Privacy Policy

MISUMI Group Inc. (hereinafter referred to as the “Company”) and the subsidiaries in Japan listed under “Personal Information Handling Business Operators” below (hereinafter collectively referred to as the “Group Companies”) hereby establish this Privacy Policy (hereinafter referred to as this “Policy”) as set forth below and shall handle personal information appropriately in accordance with this Policy. The meanings of the terms used in this Policy shall conform to the Act on the Protection of Personal Information (hereinafter referred to as the “APPI”).

The Company shall comply with this Policy, the APPI and other applicable laws and regulations, as well as guidelines issued by the Personal Information Protection Commission, relevant ministries and agencies, and other applicable guidelines, and shall handle personal information appropriately and securely.

When this Policy is applied to personal information acquired by a Group Company other than the Company, references to the “Company” shall be read as references to the Group Company that acquired the relevant personal information.

MISUMI Group Inc.
1-6-5 Kudan-minami, Chiyoda-ku, Tokyo 102-8583, Japan
Representative Director and President: Arata Shimizu

MISUMI Corporation
1-6-5 Kudan-minami, Chiyoda-ku, Tokyo 102-8583, Japan
Representative Director and President: Arata Shimizu

Suruga Production Platform Co., Ltd.
505 Nanatsushinya, Shimizu-ku, Shizuoka-shi, Shizuoka 424-8566, Japan
Representative Director and President: Hideyoshi Shoji

Suruga Seiki Co., Ltd.
505 Nanatsushinya, Shimizu-ku, Shizuoka-shi, Shizuoka 424-8566, Japan
Representative Director and President: Nobumasa Watanabe

DAISEKI Co., Ltd.
16F, Kobe Commerce, Industry and Trade Center Building, 5-1-14 Hamabedori, Chuo-ku, Kobe-shi, Hyogo 651-0083, Japan
Representative Director and President: Takahiro Igarashi

Mishima Seiki Co., Ltd.
580-49 Tokura, Shimizu-cho, Sunto-gun, Shizuoka 411-0917, Japan
Representative Director and President: Hideki Hori

Except as otherwise permitted under the APPI, when acquiring personal information, the Company shall publish or notify the purpose of use, including publication through this Policy. When acquiring personal information directly from an individual through an agreement or other written document, the Company shall state the purpose of use in advance, unless the purpose of use is evident from the circumstances of acquisition, and shall acquire the personal information by lawful and fair means.

The Company shall use the personal information it collects for the purposes of use notified in advance or set forth in “Purposes of Use of Personal Information”. Where a Group Company other than the Company acquires personal information, references to the “Company” in the purposes of use shall be read as references to the relevant Group Company. Unless the individual has given consent, the Company shall not use personal information beyond the scope necessary to achieve those purposes. The Company shall comply with applicable laws and regulations and use personal information appropriately by lawful and fair means. The Company may change a purpose of use to the extent reasonably considered relevant to the original purpose and, if it does so, shall notify the individual or publicly announce the change.

Except in any of the following cases, the Company shall not provide personal data to a third party without obtaining the individual’s prior consent:

Notwithstanding the foregoing, the Company may provide personal information it handles in any of the following cases:

When outsourcing the handling of personal data, the Company shall establish criteria for selecting service providers, select an appropriate service provider, enter into an outsourcing agreement, confirm the service provider’s information management system, including the status of its handling of personal data, and exercise necessary and appropriate supervision over the service provider.

The Company jointly uses personal data with the persons specified in “Joint Use of Personal Data”.

The Company takes necessary and appropriate measures to prevent leakage, loss or damage of personal data and otherwise ensure the security of personal data. An overview of the security control measures implemented by the Company is set forth below.

To ensure the proper handling of personal data, the Company has established policies concerning compliance with relevant laws, regulations and guidelines, security control measures, and contact points for inquiries and complaints.

The Company has established an internal responsibility framework and other rules to ensure that personal data is appropriately acquired, used, stored, provided, deleted and disposed of.

The Company has established internal rules, including an Information Security Basic Policy, Information Security Guidelines and rules for handling personal information, and handles personal data appropriately in accordance with those rules. The Company also appoints persons responsible for handling personal information, periodically reviews the status of personal data handling, and maintains a system for responding to data leakage and other incidents.

The Company regularly provides employees with information security training, including training on the handling of personal information, to ensure awareness of and compliance with the proper handling of personal data. When personal information is provided to a service provider or a joint user pursuant to Sections 4 or 5, the Company manages and supervises the relevant service provider or joint user to ensure that personal data is handled appropriately.

The Company controls access to offices where personal data is handled by using security cards and takes measures to prevent theft, loss and similar incidents, including keeping devices and electronic media containing personal data locked. The Company also implements encryption, password protection and other measures so that personal data cannot be easily identified even if theft or loss occurs. When deleting personal data or disposing of devices or electronic media on which personal data is recorded, the Company uses methods that make restoration impossible.

The Company controls access to personal information databases and similar resources through access permissions in order to limit the persons authorized to handle them, and identifies and authenticates persons accessing information systems that handle personal data. The Company also uses mechanisms to protect such information systems from unauthorized external access and malicious software and implements measures to prevent information leakage and similar incidents.

Where personal data is handled in a foreign country, the Company implements security control measures after understanding the systems for the protection of personal information in that country.

When the Company receives a request under the APPI concerning retained personal data, including notification of the purpose of use; disclosure of personal information or records of provision to third parties; correction, addition or deletion; suspension of use; or suspension of provision to third parties, the Company shall verify that the request is made by the individual concerned and respond without delay. This shall not apply where the Company is not obligated to take the requested action under the APPI or other laws or regulations.

The Company may charge its prescribed fee for notification of the purpose of use and for disclosure of retained personal data, including records of provision to third parties.

To the extent permitted under the APPI, a requester may request that the Company notify the purpose of use or disclose retained personal data or records of provision to third parties. However, the Company may decline disclosure in any of the following cases:

A requester may request that the Company correct, add to or delete retained personal data. In such a case, the Company shall conduct an investigation without delay to the extent necessary to achieve the purpose of use and, based on the results, correct, add to or delete the retained personal data to the extent permitted under the APPI.

A requester may request suspension of the use of retained personal data or suspension of its provision to third parties. In such a case, the Company shall respond appropriately in accordance with the APPI.

The Company may use cookies (Note 1), web beacons (Note 2) and IP addresses (Note 3) on its websites for the following purposes:

You may refuse the Company’s use of cookies and web beacons by disabling cookies in your browser settings. However, doing so may prevent you from using all or part of the services available on the website.

For instructions on disabling cookies and opting out of tracking, please refer to your browser’s help function. Information concerning commonly used browsers and how to change cookie settings is available at the following URLs:

Certain pages of the Company’s websites use Google Analytics, a service provided by Google LLC (hereinafter referred to as “Google”), to understand how visitors use the websites. Google Analytics uses cookies and other identifiers to collect, record and analyze information relating to browsing activity on the Company’s websites. The Company receives the resulting analysis from Google and uses it to understand website usage. The visitor information collected, recorded and analyzed by Google Analytics does not include information that identifies a specific individual. Such information is managed by Google in accordance with its privacy policy.

Visitors may stop the collection of their information resulting from the Company’s use of Google Analytics by disabling Google Analytics through a browser add-on. To do so, download and install the “Google Analytics Opt-out Browser Add-on” from Google’s download page and change the relevant browser add-on settings. Disabling Google Analytics will also disable Google Analytics on websites other than the Company’s websites that the visitor accesses. Google Analytics may be re-enabled by changing the browser add-on settings again. For further information, please refer to the Google Analytics Terms of Service and Google’s Privacy Policy.

The Company cannot be responsible for the security of visitors’ personal information on websites other than the Company’s websites that are linked from the Company’s websites. Please direct inquiries concerning the handling of personal data on such third-party websites to the relevant website operator.

Inquiries concerning personal information are accepted through the following contact points.

Same as the customer order contact point

Same as the customer order contact point

Human Resources and General Affairs Department, Suruga Production Platform Co., Ltd.

Marketing Center, Suruga Seiki Co., Ltd.

Corporate Administration Office, DAISEKI Co., Ltd.

The Company may amend this Policy from time to time. Any amendments will be posted on the website. Please review the most recent version of this Policy posted on the website.

Last updated: October 15, 2026