Privacy Policy

For the purposes of this Policy, “personal information” refers to “information relating to a living individual” as defined in Article 2 of the Act on the Protection of Personal Information, including information that can identify a specific individual—such as name, date of birth, address, and contact information—as well as information containing personal identification codes. It also includes sensitive personal information, such as health information, information regarding sexual orientation or sexual activity, and genetic information.

We collect personal information in an appropriate and fair manner using the following methods.

・Filling out the user registration form

・Entering information into the questionnaire and messaging features on this service

・Submission of identification documents, medical examination results, etc.

・Cookies and Other Tracking Technologies

We will use the personal information we collect for the following purposes.

・To provide, maintain, and improve this service

・For user authentication and identity verification

・To support donor-recipient matching

・To ensure safety by utilizing infectious disease test results, genetic information, and other data

・To process payments, billing, and refunds for paid services

・To provide information about our services, such as email newsletters and announcements about new features

・To respond to user inquiries and resolve issues

・To comply with laws and regulations or requests from government agencies

・Other purposes incidental to the purposes of use listed above

In accordance with Article 20 of the Act on the Protection of Personal Information (Handling of Sensitive Personal Information), we will handle sensitive personal information—such as health information, genetic information, and sexual orientation—only after obtaining the user’s consent. However, this does not apply in cases where consent is exempted by law.

Except in the cases listed below, we will not disclose personal information to third parties without first obtaining the user’s consent.

・When required by law

・When it is necessary to protect a person’s life, physical well-being, or property, and it is difficult to obtain the individual’s consent

・When it is particularly necessary to improve public health or promote the healthy development of children, and it is difficult to obtain the individual’s consent

・When cooperating with a national agency or local government entity, etc., and obtaining the individual’s consent could hinder the performance of the relevant duties

・When the company has publicly announced in advance that the purpose of use includes the provision of personal information to third parties and has filed a notification with the Personal Information Protection Commission (opt-out procedure)

*The minimum information required for matching users (such as nicknames, preferred family structure, and a brief donor profile) may be shared through user actions.

We may outsource certain operations, such as payment processing, identity verification, and server operations, to third-party vendors. In such cases, we carefully select our vendors and exercise appropriate oversight.

To prevent unauthorized access, leaks, damage, tampering, loss, and other such incidents, our company will implement the following security measures.

・Access Rights Management and Log Auditing

・Communication encryption using SSL/TLS, etc.

・Database Encryption and Segregated Management

・Anonymization and tokenization of sensitive information

・Development of internal policies and employee training

・Regular risk assessments and vulnerability assessments

When transferring users' personal information overseas, we will take appropriate measures (such as an adequacy determination or standard contractual clauses) to comply with the requirements of Article 28 of the Act on the Protection of Personal Information and Chapter of the GDPR.

We use cookies, web beacons, local storage, and other similar technologies to improve our services. Users can disable cookies by changing their browser settings; however, doing so may prevent them from using some features of our services.

Under the Act on the Protection of Personal Information and the GDPR, users may make the following requests regarding their personal information.

・Disclosure (including provision of copies)

・Corrections, Additions, and Deletions

・Suspension of Use, Deletion, and Cessation of Disclosure to Third Parties

・Data Portability (if subject to the GDPR)

・Restrictions on Processing and Objections

・For details on the claims process, please contact the office specified in Article 12.

When we receive a request, we will verify your identity using your driver's license, My Number Card, or similar documentation. If the request is made by a representative, you will be required to submit a power of attorney or similar document.

For inquiries, complaints, or consultations regarding personal information, please contact the following office.

SBC Co., Ltd. Data Protection Officer
E-mail: yushi2400@gmail.com

If you are under 18 years of age, you must obtain parental consent before using this service. If we determine that we cannot verify parental consent, we may refuse or suspend your use of the service.

We may revise this policy from time to time in response to amendments to the Act on the Protection of Personal Information or other laws and regulations, or changes to the content of our services. The revised policy will take effect when it is posted on this service.

This Policy is governed by Japanese law, and in the event of any dispute arising out of or in connection with this Policy, the Tokyo District Court shall have exclusive jurisdiction as the court of first instance.