Privacy Policy

Article 1 (Purpose)

These Regulations set forth the basic rules for the appropriate handling, use, and protection of personal information handled by Elastic LLC (hereinafter referred to as “the Company”), in accordance with the Company’s policies on the protection of personal and corporate information and applicable laws and regulations.

Article 2 (Definitions)

The terms used in these Regulations shall have the following meanings:

(1) Personal Information
Information relating to a living individual or an existing corporation, including names, dates of birth or establishment, and any other descriptions, numbers, symbols, codes, images, or sounds that can identify a specific individual or corporation.
This includes information that cannot identify an individual or corporation by itself but can be easily matched with other information to do so.
(2) Person
A specific individual or corporation identified by Personal Information.
(3) General Personal Information Protection Manager
A person appointed by the Representative Director who has overall responsibility and authority for the implementation and operation of these Regulations.
(4) Use
The processing or handling of Personal Information by the Company within the scope of its business operations.
(5) Provision
The disclosure or transfer of Personal Information held by the Company to a third party outside the Company.
(6) Entrustment
The entrusting of the handling of Personal Information held by the Company to a third party outside the Company, including but not limited to outsourcing operations such as shipping, system operation, or data processing.
(7) Third Party
Any individual, corporation, or organization other than the Company, excluding contractors entrusted with the handling of Personal Information under the Company’s supervision.

Article 3 (Scope of Application)

These Regulations shall apply to all Personal Information handled by the Company, regardless of whether such information is processed electronically or recorded in written or other tangible form.

Article 4 (Limitation on Scope of Acquisition)

Personal Information shall be acquired only within the scope of the Company’s business as stipulated in its Articles of Incorporation.
The purpose of use shall be clearly specified, and acquisition shall be limited to the extent necessary to achieve that purpose.

Article 5 (Methods of Acquisition)

Personal Information shall be acquired by lawful and fair means and shall not be obtained through deception or other improper methods.

Article 6 (Transfer and Transmission of Personal Information)

The transfer or transmission of Personal Information shall be carried out only by authorized personnel, in a necessary and appropriate manner, and only to the extent required for business operations, with adequate measures in place to prevent risks such as leakage, loss, unauthorized access, or misuse.

Article 7 (Purposes of Use)

Personal Information shall be used only for the following purposes:

To obtain opinions, exchange information, provide reports, and otherwise communicate in relation to the Company’s business operations, and to reflect such information in future business activities.
To conduct transactions based on contractual relationships, including but not limited to the purchase and sale of goods, outsourcing of services, and financial transactions conducted in the normal course of business.
To conduct advertising, promotional, and marketing activities related to the Company’s products or services, including the provision of information about products, services, or campaigns.
To communicate with users, customers, and business partners.
To collect quality-related information and feedback for development, improvement, and evaluation purposes.
Any purposes incidental or related to the above items.

Article 8 (Principle of Non-Provision to Third Parties)

As a general rule, the Company shall not provide Personal Information to Third Parties.
However, this shall not apply in any of the following cases:

Where provision is required by laws or regulations, or where disclosure is lawfully requested by a court or other government authority with legitimate jurisdiction.
Where provision is necessary for business operations and the prior consent of the Person has been obtained.
Where Personal Information is provided to a contractor as part of Entrustment, and the Company exercises appropriate supervision over such contractor.

Article 9 (Use or Provision Beyond the Stated Purpose)

Where Personal Information is to be used or provided beyond the scope of the purposes stated in Article 7 and none of the exceptions set forth in Article 8 apply, the Company shall notify the Person in advance in writing or by other appropriate means and shall obtain the prior consent of the Person.

Article 10 (Management and Accuracy of Personal Information)

The Company shall manage Personal Information accurately and keep it up to date to the extent necessary to achieve the stated purposes of use and shall delete or correct inaccurate information as appropriate.

Article 11 (Security Control Measures)

The Company shall implement appropriate organizational, physical, technical, and administrative security control measures to prevent unauthorized access, loss, destruction, falsification, or leakage of Personal Information.
However, no information security measures can guarantee absolute security.

Article 12 (Confidentiality Obligations of Personnel)

All officers, employees, and other persons engaged in the acquisition, use, provision, or handling of Personal Information in the course of the Company’s business shall comply with applicable laws and regulations, these Regulations, and other internal rules, and shall handle Personal Information with due care and confidentiality, including after termination of their relationship with the Company.

Article 13 (Retention Period)

Personal Information shall be retained only for the period necessary to achieve the purposes of use or as required by applicable laws and regulations.
Once the retention period has expired, the Personal Information shall be promptly deleted or disposed of.

Article 14 (Disclosure, Correction, and Suspension of Use)

Upon request from a Person, the Company shall, in accordance with applicable laws and regulations:
Disclose the Personal Information held about the Person;
Correct, add to, or delete inaccurate Personal Information;
Suspend the use of or delete Personal Information where it is handled in violation of applicable laws or these Regulations.
The Company may verify the identity of the requester before responding to such requests.

Article 15 (Handling of Personal Information of Minors)

When handling Personal Information of minors, the Company shall give special consideration to the protection of such information and, where required by law, obtain the consent of a parent or legal guardian.

Article 16 (Overseas Transfer)

If Personal Information is transferred to or processed in a foreign country, the Company shall take appropriate measures in accordance with applicable laws and regulations to ensure an adequate level of protection of Personal Information.

Article 17 (Contact for Inquiries)

Inquiries, requests, or complaints regarding the handling of Personal Information may be directed to the Company through the contact point separately designated on the Company’s website or other official communication channels.

Article 18 (Revision of These Regulations)

The Company may revise these Regulations as necessary to reflect changes in laws, regulations, or business operations.
Any revisions shall be made known through appropriate means.