Eat Factory Holdings Co., Ltd. (hereinafter referred to as “the Company”) recognizes that the appropriate management of personal information is an important responsibility and therefore handles personal information according to the following policy.

Handling of personal information The Company will acquire personal information through fair and legal means.

Purpose of use The Company will only use personal information for the purpose stated at the time of acquisition and to the extent required for the execution of business. If the Company shares personal information with a third party or entrusts handling of personal information to a third party, the Company will conduct a strict preliminary review of the third party and provide appropriate supervision to ensure confidentiality.

Disclosures and provisions to third parties Except as required by law, the Company will not disclose or provide personal information to a third party without the prior consent of the individual.

Safety management The Company will maintain the accuracy of personal information and securely manage it. To prevent the loss, destruction, falsification, or leakage of personal information, the Company will take appropriate information security measures against unauthorized access, computer viruses, and the like.

Notification and disclosure of purpose of use When the Company receives a request for notification or disclosure of the purpose of use of personal information from an individual for the information in its possession, the Company will respond without delay after confirming the identity of the individual. Furthermore, if a fee is charged for a response, the Company will inform the individual in advance.

Corrections, additions, and deletions When the Company receives a request from an individual to correct, add, or delete personal information in its possession, the Company will immediately correct, add, or delete the information after confirming the identity of the individual if the information is inaccurate.

Suspension of use and erasure When the Company receives a request from an individual to suspend the use of or erase personal information in its possession, the Company will immediately suspend the use of or erase the information after confirming the identity of the individual.

Organization and structure The Company will appoint a personal information manager and implement appropriate management of personal information. The Company will suitably train its executives and employees on the protection and appropriate management of personal information, ensuring that personal information is handled appropriately in its daily business.