner of a work of a purchaser's name or other details, we will obtain the purchaser's consent in advance.

We may entrust all or part of the handling of personal information to outside service providers to the extent necessary to achieve the purposes of use (for example, building and operating the Site, storing data, sending email, and shipping works). We select such providers carefully and supervise them as necessary and appropriate.

We use cloud services provided by companies in the United States to deliver the Site, store data, send email, and analyze usage, so personal information may be handled in the United States. These providers maintain systems that meet the standards set by the Personal Information Protection Commission of Japan, and we take necessary and appropriate measures to ensure that your information is handled properly. On request, we will promptly provide details of these measures and information about the personal information protection system in the United States.

We use the following tools to understand how the Site is used and to improve it.

• Google Analytics (Google LLC): uses cookies to collect the pages you view, time spent, referrer, approximate location, device type, and similar information. This information is sent to Google's servers and handled in accordance with Google's policies (https://policies.google.com/technologies/partner-sites). We receive statistical information only, which does not include information that directly identifies you, such as your name or email address.
• Vercel Web Analytics (Vercel Inc.): aggregates the pages you view, referrer, country, device type, and similar information without using cookies. It is not used to identify individuals.

If you visit from the European Economic Area, the United Kingdom, or Switzerland, we do not load either tool until you give your consent. Visitors from other regions are measured from the time they view the Site. To stop measurement, choose "Decline" under "Analytics settings" in the Site's footer. From then on, neither tool is loaded in that browser and no information is sent. For Google Analytics, you can also use the Google Analytics Opt-out Browser Add-on (https://tools.google.com/dlpage/gaoptout). If your browser settings do not allow browser storage (localStorage), a choice made under "Analytics settings" applies only while that page remains open.

A cookie is used to keep members signed in. Your browser's storage (localStorage) is used to remember your consent choice and whether you have signed in as a member on this device (so that registered members are shown “Log In” rather than “Sign Up”; it contains no name or other details). When you open the link in a registration or password-reset email, the information in that link is kept temporarily in the same tab's storage (sessionStorage) until you have set your password.

We take the following measures to prevent the leakage, loss, or damage of personal data and otherwise keep it secure.

• Basic policy: we have established this Policy, which sets out proper handling and our contact point for inquiries.
• Handling rules: we have defined how personal data is handled, and who is responsible, at each stage of collection, use, storage, disclosure, and deletion.
• Organizational measures: we have appointed a person responsible, limited who may handle personal data and to what extent, and set up a system for reporting any breach of the law or this Policy.
• Human measures: we inform and train the people who handle personal data about the points to observe.
• Physical measures: we control the areas where personal data is handled and take steps to prevent the theft or loss of equipment and documents.
• Technical measures: we restrict access to authorized persons and protect against unauthorized external access through encrypted communication and access controls.
• Understanding the external environment: we take security measures based on an understanding of the personal information protection system of the United States, where personal data is handled.

• Inquiry information: for as long as needed to respond and communicate with you about the inquiry
• Newsletter information: until you ask us to stop sending it
• Member information: until you ask to withdraw from membership
• Information from sign-up requests that were not completed (name and email address): 7 days from the request
• Transaction records: for the period required by law

We promptly delete personal data that is no longer needed.

You may request notification of the purposes of use, disclosure (including disclosure of records of provision to third parties), correction, addition, or deletion, suspension of use or erasure, and suspension of provision to third parties, with respect to the personal data we hold about you.

Please send your request by email to the contact point in "11. Contact". After confirming that the request comes from you or your authorized representative, we will respond promptly in accordance with the law. Disclosure will be made by email or in writing, as you specify. We do not charge a fee.

You can stop receiving our newsletter at any time by contacting the same contact point or by following the instructions in the newsletter email.

Where the General Data Protection Regulation (GDPR) or equivalent UK law applies, we act as the controller of your personal data and handle it as follows.

• Legal bases: responding to inquiries and performing contracts (including steps taken before entering into a contract), compliance with legal obligations, our legitimate interests (operating and improving the Site securely), and your consent (for the newsletter and analytics)
• Your rights: access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent (withdrawal does not affect the lawfulness of processing carried out before it). You may also lodge a complaint with the supervisory authority in your country.
• International transfers: Japan is recognized by the European Commission and the UK government as ensuring an adequate level of data protection. Transfers to other countries, such as the United States, are made on the basis of appropriate safeguards.

Please direct inquiries, requests, and complaints regarding the handling of personal information to:

Contact

ASPIRE TOKYO Inc., Personal Information Inquiries

Address

R-Cube Aoyama 3F, 1-3-1 Kita-Aoyama, Minato-ku, Tokyo 107-0061, Japan

Email

keiko.matsunaga@aspire-tokyo.com

We may revise this Policy in response to changes in the law or to the Site. The revised Policy takes effect when it is posted on the Site. We will announce significant changes on the Site.